マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話

03-6550-8770

Profile

Trojan.Encoder.38712

Added to the Dr.Web virus database: 2024-03-07

Virus description added:

Technical Information

Malicious functions
To complicate detection of its presence in the operating system,
deletes volume shadow copies.
Modifies file system
Creates the following files
  • <SYSTEM32>\ok.txt
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttoninset_alpha1.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttoninset_alpha2.png.ransom
  • %ProgramFiles%\windows defender\en-us\mpasdesc.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\scenebuttonsubpicture.png.ransom
  • %ProgramFiles%\windows defender\en-us\mpevmsg.dll.mui.ransom
  • %ProgramFiles%\windows defender\en-us\msmpres.dll.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\imagingdevices.exe.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\photoacq.dll.mui.ransom
  • %ProgramFiles%\windows photo viewer\en-us\photoviewer.dll.mui.ransom
  • %ProgramFiles%\windows mail\en-us\msoeres.dll.mui.ransom
  • %ProgramFiles%\windows nt\accessories\en-us\wordpad.exe.mui.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\en-us\tabletextservice.dll.mui.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceamharic.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\sportsmainbackground.wmv.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.ransom
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.ransom
  • <SYSTEM32>\temp.tmp
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\previousmenubuttonicon.png.ransom
  • %ProgramFiles%\windows mail\en-us\winmail.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\parentmenubuttonicon.png.ransom
  • %ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationright_buttongraphic.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationright_selectionsubpicture.png.ransom
  • %ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationup_buttongraphic.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialnavigationup_selectionsubpicture.png.ransom
  • %ProgramFiles%\internet explorer\en-us\iedvtool.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\specialoccasion.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\whitemask1047.png.ransom
  • %ProgramFiles%\internet explorer\en-us\ielowutil.exe.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\whitevignette1047.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\nextmenubuttonicon.png.ransom
  • %ProgramFiles%\internet explorer\en-us\jsdbgui.dll.mui.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\circlesubpicture.png.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\goldring.png.ransom
  • %ProgramFiles%\internet explorer\en-us\jsdebuggeride.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\jsprofilercore.dll.mui.ransom
  • %ProgramFiles%\internet explorer\en-us\jsprofilerui.dll.mui.ransom
  • %ProgramFiles%\internet explorer\ie8props.propdesc.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\highlight.png.ransom
  • %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.5\workflow.targets.ransom
  • %ProgramFiles%\dvd maker\shared\dvdstyles\sports\navigationbuttonsubpicture.png.ransom
  • %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.5\workflow.visualbasic.targets.ransom
  • %ProgramFiles%\microsoft office\office14\1033\winword.dev.hxs.ransom
Sets the 'hidden' attribute to the following files
  • <SYSTEM32>\temp.tmp
Deletes the following files
  • <SYSTEM32>\temp.tmp
Moves the following files
  • from %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf to %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199805.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olappt.fae to %ProgramFiles%\microsoft office\office14\convert\olappt.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205466.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae to %ProgramFiles%\microsoft office\office14\convert\oljrnl.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199727.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199755.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212219.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212661.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olnote.fae to %ProgramFiles%\microsoft office\office14\convert\olnote.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212701.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0212957.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\olmail.fae to %ProgramFiles%\microsoft office\office14\convert\olmail.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199661.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199283.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0215086.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0186348.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\odbc.sam to %ProgramFiles%\microsoft office\office14\convert\odbc.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195384.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195534.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0195812.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196164.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196374.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\ol.sam to %ProgramFiles%\microsoft office\office14\convert\ol.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0196400.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oladd.fae to %ProgramFiles%\microsoft office\office14\convert\oladd.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199036.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav to %ProgramFiles%\microsoft office\media\cagcat10\j0214098.wav.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\delimwin.fae to %ProgramFiles%\microsoft office\office14\convert\delimwin.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0199549.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149481.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\oltask.fae to %ProgramFiles%\microsoft office\office14\convert\oltask.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185670.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222021.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185774.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229385.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0229389.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185776.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0230876.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233018.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233070.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0233312.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234131.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185780.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234266.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0234657.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183574.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0185604.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\desksam.sam to %ProgramFiles%\microsoft office\office14\convert\desksam.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222017.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182888.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182898.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182902.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182946.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216588.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183172.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\org97.sam to %ProgramFiles%\microsoft office\office14\convert\org97.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216724.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216858.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\pab.sam to %ProgramFiles%\microsoft office\office14\convert\pab.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0217698.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\custom.propdesc to %ProgramFiles%\microsoft office\office14\custom.propdesc.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183174.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0221903.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0216516.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\delimdos.fae to %ProgramFiles%\microsoft office\office14\convert\delimdos.fae.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183328.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183290.wmf.ransom
  • from %TEMP%\jusched.log to %TEMP%\jusched.log.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart8.bdr to %ProgramFiles%\microsoft office\office14\borders\msart8.bdr.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart9.bdr to %ProgramFiles%\microsoft office\office14\borders\msart9.bdr.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw to %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw.ransom
  • from %ProgramFiles%\microsoft office\office14\cgmimp32.hlp to %ProgramFiles%\microsoft office\office14\cgmimp32.hlp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157191.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157831.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav to %ProgramFiles%\microsoft office\media\cagcat10\elphrg01.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158071.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0158477.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090070.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\charsettable.chr to %ProgramFiles%\microsoft office\office14\charsettable.chr.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart6.bdr to %ProgramFiles%\microsoft office\office14\borders\msart6.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0156537.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart7.bdr to %ProgramFiles%\microsoft office\office14\borders\msart7.bdr.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0234687.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0160590.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart5.bdr to %ProgramFiles%\microsoft office\office14\borders\msart5.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart15.bdr to %ProgramFiles%\microsoft office\office14\borders\msart15.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153508.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart2.bdr to %ProgramFiles%\microsoft office\office14\borders\msart2.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart14.bdr to %ProgramFiles%\microsoft office\office14\borders\msart14.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172350.log to %TEMP%\dd_vcredist_x86_20230912172350.log.ransom
  • from %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt to %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153516.wmf.ransom
  • from %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt to %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt.ransom
  • from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart4.bdr to %ProgramFiles%\microsoft office\office14\borders\msart4.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153518.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart3.bdr to %ProgramFiles%\microsoft office\office14\borders\msart3.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157167.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0183198.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0168644.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172035.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149627.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149887.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\olr.sam.ransom
  • from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oltaskr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157763.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0157995.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\pabr.sam.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0158007.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0183168.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\act3.sam to %ProgramFiles%\microsoft office\office14\convert\act3.sam.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171685.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olnoter.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0157177.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0090386.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\delimr.fae.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam to %ProgramFiles%\microsoft office\office14\convert\1033\odbcr.sam.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oladdr.fae.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olapptr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0149407.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0172193.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\oljrnlr.fae.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174315.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174635.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae to %ProgramFiles%\microsoft office\office14\convert\1033\olmailr.fae.ransom
  • from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174639.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188519.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301076.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235319.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197979.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297707.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0197983.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contacts.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196364.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\contactl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298653.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198016.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlsts.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299125.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299171.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198020.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\distlstl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0298897.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196354.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299587.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293844.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196060.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196110.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0295241.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\apptl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0297185.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico to %ProgramFiles%\microsoft office\office14\forms\1033\cnfnot.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico to %ProgramFiles%\microsoft office\office14\forms\1033\conflict.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196142.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0196358.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0235241.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\docs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofs.ico.ransom
  • from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postitl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198234.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postits.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198372.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300840.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\postl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0300912.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico to %ProgramFiles%\microsoft office\office14\forms\1033\posts.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\recs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotel.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301050.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\remotes.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\oofl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293828.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195772.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0300520.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exiteml.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198022.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198025.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\infoms.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198113.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299611.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0299763.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico to %ProgramFiles%\microsoft office\office14\forms\1033\ipms.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmsl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\mmss.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notel.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198021.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\excel.exe.manifest to %ProgramFiles%\microsoft office\office14\excel.exe.manifest.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195342.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195320.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285410.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186362.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285444.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186364.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187815.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187819.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285698.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187825.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx to %ProgramFiles%\microsoft office\office14\document parts\1033\14\built-in building blocks.dotx.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285750.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187829.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186346.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185842.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0285926.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185834.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185790.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240719.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185796.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251871.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185798.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185800.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185818.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0251925.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0252349.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0278882.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0281904.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185828.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0185806.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif to %ProgramFiles%\microsoft office\media\cagcat10\j0283209.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart13.bdr to %ProgramFiles%\microsoft office\office14\borders\msart13.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187835.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286068.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188669.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188679.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195248.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292020.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195254.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0195260.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292152.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0292982.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293234.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293236.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\english.lng to %ProgramFiles%\microsoft office\office14\english.lng.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293238.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293240.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0293570.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188667.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187837.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188587.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0186360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187839.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187847.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187849.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187851.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187859.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187861.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187863.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187881.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187893.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0187921.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188511.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0188513.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0291984.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico to %ProgramFiles%\microsoft office\office14\forms\1033\notes.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart12.bdr to %ProgramFiles%\microsoft office\office14\borders\msart12.bdr.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\sist02.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\couture.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107426.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107446.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107450.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107452.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107358.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107364.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107456.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107482.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107484.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107488.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107490.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107468.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107350.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107342.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\elemental.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107264.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107266.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107280.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107282.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107288.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\advcmp.dic to %ProgramFiles%\microsoft office\office14\advcmp.dic.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107290.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107302.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107314.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107316.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107328.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107492.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107258.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107344.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107132.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107494.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107718.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107722.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\horizon.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107724.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107728.wmf.ransom
  • from %TEMP%\adobearm.log to %TEMP%\adobearm.log.ransom
  • from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\median.eftx.ransom
  • from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107730.wmf.ransom
  • from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\metro.eftx.ransom
  • from %TEMP%\chrome_installer.log to %TEMP%\chrome_installer.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107734.wmf.ransom
  • from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\hardcover.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107254.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107262.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\equity.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\essential.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\executive.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\flow.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\advtel.dic to %ProgramFiles%\microsoft office\office14\advtel.dic.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\foundry.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\grid.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107500.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107502.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107512.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107514.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107516.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107526.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107544.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107708.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107496.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107192.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\concourse.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107188.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105490.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105502.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105506.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105520.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105526.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\aspect.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105530.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105588.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105638.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105398.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105412.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\austin.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105376.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105380.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105360.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig.ransom
  • from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105390.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105386.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107712.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105710.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105974.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107148.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\faxext.ecf to %ProgramFiles%\microsoft office\office14\addins\faxext.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\msspc.ecf to %ProgramFiles%\microsoft office\office14\addins\msspc.ecf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107152.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\outex.ecf to %ProgramFiles%\microsoft office\office14\addins\outex.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\outex2.ecf to %ProgramFiles%\microsoft office\office14\addins\outex2.ecf.ransom
  • from %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf to %ProgramFiles%\microsoft office\office14\addins\pmailext.ecf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107158.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\clarity.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107182.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105846.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105912.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107138.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106020.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106124.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106208.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\utility.accda to %ProgramFiles%\microsoft office\office14\accwiz\utility.accda.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106572.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106816.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0106958.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107024.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107026.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\black tie.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107042.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107090.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107130.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107134.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\trek.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart11.bdr to %ProgramFiles%\microsoft office\office14\borders\msart11.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107742.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152688.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157.log to %TEMP%\dd_vcredist_x86_20230912172157.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\ieee2006officeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152626.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152694.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152702.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152704.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152708.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152716.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152722.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152696.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152698.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152622.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152610.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152878.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152570.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152590.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152594.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gostname.xsl.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152602.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gosttitle.xsl.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936.log to %TEMP%\dd_vcredist_x86_20230912171936.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152606.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152608.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\harvardanglia2008officeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152876.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152560.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log.ransom
  • from %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153095.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172224.log to %TEMP%\dd_vcredist_x86_20230912172224.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153265.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\waveform.thmx to %ProgramFiles%\microsoft office\document themes 14\waveform.thmx.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322.log to %TEMP%\dd_vcredist_x86_20230912172322.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\turabian.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153273.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153299.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart1.bdr to %ProgramFiles%\microsoft office\office14\borders\msart1.bdr.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153302.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml to %ProgramFiles%\microsoft office\media\cagcat10\1033\cagcat10.mml.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153305.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\borders\msart10.bdr to %ProgramFiles%\microsoft office\office14\borders\msart10.bdr.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153307.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153093.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\gb.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152568.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153089.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152884.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\trek.thmx to %ProgramFiles%\microsoft office\document themes 14\trek.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152890.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\iso690nmerical.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\urban.thmx to %ProgramFiles%\microsoft office\document themes 14\urban.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152894.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mla.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153047.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153087.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\mlaseventheditionofficeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\verve.thmx to %ProgramFiles%\microsoft office\document themes 14\verve.thmx.ransom
  • from %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153091.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152882.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171759.log to %TEMP%\dd_vcredist_x86_20230912171759.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152558.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034.log to %TEMP%\dd_vcredist_amd64_20230912172034.log.ransom
  • from %ProgramFiles%\microsoft office\office14\asciieng.lng to %ProgramFiles%\microsoft office\office14\asciieng.lng.ransom
  • from %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man to %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bcsevents.man to %ProgramFiles%\microsoft office\office14\bcsevents.man.ransom
  • from %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\pushpin.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150150.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0150861.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\slipstream.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\perspective.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171824.log to %TEMP%\dd_vcredist_amd64_20230912171824.log.ransom
  • from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2string.xsl.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735.log to %TEMP%\dd_vcredist_amd64_20230912171735.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107746.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107748.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107750.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf.ransom
  • from %TEMP%\dd_vcredistmsi12db.txt to %TEMP%\dd_vcredistmsi12db.txt.ransom
  • from %TEMP%\dd_vcredistui12db.txt to %TEMP%\dd_vcredistui12db.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0107744.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\newsprint.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\oriel.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\origin.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\office14\advzip.dic to %ProgramFiles%\microsoft office\office14\advzip.dic.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171641.log to %TEMP%\dd_vcredist_amd64_20230912171641.log.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\paper.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0153313.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151041.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\author.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\urban.eftx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\verve.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172315.log to %TEMP%\dd_vcredist_amd64_20230912172315.log.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710.log to %TEMP%\dd_vcredist_x86_20230912171710.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151581.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\waveform.eftx.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152414.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152430.wmf.ransom
  • from %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\chicago.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152436.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl to %ProgramFiles%\microsoft office\office14\bibliography\author2xml.xsl.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151073.wmf.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log to %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151045.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\tag.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\solstice.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172134.log to %TEMP%\dd_vcredist_amd64_20230912172134.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\title.xsl.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\technic.eftx.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247.log to %TEMP%\dd_vcredist_amd64_20230912172247.log.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl to %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151047.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\thatch.eftx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151055.wmf.ransom
  • from %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log to %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151061.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151063.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0151067.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10267_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\policies.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reports.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21519_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21520_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21533_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21534_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21535_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21505_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21518_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115834.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115840.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115841.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115842.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115843.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115836.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21504_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281630.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115863.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21377_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21398_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21399_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21400_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21421_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21422_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21423_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21433_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21435_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21481_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21482_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115844.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21375_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21503_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21308_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115864.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14677_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282126.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14710_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14711_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14768_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14769_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14800_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14844_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14882_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14883_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282928.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14996_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14997_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14595_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21366_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21376_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281640.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115866.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281632.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115867.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115868.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10219_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10256_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10290_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281638.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10308_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd10358_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14516_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14538_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14539_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif to %ProgramFiles%\microsoft office\media\office14\bullets\j0115865.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21365_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21364_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281243.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252629.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15061_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0252669.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15132_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15133_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15134_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15135_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15136_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15168_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15169_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15170_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15172_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15057_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15060_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15034_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14871_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14980_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14981_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14982_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14983_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14984_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14985_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0250997.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15019_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15020_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15021_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15023_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15018_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15058_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd14594_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15272_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15275_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21312_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21314_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21316_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21327_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21329_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21331_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21333_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0281008.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21335_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21337_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21339_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21343_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15273_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21310_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15274_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15059_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15276_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd15277_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21294_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21295_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21296_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0278702.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21297_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21298_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0279644.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21300_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21302_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd21306_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0280468.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21448_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301252.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15073_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_olivegreen.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_premium.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn to %ProgramFiles%\microsoft office\office14\1033\collectsignatures_sign.xsn.ransom
  • from %TEMP%\tmpaddon to %TEMP%\tmpaddon.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_groove.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_lightspirit.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_velvetrose.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_left_over.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_texturedblue.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_greentea.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepageblank.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_over.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\attention.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0294991.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_adobe.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_casual.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296277.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_country.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\actip10.hlp to %ProgramFiles%\microsoft office\office14\1033\actip10.hlp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296279.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_earthy.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_formshomepage.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0296288.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_mid_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293800.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297229.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15035_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\discussion14.gta to %ProgramFiles%\microsoft office\office14\1033\discussion14.gta.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_init.xsn.ransom
  • from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn to %ProgramFiles%\microsoft office\office14\1033\eadocumentapproval_review.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309902.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309904.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309920.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\customer support.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hardware tracker.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition - customized.fdt.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304875.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\access12.acc to %ProgramFiles%\microsoft office\office14\1033\access12.acc.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0293832.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico to %ProgramFiles%\microsoft office\office14\1033\dataservices\folder.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297269.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297725.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297727.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297757.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0297759.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0300862.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301044.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301052.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\discussion.gta to %ProgramFiles%\microsoft office\office14\1033\discussion.gta.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301418.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304371.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304853.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292286.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292278.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292272.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21319_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21320_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285792.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21321_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285796.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21322_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21323_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21324_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21325_.gif.ransom
  • from %TEMP%\opera installer\opera_installer_20230912173246.log to %TEMP%\opera installer\opera_installer_20230912173246.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285808.wmf.ransom
  • from %TEMP%\opera_crashreporter.log to %TEMP%\opera_crashreporter.log.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21315_.gif.ransom
  • from %TEMP%\opera installer\opera_installer_20230912173243.log to %TEMP%\opera installer\opera_installer_20230912173243.log.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285782.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15072_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21328_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21311_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15156_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15184_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15185_.gif.ransom
  • from %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt to %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15155_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21303_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21307_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21309_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285780.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285462.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21313_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241781.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21332_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287024.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21548_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115856.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115875.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif to %ProgramFiles%\microsoft office\media\office14\lines\j0115876.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287408.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287415.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0290548.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\office10.mmw to %ProgramFiles%\microsoft office\media\office14\office10.mmw.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0291794.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292248.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0292270.wmf.ransom
  • from %TEMP%\rgia609.tmp to %TEMP%\rgia609.tmp.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285820.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21512_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21318_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0285822.wmf.ransom
  • from %TEMP%\rgia609.tmp-tmp to %TEMP%\rgia609.tmp-tmp.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21334_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21336_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21338_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287018.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21340_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21348_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21370_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21390_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287019.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21413_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287020.wmf.ransom
  • from %TEMP%\setupexe(202309121734336dc).log to %TEMP%\setupexe(202309121734336dc).log.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21427_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif to %ProgramFiles%\microsoft office\media\office14\lines\bd21495_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14870_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14828_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18202_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18204_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18206_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\graph.exe.manifest to %ProgramFiles%\microsoft office\office14\graph.exe.manifest.ransom
  • from %ProgramFiles%\microsoft office\office14\graph.ico to %ProgramFiles%\microsoft office\office14\graph.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18207_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18209_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18210_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214948.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215070.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215076.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\cough.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18208_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0214934.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213449.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\giggle.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18193_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212601.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212685.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212751.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18197_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212953.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18198_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18199_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\french.lng to %ProgramFiles%\microsoft office\office14\french.lng.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0213243.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215210.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0211981.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18201_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215709.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18224_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18225_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216540.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18226_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18227_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18228_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18229_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18230_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216570.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\buzz.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216600.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216612.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216874.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18223_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18192_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\whistling.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18212_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\hiccup.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18213_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215710.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\mmhmm.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18214_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\sneeze.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18215_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18216_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18217_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\people\throat.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18220_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18211_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico to %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200611.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200521.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332268.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\secrecs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\securs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smsl.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198712.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0332364.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0335112.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199279.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199303.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0304933.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrests.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305493.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217262.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199307.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198377.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resends.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssiteml.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico to %ProgramFiles%\microsoft office\office14\forms\1033\rssitems.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncll.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\resendl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdcncls.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreqs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198447.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresnl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresns.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdrespl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdresps.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\scdreql.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0198494.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18222_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199423.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199465.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18185_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecs.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskl.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreql.ico.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskreqs.ico.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200279.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18189_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200289.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18190_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200377.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200383.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200467.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0336075.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199429.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskdecl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf to %ProgramFiles%\microsoft office\media\cagcat10\j0305257.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199469.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199475.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0199609.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200151.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200163.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200183.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200189.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\1033\office10.mml to %ProgramFiles%\microsoft office\media\office14\1033\office10.mml.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0200273.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico to %ProgramFiles%\microsoft office\office14\forms\1033\smss.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18180_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\taskaccl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18181_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18182_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14869_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\laser.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239935.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239941.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14580_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14581_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14582_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14579_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14583_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14656_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14691_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239943.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14692_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239951.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14654_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14655_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239611.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239191.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14693_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14528_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14529_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14530_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14531_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14532_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238333.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238959.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0238983.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239057.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239063.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239079.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239953.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14514_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14565_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217302.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239955.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14829_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240189.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14830_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14831_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240291.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241019.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241037.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14832_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241041.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14833_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241043.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14867_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241077.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240175.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14513_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14515_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14794_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14752_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14753_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239967.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14755_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239975.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239997.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0240157.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14757_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14790_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14791_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14792_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14793_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd14795_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10337_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10336_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10335_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18248_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18249_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232171.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18250_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\warn.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18251_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232395.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232795.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18245_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0230553.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18247_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0217872.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232797.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18243_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\toot.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18232_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\vibe.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228823.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\radar.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18238_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18239_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0228959.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18244_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0241773.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233512.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234001.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234376.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\splash.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237225.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\whoosh.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237228.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237336.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10301_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10302_.gif.ransom
  • from %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt to %TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0232803.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0234000.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18256_.wmf.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10297_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18246_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\can.wav.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233665.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0233992.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf to %ProgramFiles%\microsoft office\media\office14\autoshap\bd18257_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\horn.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10253_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10254_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10255_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shot.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10263_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\things\shovel.wav.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10264_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10265_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10266_.gif.ransom
  • from %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif to %ProgramFiles%\microsoft office\media\office14\bullets\bd10268_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0304861.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105244.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00299_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.hxs to %ProgramFiles%\microsoft office\office14\1033\winword.hxs.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00305_.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00221_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00222_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zx______.pfb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00223_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00257_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\zy______.pfb.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\saslprepprofile_norm_bidi.spp.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00289_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00333_.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zx______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00345_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00423_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00444_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00452_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00453_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00454_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00466_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\wwintl.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00476_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.ransom
  • from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00212_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00352_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00367_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00373_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00382_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00390_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00391_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00416_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword_col.hxc.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_f_col.hxk.ransom
  • from %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00208_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00199_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\recycle.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword.dev_k_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\safri_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\schol_02.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\show_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00256_.wmf.ransom
  • from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-it.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00260_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00268_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00286_.wmf.ransom
  • from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pswavy.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00298_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc to %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-oblique.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd.otf.ransom
  • from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.ransom
  • from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrt.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-bold.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-boldoblique.otf.ransom
  • from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\psretro.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketlg.wmf.ransom
  • from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.ransom
  • from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.ransom
  • from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pssketsm.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\prrtinst.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-boldit.otf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\winword_k_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00308_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00712_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00168_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\zy______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00177_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00183_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00190_.wmf.ransom
  • from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\sy______.pfb.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00191_.wmf.ransom
  • from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00345_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00159_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl00452_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00157_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\minionpro-regular.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01040_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf.ransom
  • from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-bold.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01394_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-boldit.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-it.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sl01565_.wmf.ransom
  • from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00017_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00018_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\myriadpro-regular.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\pfm\sy______.pfm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00736_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm to %ProgramFiles%\microsoft office\office14\1033\wzcnflct.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00942_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00943_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01044_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01063_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00941_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01561_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01560_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00935_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00916_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00917_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00918_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00938_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02022_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02024_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02025_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02028_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02045_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02051_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1036\mso.acl to %ProgramFiles%\microsoft office\office14\1036\mso.acl.ransom
  • from %ProgramFiles%\microsoft office\office14\3082\mso.acl to %ProgramFiles%\microsoft office\office14\3082\mso.acl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00914_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01566_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01569_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01575_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01777_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm to %ProgramFiles%\microsoft office\office14\1033\xmlsdk5.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01785_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01805_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01905_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so01954_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00629_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00633_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlslicer.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00638_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00656_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00668_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00670_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00671_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00610_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_complete.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn to %ProgramFiles%\microsoft office\office14\1033\xlate_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00483_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00505_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00555_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00603_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\courierstd-bold.otf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00820_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00828_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00834_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00837_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00910_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00911_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00783_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00683_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm to %ProgramFiles%\microsoft office\office14\1033\xlmacro.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00704_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00728_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00732_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00734_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00735_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so00768_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02009_.wmf.ransom
  • from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\classic.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\default.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\defaultblackandwhite.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\unified-e-signature.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll to %ProgramFiles%\microsoft office\office14\1033\pubwzint.rest.idx_dll.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02278_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\elegant.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\watch-tutorials.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02282_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\fancy.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\formal.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\distinctive.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02280_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02285_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02169_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8b.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir8f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02262_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir9f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02263_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02265_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\new-features-have-arrived.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\organize-pages-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir7b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02950_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02957_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03257_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03331_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03339_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03451_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\newsprint.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\plugin.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03453_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main-selector.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03459_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\css\main.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02522_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01797_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02120_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02287_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\manuscript.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\modern.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02293_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe02369_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01191_.wmf.ransom
  • from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.ransom
  • from %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets to %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.ransom
  • from %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets to %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir48f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00668_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00685_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\connect-your-devices.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\combine-files-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\perspective.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00686_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif.ransom
  • from %ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\resources\1033\synchronization.rll to %ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\resources\1033\synchronization.rll.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00693_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00998_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\get-e-signatures.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\help.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\help.svg.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\lets-get-started.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir5f.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\more-inside.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\multi-tab-file-view-2x.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir6b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00720_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text.png.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir49f.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir51f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4f.gif.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00723_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\dropbox.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00726_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00737_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf-2x.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00833_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif to %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50f.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00898_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe00934_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\edit-pdf.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\fill-sign.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\find-text-2x.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ru-ru\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ru-ru\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03464_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ko-kr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ko-kr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ro-ro\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ro-ro\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ru-ru\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ru-ru\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sl-si\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sl-si\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hu-hu\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hu-hu\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-il\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\eu-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\eu-es\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02743g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\tr-tr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hr-hr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\hr-hr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured.png.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\rna-main.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02845g.gif.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.ransom
  • from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\versions\framework-dev.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ca-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ca-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-cn\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-cn\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-tw\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\zh-tw\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\viewer\nls\root\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\uk-ua\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\uk-ua\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\home-view\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-view.css.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05869_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05870_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxc.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\da-dk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\da-dk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt to %ProgramFiles%\microsoft office\office14\1033\setlang_col.hxt.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_f_col.hxk.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk to %ProgramFiles%\microsoft office\office14\1033\setlang_k_col.hxk.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\de-de\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\de-de\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-gb\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-gb\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\en-il\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\es-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\es-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\eu-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\eu-es\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\cs-cz\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\cs-cz\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03795_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05710_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\simple.dotx.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\setlang.hxs to %ProgramFiles%\microsoft office\office14\1033\setlang.hxs.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\cloud_secured_lg.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03470_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_init.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx to %ProgramFiles%\microsoft office\office14\1033\quickstyles\thatch.dotx.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn to %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm to %ProgramFiles%\microsoft office\office14\1033\rplbrf35.chm.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\progress.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\progress.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03668_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ar-ae\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ar-ae\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ca-es\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ca-es\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe03731_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\images\core_icons.png.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe04050_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-fr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-fr\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05930_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sv-se\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sv-se\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\tr-tr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\tr-tr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01255g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\uk-ua\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\uk-ua\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-cn\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-cn\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-tw\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\zh-tw\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\plugin.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\plugin.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\selector.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\selector.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\desktop-tool-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\desktop-tool-view.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-selector.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-view.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\home-view.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-selector.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-selector.css.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\fr-ma\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\he-il\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-si\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sl-si\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe05665_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06049_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hr-hr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hr-hr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hu-hu\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\hu-hu\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\pe06450_.wmf.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\it-it\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\it-it\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\office14\1033\stslist.chm to %ProgramFiles%\microsoft office\office14\1033\stslist.chm.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ph00601g.gif.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ja-jp\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ja-jp\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ko-kr\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ko-kr\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nb-no\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nb-no\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nl-nl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\nl-nl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pl-pl\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pl-pl\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pt-br\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\pt-br\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ro-ro\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\ro-ro\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js.ransom
  • from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sk-sk\ui-strings.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\send-for-sign\js\nls\sk-sk\ui-strings.js.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105336.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\clarity.thmx to %ProgramFiles%\microsoft office\document themes 14\clarity.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\composite.thmx to %ProgramFiles%\microsoft office\document themes 14\composite.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\aspect.thmx to %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\austin.thmx to %ProgramFiles%\microsoft office\document themes 14\austin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\civic.thmx to %ProgramFiles%\microsoft office\document themes 14\civic.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\concourse.thmx to %ProgramFiles%\microsoft office\document themes 14\concourse.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\couture.thmx to %ProgramFiles%\microsoft office\document themes 14\couture.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00516l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00531l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00673l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00703l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00760l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb00780l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb01741l.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02039_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02055_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143754.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02074_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143753.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143744.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143745.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143746.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143743.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143749.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143752.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143758.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02097_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02214_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02218_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02082_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02201_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02085_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02106_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02116_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02134_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02187_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif to %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02198_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02067_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx to %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx to %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\solstice.thmx to %ProgramFiles%\microsoft office\document themes 14\solstice.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\technic.thmx to %ProgramFiles%\microsoft office\document themes 14\technic.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102002.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101980.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105250.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105272.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105280.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105282.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105286.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105288.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105292.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105294.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105298.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105320.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105328.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105332.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105246.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\perspective.thmx to %ProgramFiles%\microsoft office\document themes 14\perspective.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105238.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\thatch.thmx to %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103058.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103262.wmf.ransom
  • from %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js to %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js.ransom
  • from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.ransom
  • from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.ransom
  • from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103402.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103812.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0103850.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105230.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105232.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105234.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105240.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0102762.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\paper.thmx to %ProgramFiles%\microsoft office\document themes 14\paper.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx to %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\equity.thmx to %ProgramFiles%\microsoft office\document themes 14\equity.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\essential.thmx to %ProgramFiles%\microsoft office\document themes 14\essential.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\elemental.thmx to %ProgramFiles%\microsoft office\document themes 14\elemental.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\executive.thmx to %ProgramFiles%\microsoft office\document themes 14\executive.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\flow.thmx to %ProgramFiles%\microsoft office\document themes 14\flow.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\foundry.thmx to %ProgramFiles%\microsoft office\document themes 14\foundry.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\grid.thmx to %ProgramFiles%\microsoft office\document themes 14\grid.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\wnter_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\horizon.thmx to %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\opulent.thmx to %ProgramFiles%\microsoft office\document themes 14\opulent.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\oriel.thmx to %ProgramFiles%\microsoft office\document themes 14\oriel.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\origin.thmx to %ProgramFiles%\microsoft office\document themes 14\origin.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\median.thmx to %ProgramFiles%\microsoft office\document themes 14\median.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\metro.thmx to %ProgramFiles%\microsoft office\document themes 14\metro.thmx.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\module.thmx to %ProgramFiles%\microsoft office\document themes 14\module.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf.ransom
  • from %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx to %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105338.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00132_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00642_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00788_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00792_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00795_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00560_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00127_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\space_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\stubby2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\sumer_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\swest_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy00110_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02790_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00011_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00014_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00018_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00095_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00211_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00217_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00231_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01462_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01491_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01563_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01572_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01590_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02886_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02263_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02265_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02268_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02276_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00241_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl to %ProgramFiles%\microsoft office\office14\accessweb\rpt2htm4.xsl.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02227_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02094_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02228_.wmf.ransom
  • from %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp to %ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tail.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02437_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02793_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02794_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02862_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02431_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02791_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02439_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02464_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02465_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02578_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02617_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\so02055_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00246_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01734_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01740_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01742_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01743_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01744_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01330_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01745_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01747_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01748_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01749_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01750_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01746_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01751_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01298_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01299_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01301_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01296_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\wing1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01297_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\whirl1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01838_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01840_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01842_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01843_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb02229_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01295_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01294_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00095_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00097_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00126_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00255_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00330_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00253_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00411_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01164_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01165_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tn01308_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00232_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01237_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01238_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01239_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01240_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01242_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01244_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01245_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01246_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01253_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01268_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01292_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01293_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00178_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\wb01219_.gif.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00006_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00233_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00402_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00482_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\tr00494_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\urban_01.mid.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\vctrn_01.mid.ransom
  • from %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde.ransom
  • from %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0318448.wmf.ransom
Modifies the following files
  • %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\close.svg.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46f.gif.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00578_.wmf.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\manifest-000001.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir46b.gif.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45f.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00563_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\add-comment-2x.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00559_.wmf.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools.png.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00555_.wmf.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir45b.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00542_.wmf.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir44f.gif.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\log.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\activate-more-tools-2x.png.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\lock.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\current.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\000003.log.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\manifest-000001.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\log.ransom
  • %LOCALAPPDATA%\google\chrome\user data\default\extension rules\lock.ransom
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg.ransom
  • %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir47b.gif.ransom
  • %ProgramFiles%\microsoft office\clipart\pub60cor\pe00633_.wmf.ransom
Modifies multiple files.
Changes user data files extensions (Trojan.Encoder).
Network activity
Connects to
  • 'ip##o.is':80
TCP
HTTP GET requests
  • http://ip##o.is/
UDP
  • DNS ASK ip##o.is
Miscellaneous
Executes the following
  • '<SYSTEM32>\cmd.exe' /c vssadmin delete shadows /all /quiet
  • '<SYSTEM32>\cmd.exe' /c netsh wlan export profile folder="<SYSTEM32>\wifies\\" key=clear && cls
  • '<SYSTEM32>\netsh.exe' wlan export profile folder="<SYSTEM32>\wifies\\" key=clear
  • '<SYSTEM32>\cmd.exe' /c dir /s /b /a-d <SYSTEM32>\wifies\

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android