Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.Encoder.38712

Added to the Dr.Web virus database: 2024-03-07

Virus description added:

Technical Information

Malicious functions
To complicate detection of its presence in the operating system,
deletes volume shadow copies.
Modifies file system
Creates the following files
  • <SYSTEM32>\ok.txt
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttoninset_alpha1.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttoninset_alpha2.png.ransom
  • %ProgramFiles%\windows defender\en-us\mpasdesc.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttonsubpicture.png.ransom
  • %ProgramFiles%\windows defender\en-us\mpevmsg.dll.mui.ransom
  • %ProgramFiles%\windows defender\en-us\msmpres.dll.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\imagingdevices.exe.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\photoacq.dll.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\photoviewer.dll.mui.ransom
  • %ProgramFiles%\windows mail\en-us\msoeres.dll.mui.ransom
  • %ProgramFiles%\windows nt\accessories\en-us\wordpad.exe.mui.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\en-us\tabletextservice.dll.mui.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceamharic.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\sportsmainbackground.wmv.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.ransom
  • <SYSTEM32>\temp.tmp
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\previousmenubuttonicon.png.ransom
  • %ProgramFiles%\windows mail\en-us\winmail.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\parentmenubuttonicon.png.ransom
  • %ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationright_buttongraphic.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationright_selectionsubpicture.png.ransom
  • %ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationup_buttongraphic.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationup_selectionsubpicture.png.ransom
  • %ProgramFiles%\internet explorer\en-us\iedvtool.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialoccasion.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\whitemask1047.png.ransom
  • %ProgramFiles%\internet explorer\en-us\ielowutil.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\whitevignette1047.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\nextmenubuttonicon.png.ransom
  • %ProgramFiles%\internet explorer\en-us\jsdbgui.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\circlesubpicture.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\goldring.png.ransom
  • %ProgramFiles%\internet explorer\en-us\jsdebuggeride.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\jsprofilercore.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\jsprofilerui.dll.mui.ransom
  • %ProgramFiles%\internet explorer\ie8props.propdesc.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\highlight.png.ransom
  • %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.5\workflow.targets.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\navigationbuttonsubpicture.png.ransom
  • %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.5\workflow.visualbasic.targets.ransom
  • %ProgramFiles%\microsoft office\office14\1033\winword.dev.hxs.ransom
Sets the 'hidden' attribute to the following files
  • <SYSTEM32>\temp.tmp
Deletes the following files
  • <SYSTEM32>\temp.tmp
Moves the following files
  • from %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf to %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olappt.fae to %ProgramFiles%\microsoft office\office14\convert\olappt.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae to %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olnote.fae to %ProgramFiles%\microsoft office\office14\convert\olnote.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olmail.fae to %ProgramFiles%\microsoft office\office14\convert\olmail.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\odbc.sam to %ProgramFiles%\microsoft office\office14\convert\odbc.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\ol.sam to %ProgramFiles%\microsoft office\office14\convert\ol.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oladd.fae to %ProgramFiles%\microsoft office\office14\convert\oladd.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav to %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\delimwin.fae to %ProgramFiles%\microsoft office\office14\convert\delimwin.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oltask.fae to %ProgramFiles%\microsoft office\office14\convert\oltask.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\desksam.sam to %ProgramFiles%\microsoft office\office14\convert\desksam.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\org97.sam to %ProgramFiles%\microsoft office\office14\convert\org97.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\pab.sam to %ProgramFiles%\microsoft office\office14\convert\pab.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\custom.propdesc to %ProgramFiles%\microsoft office\office14\custom.propdesc.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\delimdos.fae to %ProgramFiles%\microsoft office\office14\convert\delimdos.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf.ransom
  • from %TEMP%\jusched.log to %TEMP%\jusched.log.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart8.bdr to %ProgramFiles%\microsoft office\office14\borders\msart8.bdr.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart9.bdr to %ProgramFiles%\microsoft office\office14\borders\msart9.bdr.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw to %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw.ransom
  • from %ProgramFiles%\microsoft office\office14\cgmimp32.hlp to %ProgramFiles%\microsoft office\office14\cgmimp32.hlp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav to %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\charsettable.chr to %ProgramFiles%\microsoft office\office14\charsettable.chr.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart6.bdr to %ProgramFiles%\microsoft office\office14\borders\msart6.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart7.bdr to %ProgramFiles%\microsoft office\office14\borders\msart7.bdr.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart5.bdr to %ProgramFiles%\microsoft office\office14\borders\msart5.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart15.bdr to %ProgramFiles%\microsoft office\office14\borders\msart15.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart2.bdr to %ProgramFiles%\microsoft office\office14\borders\msart2.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart14.bdr to %ProgramFiles%\microsoft office\office14\borders\msart14.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172350.log to %TEMP%\dd_vcredist_x86_20230912172350.log.ransom
  • from %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt to %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf.ransom
  • from %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt to %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt.ransom
  • from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart4.bdr to %ProgramFiles%\microsoft office\office14\borders\msart4.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart3.bdr to %ProgramFiles%\microsoft office\office14\borders\msart3.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam.ransom
  • from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\act3.sam to %ProgramFiles%\microsoft office\office14\convert\act3.sam.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico to %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico to %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico.ransom
  • from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\excel.exe.manifest to %ProgramFiles%\microsoft office\office14\excel.exe.manifest.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx to %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart13.bdr to %ProgramFiles%\microsoft office\office14\borders\msart13.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\english.lng to %ProgramFiles%\microsoft office\office14\english.lng.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart12.bdr to %ProgramFiles%\microsoft office\office14\borders\msart12.bdr.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\advcmp.dic to %ProgramFiles%\microsoft office\office14\advcmp.dic.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf.ransom
  • from %TEMP%\adobearm.log to %TEMP%\adobearm.log.ransom
  • from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx.ransom
  • from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf.ransom
  • from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx.ransom
  • from %TEMP%\chrome_installer.log to %TEMP%\chrome_installer.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf.ransom
  • from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\advtel.dic to %ProgramFiles%\microsoft office\office14\advtel.dic.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig.ransom
  • from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\faxext.ecf to %ProgramFiles%\microsoft office\office14\addins\faxext.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\msspc.ecf to %ProgramFiles%\microsoft office\office14\addins\msspc.ecf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\outex.ecf to %ProgramFiles%\microsoft office\office14\addins\outex.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\outex2.ecf to %ProgramFiles%\microsoft office\office14\addins\outex2.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf to %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\utility.accda to %ProgramFiles%\microsoft office\office14\accwiz\utility.accda.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart11.bdr to %ProgramFiles%\microsoft office\office14\borders\msart11.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157.log to %TEMP%\dd_vcredist_x86_20230912172157.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936.log to %TEMP%\dd_vcredist_x86_20230912171936.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log.ransom
  • from %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172224.log to %TEMP%\dd_vcredist_x86_20230912172224.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\waveform.thmx to %ProgramFiles%\microsoft office\document themes 14\waveform.thmx.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322.log to %TEMP%\dd_vcredist_x86_20230912172322.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart1.bdr to %ProgramFiles%\microsoft office\office14\borders\msart1.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml to %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart10.bdr to %ProgramFiles%\microsoft office\office14\borders\msart10.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\trek.thmx to %ProgramFiles%\microsoft office\document themes 14\trek.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\urban.thmx to %ProgramFiles%\microsoft office\document themes 14\urban.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\verve.thmx to %ProgramFiles%\microsoft office\document themes 14\verve.thmx.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759.log to %TEMP%\dd_vcredist_x86_20230912171759.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034.log to %TEMP%\dd_vcredist_amd64_20230912172034.log.ransom
  • from %ProgramFiles%\microsoft office\office14\asciieng.lng to %ProgramFiles%\microsoft office\office14\asciieng.lng.ransom
  • from %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man to %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bcsevents.man to %ProgramFiles%\microsoft office\office14\bcsevents.man.ransom
  • from %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824.log to %TEMP%\dd_vcredist_amd64_20230912171824.log.ransom
  • from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735.log to %TEMP%\dd_vcredist_amd64_20230912171735.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf.ransom
  • from %TEMP%\dd_vcredistmsi12db.txt to %TEMP%\dd_vcredistmsi12db.txt.ransom
  • from %TEMP%\dd_vcredistui12db.txt to %TEMP%\dd_vcredistui12db.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\office14\advzip.dic to %ProgramFiles%\microsoft office\office14\advzip.dic.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641.log to %TEMP%\dd_vcredist_amd64_20230912171641.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172315.log to %TEMP%\dd_vcredist_amd64_20230912172315.log.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710.log to %TEMP%\dd_vcredist_x86_20230912171710.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172134.log to %TEMP%\dd_vcredist_amd64_20230912172134.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247.log to %TEMP%\dd_vcredist_amd64_20230912172247.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn.ransom
  • from %TEMP%\tmpaddon to %TEMP%\tmpaddon.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\actip10.hlp to %ProgramFiles%\microsoft office\office14\1033\actip10.hlp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\discussion14.gta to %ProgramFiles%\microsoft office\office14\1033\discussion14.gta.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn.ransom
  • from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\access12.acc to %ProgramFiles%\microsoft office\office14\1033\access12.acc.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico to %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\discussion.gta to %ProgramFiles%\microsoft office\office14\1033\discussion.gta.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif.ransom
  • from %TEMP%\opera installer\opera_installer_20230912173246.log to %TEMP%\opera installer\opera_installer_20230912173246.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf.ransom
  • from %TEMP%\opera_crashreporter.log to %TEMP%\opera_crashreporter.log.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif.ransom
  • from %TEMP%\opera installer\opera_installer_20230912173243.log to %TEMP%\opera installer\opera_installer_20230912173243.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\office10.mmw to %ProgramFiles%\microsoft office\media\office14\office10.mmw.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf.ransom
  • from %TEMP%\rgia609.tmp to %TEMP%\rgia609.tmp.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf.ransom
  • from %TEMP%\rgia609.tmp-tmp to %TEMP%\rgia609.tmp-tmp.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf.ransom
  • from %TEMP%\setupexe(202309121734336dc).log to %TEMP%\setupexe(202309121734336dc).log.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\graph.exe.manifest to %ProgramFiles%\microsoft office\office14\graph.exe.manifest.ransom
  • from %ProgramFiles%\microsoft office\office14\graph.ico to %ProgramFiles%\microsoft office\office14\graph.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\french.lng to %ProgramFiles%\microsoft office\office14\french.lng.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico to %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\1033\office10.mml to %ProgramFiles%\microsoft office\media\office14\1033\office10.mml.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif.ransom
  • from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.hxs to %ProgramFiles%\microsoft office\office14\1033\winword.hxs.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.ransom
  • from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf.ransom
  • from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf.ransom
  • from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf.ransom
  • from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.ransom
  • from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf.ransom
  • from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf.ransom
  • from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.ransom
  • from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.ransom
  • from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf.ransom
  • from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf.ransom
  • from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf.ransom
  • from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf.ransom
  • from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm to %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1036\mso.acl to %ProgramFiles%\microsoft office\office14\1036\mso.acl.ransom
  • from %ProgramFiles%\microsoft office\office14\3082\mso.acl to %ProgramFiles%\microsoft office\office14\3082\mso.acl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm to %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm to %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf.ransom
  • from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\plugin.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main-selector.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf.ransom
  • from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.ransom
  • from %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets to %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.ransom
  • from %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets to %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif.ransom
  • from %ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\resources\1033\synchronization.rll to %ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\resources\1033\synchronization.rll.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\help.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\help.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ru-ru\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ru-ru\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ko-kr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ko-kr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ro-ro\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ro-ro\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ru-ru\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ru-ru\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sl-si\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sl-si\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hu-hu\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hu-hu\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\eu-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\eu-es\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hr-hr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hr-hr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.ransom
  • from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ca-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ca-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-cn\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-cn\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-tw\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-tw\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\uk-ua\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\uk-ua\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-view.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\eu-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\eu-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\cs-cz\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\cs-cz\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang.hxs to %ProgramFiles%\microsoft office\office14\1033\setlang.hxs.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm to %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\progress.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\progress.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ar-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ar-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ca-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ca-es\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\tr-tr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\tr-tr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\uk-ua\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\uk-ua\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-cn\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-cn\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-tw\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-tw\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\desktop-tool-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\desktop-tool-view.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-selector.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-view.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-selector.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-si\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-si\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hr-hr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hr-hr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hu-hu\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hu-hu\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\stslist.chm to %ProgramFiles%\microsoft office\office14\1033\stslist.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ko-kr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ko-kr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pl-pl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pl-pl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ro-ro\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ro-ro\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sk-sk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sk-sk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\clarity.thmx to %ProgramFiles%\microsoft office\document themes 14\clarity.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\composite.thmx to %ProgramFiles%\microsoft office\document themes 14\composite.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\aspect.thmx to %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\austin.thmx to %ProgramFiles%\microsoft office\document themes 14\austin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\civic.thmx to %ProgramFiles%\microsoft office\document themes 14\civic.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\concourse.thmx to %ProgramFiles%\microsoft office\document themes 14\concourse.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\couture.thmx to %ProgramFiles%\microsoft office\document themes 14\couture.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx to %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx to %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\solstice.thmx to %ProgramFiles%\microsoft office\document themes 14\solstice.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\technic.thmx to %ProgramFiles%\microsoft office\document themes 14\technic.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\perspective.thmx to %ProgramFiles%\microsoft office\document themes 14\perspective.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\thatch.thmx to %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js to %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js.ransom
  • from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.ransom
  • from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.ransom
  • from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\paper.thmx to %ProgramFiles%\microsoft office\document themes 14\paper.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx to %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\equity.thmx to %ProgramFiles%\microsoft office\document themes 14\equity.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\essential.thmx to %ProgramFiles%\microsoft office\document themes 14\essential.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\elemental.thmx to %ProgramFiles%\microsoft office\document themes 14\elemental.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\executive.thmx to %ProgramFiles%\microsoft office\document themes 14\executive.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\flow.thmx to %ProgramFiles%\microsoft office\document themes 14\flow.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\foundry.thmx to %ProgramFiles%\microsoft office\document themes 14\foundry.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\grid.thmx to %ProgramFiles%\microsoft office\document themes 14\grid.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\horizon.thmx to %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\opulent.thmx to %ProgramFiles%\microsoft office\document themes 14\opulent.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\oriel.thmx to %ProgramFiles%\microsoft office\document themes 14\oriel.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\origin.thmx to %ProgramFiles%\microsoft office\document themes 14\origin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\median.thmx to %ProgramFiles%\microsoft office\document themes 14\median.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\metro.thmx to %ProgramFiles%\microsoft office\document themes 14\metro.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\module.thmx to %ProgramFiles%\microsoft office\document themes 14\module.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx to %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl to %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp to %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf.ransom
Modifies the following files
  • %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\manifest-000001.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\log.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\lock.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\current.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\000003.log.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\manifest-000001.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\log.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\lock.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf.ransom
Modifies multiple files.
Changes user data files extensions (Trojan.Encoder).
Network activity
Connects to
  • 'ip##o.is':80
TCP
HTTP GET requests
  • http://ip##o.is/
UDP
  • DNS ASK ip##o.is
Miscellaneous
Executes the following
  • '<SYSTEM32>\cmd.exe' /c vssadmin delete shadows /all /quiet
  • '<SYSTEM32>\cmd.exe' /c netsh wlan export profile folder="<SYSTEM32>\wifies\\" key=clear && cls
  • '<SYSTEM32>\netsh.exe' wlan export profile folder="<SYSTEM32>\wifies\\" key=clear
  • '<SYSTEM32>\cmd.exe' /c dir /s /b /a-d <SYSTEM32>\wifies\

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android