Trojan.Encoder.38924

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

<SYSTEM32>\tasks\windows update alphv

Infects the following executable files

%ProgramFiles%\winrar\default.sfx
%ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv
%ProgramFiles%\microsoft office\office14\xocr3.psp
%CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.flt
%CommonProgramFiles%\microsoft shared\grphflt\epsimp32.flt
%CommonProgramFiles%\microsoft shared\grphflt\gifimp32.flt
%CommonProgramFiles%\microsoft shared\grphflt\jpegim32.flt
%CommonProgramFiles%\microsoft shared\grphflt\png32.flt
%ProgramFiles%\microsoft office\office14\mscss7cm_en.dub
%CommonProgramFiles%\microsoft shared\grphflt\wpgimp32.flt
%CommonProgramFiles%\microsoft shared\textconv\recovr32.cnv
%CommonProgramFiles%\microsoft shared\textconv\wks9pxy.cnv
%CommonProgramFiles%\microsoft shared\textconv\wpft532.cnv
%CommonProgramFiles%\microsoft shared\textconv\wpft632.cnv
%CommonProgramFiles%\microsoft shared\vsto\vstoee100.tlb
%ProgramFiles%\microsoft office\office14\thocr.psp
%ProgramFiles%\microsoft office\office14\msword.olb
%ProgramFiles%\microsoft office\office14\msppt.olb
%ProgramFiles%\microsoft office\office14\msoutl.olb
%ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub
%ProgramFiles%\microsoft office\office14\mscss7wre_es.dub
%ProgramFiles%\microsoft office\office14\mscss7wre_en.dub
%ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub
%ProgramFiles%\microsoft office\office14\mscss7cm_es.dub
%CommonProgramFiles%\microsoft shared\grphflt\pictim32.flt
%ProgramFiles%\microsoft office\office14\msacc.olb
%ProgramFiles%\microsoft office\office14\mlcfg32.cpl
%ProgramFiles%\winrar\zip64.sfx
%ProgramFiles%\winrar\zip.sfx
%ProgramFiles%\winrar\wincon64.sfx
%ProgramFiles%\winrar\wincon.sfx
%ProgramFiles%\winrar\default64.sfx
%CommonProgramFiles%\microsoft shared\vsto\vstoee90.tlb
%ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl

Creates the following files on removable media

<Drive name for removable media>:\phalcon_recover.txt
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\fi51.doc

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\64bit_notes.htm
%HOMEPATH%\desktop\tree_view.htm
%HOMEPATH%\desktop\split.avi
%HOMEPATH%\desktop\sdszfo.docx
%HOMEPATH%\desktop\sdksampleprivdeveloper.cer
%HOMEPATH%\desktop\pmd.cer
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\ituneshelpunavailable.html
%HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
%HOMEPATH%\desktop\glidescope_review_rev_010.docx
%HOMEPATH%\desktop\delete.avi
%HOMEPATH%\desktop\contoso_1.cer
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\browse.htm
%HOMEPATH%\desktop\applicantform_en.doc
%HOMEPATH%\desktop\api-hashmap.html
%HOMEPATH%\desktop\alert.html
%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\adhd_and_obesity.docx
%HOMEPATH%\desktop\about.html
%HOMEPATH%\desktop\trivial-merge.html
%HOMEPATH%\desktop\weeklysheet1215.doc

Modifies file system

Creates the following files

<Current directory>\msvcrt.dll
%ProgramFiles(x86)%\windows sidebar\en-us\phalcon_recover.txt
%ProgramFiles(x86)%\windows sidebar\gadgets\phalcon_recover.txt
%ProgramFiles(x86)%\windows sidebar\shared gadgets\phalcon_recover.txt
%ALLUSERSPROFILE%\adobe\arm\phalcon_recover.txt
%ALLUSERSPROFILE%\adobe\setup\phalcon_recover.txt
%ALLUSERSPROFILE%\mozilla\updates\phalcon_recover.txt
%ALLUSERSPROFILE%\oracle\java\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\visualizations\phalcon_recover.txt
%ProgramFiles(x86)%\windows photo viewer\en-us\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\skins\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\network sharing\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\media renderer\phalcon_recover.txt
%CommonProgramFiles(x86)%\speechengines\phalcon_recover.txt
%CommonProgramFiles(x86)%\steam\phalcon_recover.txt
%CommonProgramFiles(x86)%\system\phalcon_recover.txt
%ProgramFiles(x86)%\internet explorer\en-us\phalcon_recover.txt
%ProgramFiles(x86)%\internet explorer\signup\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft analysis services\as oledb\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft office\office14\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft visual studio 8\common7\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft visual studio 8\sdk\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft visual studio 8\vsta\phalcon_recover.txt
%CommonProgramFiles(x86)%\services\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft.net\primary interop assemblies\phalcon_recover.txt
%ProgramFiles(x86)%\mozilla firefox\browser\phalcon_recover.txt
%ProgramFiles(x86)%\mozilla firefox\distibution\phalcon_recover.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\phalcon_recover.txt
%ProgramFiles(x86)%\opera\assets\phalcon_recover.txt
%ProgramFiles(x86)%\steam\bin\phalcon_recover.txt
%ProgramFiles(x86)%\steam\logs\phalcon_recover.txt
%ProgramFiles(x86)%\steam\package\phalcon_recover.txt
%ProgramFiles(x86)%\windows defender\en-us\phalcon_recover.txt
%ProgramFiles(x86)%\windows mail\en-us\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\en-us\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft.net\redistlist\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\proof\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\smart tag\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\source engine\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\stationery\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\textconv\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\themes14\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\translat\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\triedit\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\vba\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\vc\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\vgx\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\vsto\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\web folders\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\web server extensions\phalcon_recover.txt
%CommonProgramFiles%\system\ado\phalcon_recover.txt
%CommonProgramFiles%\system\en-us\phalcon_recover.txt
%CommonProgramFiles%\system\msadc\phalcon_recover.txt
%CommonProgramFiles%\system\msmapi\phalcon_recover.txt
%CommonProgramFiles%\system\ole db\phalcon_recover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\phalcon_recover.txt
%ProgramFiles%\java\jre1.8.0_45\bin\phalcon_recover.txt
%ProgramFiles%\java\jre1.8.0_45\lib\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\office14\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\msclientdatamgr\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\msinfo\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\ink\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\phalcon_recover.txt
%ALLUSERSPROFILE%\sun\java\phalcon_recover.txt
%HOMEPATH%\appdata\phalcon_recover.txt
%HOMEPATH%\contacts\phalcon_recover.txt
%HOMEPATH%\desktop\phalcon_recover.txt
%HOMEPATH%\documents\phalcon_recover.txt
%HOMEPATH%\downloads\phalcon_recover.txt
%HOMEPATH%\favorites\phalcon_recover.txt
%HOMEPATH%\links\phalcon_recover.txt
%HOMEPATH%\music\phalcon_recover.txt
%HOMEPATH%\pictures\phalcon_recover.txt
%HOMEPATH%\saved games\phalcon_recover.txt
%HOMEPATH%\searches\phalcon_recover.txt
%HOMEPATH%\videos\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\dw\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\equation\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\euro\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\filters\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\grphflt\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\help\phalcon_recover.txt
%ProgramFiles%\microsoft analysis services\as oledb\10\phalcon_recover.txt
%CommonProgramFiles(x86)%\microsoft shared\phalcon_recover.txt
%CommonProgramFiles(x86)%\java\phalcon_recover.txt
%CommonProgramFiles(x86)%\adobe\phalcon_recover.txt
%ProgramFiles%\windows portable devices\phalcon_recover.txt
%ProgramFiles%\windows sidebar\phalcon_recover.txt
%ProgramFiles%\winrar\phalcon_recover.txt
%ProgramFiles(x86)%\adobe\phalcon_recover.txt
%CommonProgramFiles(x86)%\phalcon_recover.txt
%ProgramFiles(x86)%\internet explorer\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft analysis services\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft office\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft visual studio 8\phalcon_recover.txt
%ProgramFiles%\windows media player\phalcon_recover.txt
%ProgramFiles%\windows photo viewer\phalcon_recover.txt
%ProgramFiles(x86)%\microsoft.net\phalcon_recover.txt
%ProgramFiles(x86)%\opera\phalcon_recover.txt
%ProgramFiles(x86)%\reference assemblies\phalcon_recover.txt
%ProgramFiles(x86)%\steam\phalcon_recover.txt
%ProgramFiles(x86)%\uninstall information\phalcon_recover.txt
%ProgramFiles(x86)%\windows defender\phalcon_recover.txt
%ProgramFiles(x86)%\windows mail\phalcon_recover.txt
%ProgramFiles(x86)%\windows media player\phalcon_recover.txt
%ProgramFiles(x86)%\windows photo viewer\phalcon_recover.txt
%ProgramFiles(x86)%\windows portable devices\phalcon_recover.txt
%ProgramFiles(x86)%\mozilla firefox\phalcon_recover.txt
%ProgramFiles(x86)%\msbuild\phalcon_recover.txt
%ProgramFiles%\windows mail\phalcon_recover.txt
%ProgramFiles%\windows journal\phalcon_recover.txt
%ProgramFiles%\windows defender\phalcon_recover.txt
D:\phalcon_recover.txt
C:\phalcon_recover.txt
<Current directory>\phalcon_recover.txt
C:\kms\phalcon_recover.txt
%ProgramFiles%\phalcon_recover.txt
%ProgramFiles(x86)%\phalcon_recover.txt
%ALLUSERSPROFILE%\phalcon_recover.txt
C:\users\phalcon_recover.txt
%CommonProgramFiles%\phalcon_recover.txt
%ProgramFiles%\dvd maker\phalcon_recover.txt
%ALLUSERSPROFILE%\sbox
%ProgramFiles%\internet explorer\phalcon_recover.txt
%ProgramFiles%\microsoft analysis services\phalcon_recover.txt
%ProgramFiles%\microsoft office\phalcon_recover.txt
%ProgramFiles%\microsoft sql server compact edition\phalcon_recover.txt
%ProgramFiles%\microsoft sync framework\phalcon_recover.txt
%ProgramFiles%\microsoft synchronization services\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\phalcon_recover.txt
%ProgramFiles%\msbuild\phalcon_recover.txt
%ProgramFiles%\reference assemblies\phalcon_recover.txt
%ProgramFiles%\uninstall information\phalcon_recover.txt
%ProgramFiles%\java\phalcon_recover.txt
%ProgramFiles(x86)%\windows sidebar\phalcon_recover.txt
%ALLUSERSPROFILE%\adobe\phalcon_recover.txt
%ALLUSERSPROFILE%\microsoft help\phalcon_recover.txt
%ALLUSERSPROFILE%\mozilla\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\fonts\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\uninstall\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\chrome\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\defaults\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\features\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\fonts\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\isp\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\uninstall\phalcon_recover.txt
%ProgramFiles%\mozilla thunderbird\visualelements\phalcon_recover.txt
%ProgramFiles%\windows defender\en-us\phalcon_recover.txt
%ProgramFiles%\windows journal\en-us\phalcon_recover.txt
%ProgramFiles%\windows journal\templates\phalcon_recover.txt
%ProgramFiles%\windows mail\en-us\phalcon_recover.txt
%ProgramFiles%\windows media player\en-us\phalcon_recover.txt
%ProgramFiles%\windows media player\media renderer\phalcon_recover.txt
%ProgramFiles%\windows media player\network sharing\phalcon_recover.txt
%ProgramFiles%\windows media player\skins\phalcon_recover.txt
%ProgramFiles%\windows media player\visualizations\phalcon_recover.txt
%ProgramFiles%\windows photo viewer\en-us\phalcon_recover.txt
%ProgramFiles%\windows sidebar\en-us\phalcon_recover.txt
%ProgramFiles%\windows sidebar\gadgets\phalcon_recover.txt
%ProgramFiles%\windows sidebar\shared gadgets\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\distibution\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\browser\phalcon_recover.txt
%ProgramFiles%\mozilla firefox\defaults\phalcon_recover.txt
%ProgramFiles%\microsoft synchronization services\ado.net\phalcon_recover.txt
%ALLUSERSPROFILE%\oracle\phalcon_recover.txt
%ALLUSERSPROFILE%\package cache\phalcon_recover.txt
%ALLUSERSPROFILE%\sun\phalcon_recover.txt
%HOMEPATH%\phalcon_recover.txt
%CommonProgramFiles%\designer\phalcon_recover.txt
%CommonProgramFiles%\microsoft shared\phalcon_recover.txt
%CommonProgramFiles%\services\phalcon_recover.txt
%CommonProgramFiles%\speechengines\phalcon_recover.txt
%CommonProgramFiles%\system\phalcon_recover.txt
%ProgramFiles%\dvd maker\en-us\phalcon_recover.txt
%ProgramFiles%\dvd maker\shared\phalcon_recover.txt
%ProgramFiles%\internet explorer\en-us\phalcon_recover.txt
%ProgramFiles%\internet explorer\signup\phalcon_recover.txt
%ProgramFiles%\java\jre1.8.0_45\phalcon_recover.txt
%ProgramFiles%\microsoft analysis services\as oledb\phalcon_recover.txt
%ProgramFiles%\microsoft office\clipart\phalcon_recover.txt
%ProgramFiles%\microsoft office\document themes 14\phalcon_recover.txt
%ProgramFiles%\microsoft office\media\phalcon_recover.txt
%ProgramFiles%\microsoft office\office14\phalcon_recover.txt
%ProgramFiles%\microsoft office\stationery\phalcon_recover.txt
%ProgramFiles%\microsoft office\templates\phalcon_recover.txt
%ProgramFiles%\microsoft sql server compact edition\v3.5\phalcon_recover.txt
%ProgramFiles%\microsoft sync framework\v1.0\phalcon_recover.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\phalcon_recover.txt
%ProgramFiles%\microsoft office\clipart\pub60cor\phalcon_recover.txt

Moves the following files

from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.phalcon
from %ProgramFiles%\microsoft office\office14\bcsevents.man to %ProgramFiles%\microsoft office\office14\bcsevents.man.phalcon
from %ProgramFiles%\microsoft office\document themes 14\waveform.thmx to %ProgramFiles%\microsoft office\document themes 14\waveform.thmx.phalcon
from %ProgramFiles%\microsoft office\office14\advcmp.dic to %ProgramFiles%\microsoft office\office14\advcmp.dic.phalcon
from %ProgramFiles%\microsoft office\office14\advtel.dic to %ProgramFiles%\microsoft office\office14\advtel.dic.phalcon
from %ProgramFiles%\microsoft office\office14\advzip.dic to %ProgramFiles%\microsoft office\office14\advzip.dic.phalcon
from %ProgramFiles%\microsoft office\office14\asciieng.lng to %ProgramFiles%\microsoft office\office14\asciieng.lng.phalcon
from %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man to %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.phalcon
from %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.phalcon
from %ProgramFiles%\microsoft office\document themes 14\paper.thmx to %ProgramFiles%\microsoft office\document themes 14\paper.thmx.phalcon
from %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd to %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.phalcon
from %ProgramFiles%\microsoft office\office14\cgmimp32.hlp to %ProgramFiles%\microsoft office\office14\cgmimp32.hlp.phalcon
from %ProgramFiles%\microsoft office\office14\charsettable.chr to %ProgramFiles%\microsoft office\office14\charsettable.chr.phalcon
from %ProgramFiles%\microsoft office\office14\custom.propdesc to %ProgramFiles%\microsoft office\office14\custom.propdesc.phalcon
from %ProgramFiles%\microsoft office\office14\english.lng to %ProgramFiles%\microsoft office\office14\english.lng.phalcon
from %ProgramFiles%\microsoft office\office14\excel.exe.manifest to %ProgramFiles%\microsoft office\office14\excel.exe.manifest.phalcon
from %ProgramFiles%\microsoft office\document themes 14\verve.thmx to %ProgramFiles%\microsoft office\document themes 14\verve.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\urban.thmx to %ProgramFiles%\microsoft office\document themes 14\urban.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\technic.thmx to %ProgramFiles%\microsoft office\document themes 14\technic.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\solstice.thmx to %ProgramFiles%\microsoft office\document themes 14\solstice.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx to %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx to %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\perspective.thmx to %ProgramFiles%\microsoft office\document themes 14\perspective.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\origin.thmx to %ProgramFiles%\microsoft office\document themes 14\origin.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\horizon.thmx to %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.phalcon
from %ProgramFiles%\microsoft office\office14\french.lng to %ProgramFiles%\microsoft office\office14\french.lng.phalcon
from %ProgramFiles%\microsoft office\document themes 14\opulent.thmx to %ProgramFiles%\microsoft office\document themes 14\opulent.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx to %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\module.thmx to %ProgramFiles%\microsoft office\document themes 14\module.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\metro.thmx to %ProgramFiles%\microsoft office\document themes 14\metro.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\median.thmx to %ProgramFiles%\microsoft office\document themes 14\median.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\trek.thmx to %ProgramFiles%\microsoft office\document themes 14\trek.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\oriel.thmx to %ProgramFiles%\microsoft office\document themes 14\oriel.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\thatch.thmx to %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.phalcon
from %ProgramFiles%\microsoft office\office14\graph.exe.manifest to %ProgramFiles%\microsoft office\office14\graph.exe.manifest.phalcon
from %ProgramFiles%\microsoft office\office14\latin1.shp to %ProgramFiles%\microsoft office\office14\latin1.shp.phalcon
from %ProgramFiles%\microsoft office\office14\mset7fr.kic to %ProgramFiles%\microsoft office\office14\mset7fr.kic.phalcon
from %ProgramFiles%\microsoft office\office14\mset7ge.kic to %ProgramFiles%\microsoft office\office14\mset7ge.kic.phalcon
from %ProgramFiles%\microsoft office\office14\mset7jp.kic to %ProgramFiles%\microsoft office\office14\mset7jp.kic.phalcon
from %ProgramFiles%\microsoft office\office14\msn.ico to %ProgramFiles%\microsoft office\office14\msn.ico.phalcon
from %ProgramFiles%\microsoft office\office14\mso0127.acl to %ProgramFiles%\microsoft office\office14\mso0127.acl.phalcon
from %ProgramFiles%\microsoft office\office14\msoutl.olb to %ProgramFiles%\microsoft office\office14\msoutl.olb.phalcon
from %ProgramFiles%\microsoft office\office14\mspub.exe.manifest to %ProgramFiles%\microsoft office\office14\mspub.exe.manifest.phalcon
from %ProgramFiles%\microsoft office\office14\mset7en.kic to %ProgramFiles%\microsoft office\office14\mset7en.kic.phalcon
from %ProgramFiles%\microsoft office\office14\mspub.tlb to %ProgramFiles%\microsoft office\office14\mspub.tlb.phalcon
from %ProgramFiles%\microsoft office\office14\msword.olb to %ProgramFiles%\microsoft office\office14\msword.olb.phalcon
from %ProgramFiles%\microsoft office\office14\mysl.ico to %ProgramFiles%\microsoft office\office14\mysl.ico.phalcon
from %ProgramFiles%\microsoft office\office14\oemprint.cat to %ProgramFiles%\microsoft office\office14\oemprint.cat.phalcon
from %ProgramFiles%\microsoft office\office14\omml2mml.xsl to %ProgramFiles%\microsoft office\office14\omml2mml.xsl.phalcon
from %ProgramFiles%\microsoft office\office14\ospp.vbs to %ProgramFiles%\microsoft office\office14\ospp.vbs.phalcon
from %ProgramFiles%\microsoft office\office14\mset7es.kic to %ProgramFiles%\microsoft office\office14\mset7es.kic.phalcon
from %ProgramFiles%\microsoft office\office14\mset7db.kic to %ProgramFiles%\microsoft office\office14\mset7db.kic.phalcon
from %ProgramFiles(x86)%\windows sidebar\settings.ini to %ProgramFiles(x86)%\windows sidebar\settings.ini.phalcon
from %ProgramFiles%\microsoft office\office14\mlcfg32.cpl to %ProgramFiles%\microsoft office\office14\mlcfg32.cpl.phalcon
from %ProgramFiles%\microsoft office\office14\mml2omml.xsl to %ProgramFiles%\microsoft office\office14\mml2omml.xsl.phalcon
from %ProgramFiles%\microsoft office\office14\msacc.olb to %ProgramFiles%\microsoft office\office14\msacc.olb.phalcon
from %ProgramFiles%\microsoft office\office14\msaccess.exe.manifest to %ProgramFiles%\microsoft office\office14\msaccess.exe.manifest.phalcon
from %ProgramFiles%\microsoft office\office14\graph.ico to %ProgramFiles%\microsoft office\office14\graph.ico.phalcon
from %ProgramFiles%\microsoft office\office14\installed_schemas14.xss to %ProgramFiles%\microsoft office\office14\installed_schemas14.xss.phalcon
from %ProgramFiles%\microsoft office\office14\installed_resources14.xss to %ProgramFiles%\microsoft office\office14\installed_resources14.xss.phalcon
from %ProgramFiles%\microsoft office\office14\mscol11.inf to %ProgramFiles%\microsoft office\office14\mscol11.inf.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7wre_en.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_en.dub.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7wre_es.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_es.dub.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub to %ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub.phalcon
from %ProgramFiles%\microsoft office\office14\mscol11.ppd to %ProgramFiles%\microsoft office\office14\mscol11.ppd.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7cm_en.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_en.dub.phalcon
from %ProgramFiles%\microsoft office\office14\mscss7cm_es.dub to %ProgramFiles%\microsoft office\office14\mscss7cm_es.dub.phalcon
from %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx to %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\grid.thmx to %ProgramFiles%\microsoft office\document themes 14\grid.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\foundry.thmx to %ProgramFiles%\microsoft office\document themes 14\foundry.thmx.phalcon
from %ProgramFiles%\mozilla thunderbird\dependentlibs.list to %ProgramFiles%\mozilla thunderbird\dependentlibs.list.phalcon
from %ProgramFiles%\mozilla thunderbird\install.log to %ProgramFiles%\mozilla thunderbird\install.log.phalcon
from %ProgramFiles%\mozilla thunderbird\omni.ja to %ProgramFiles%\mozilla thunderbird\omni.ja.phalcon
from %ProgramFiles%\mozilla thunderbird\platform.ini to %ProgramFiles%\mozilla thunderbird\platform.ini.phalcon
from %ProgramFiles%\mozilla thunderbird\precomplete to %ProgramFiles%\mozilla thunderbird\precomplete.phalcon
from %ProgramFiles%\mozilla thunderbird\removed-files to %ProgramFiles%\mozilla thunderbird\removed-files.phalcon
from %ProgramFiles%\mozilla thunderbird\updater.ini to %ProgramFiles%\mozilla thunderbird\updater.ini.phalcon
from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.phalcon
from %ProgramFiles%\windows sidebar\settings.ini to %ProgramFiles%\windows sidebar\settings.ini.phalcon
from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.phalcon
from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.phalcon
from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.phalcon
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.phalcon
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.phalcon
from %ProgramFiles%\mozilla thunderbird\crashreporter.ini to %ProgramFiles%\mozilla thunderbird\crashreporter.ini.phalcon
from %ProgramFiles%\mozilla thunderbird\application.ini to %ProgramFiles%\mozilla thunderbird\application.ini.phalcon
from %ProgramFiles%\mozilla firefox\application.ini to %ProgramFiles%\mozilla firefox\application.ini.phalcon
from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.phalcon
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.phalcon
from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.phalcon
from %ProgramFiles%\mozilla firefox\updater.ini to %ProgramFiles%\mozilla firefox\updater.ini.phalcon
from %ProgramFiles%\mozilla firefox\update-settings.ini to %ProgramFiles%\mozilla firefox\update-settings.ini.phalcon
from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.phalcon
from %ProgramFiles%\mozilla thunderbird\update-settings.ini to %ProgramFiles%\mozilla thunderbird\update-settings.ini.phalcon
from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.phalcon
from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.phalcon
from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.phalcon
from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.phalcon
from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.phalcon
from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.phalcon
from %ProgramFiles%\mozilla firefox\crashreporter.ini to %ProgramFiles%\mozilla firefox\crashreporter.ini.phalcon
from %ProgramFiles%\mozilla firefox\platform.ini to %ProgramFiles%\mozilla firefox\platform.ini.phalcon
from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.phalcon
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.phalcon
from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\austin.thmx to %ProgramFiles%\microsoft office\document themes 14\austin.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\black tie.thmx to %ProgramFiles%\microsoft office\document themes 14\black tie.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\civic.thmx to %ProgramFiles%\microsoft office\document themes 14\civic.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\clarity.thmx to %ProgramFiles%\microsoft office\document themes 14\clarity.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx.phalcon
from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\aspect.thmx to %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\composite.thmx to %ProgramFiles%\microsoft office\document themes 14\composite.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\equity.thmx to %ProgramFiles%\microsoft office\document themes 14\equity.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\essential.thmx to %ProgramFiles%\microsoft office\document themes 14\essential.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\executive.thmx to %ProgramFiles%\microsoft office\document themes 14\executive.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\flow.thmx to %ProgramFiles%\microsoft office\document themes 14\flow.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\concourse.thmx to %ProgramFiles%\microsoft office\document themes 14\concourse.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\couture.thmx to %ProgramFiles%\microsoft office\document themes 14\couture.thmx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\elemental.thmx to %ProgramFiles%\microsoft office\document themes 14\elemental.thmx.phalcon
from %ProgramFiles%\microsoft office\office14\msppt.olb to %ProgramFiles%\microsoft office\office14\msppt.olb.phalcon
from %ProgramFiles%\microsoft office\office14\outlook.exe.manifest to %ProgramFiles%\microsoft office\office14\outlook.exe.manifest.phalcon
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.phalcon
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.phalcon
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.phalcon
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.phalcon
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.phalcon
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.phalcon
from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.phalcon
from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx.phalcon
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\resources.pri.phalcon
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\installer_prefs.json.phalcon
from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets.phalcon
from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.phalcon
from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.phalcon
from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.phalcon
from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.phalcon
from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.phalcon
from %ProgramFiles%\microsoft office\office14\rswop.icm to %ProgramFiles%\microsoft office\office14\rswop.icm.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.phalcon
from %ProgramFiles%\microsoft office\office14\powerpnt.exe.manifest to %ProgramFiles%\microsoft office\office14\powerpnt.exe.manifest.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.phalcon
from %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd to %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.phalcon
from %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd to %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.phalcon
from %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd to %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.phalcon
from %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd to %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.phalcon
from %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd to %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.phalcon
from %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.phalcon
from %ProgramFiles(x86)%\internet explorer\signup\install.ins to %ProgramFiles(x86)%\internet explorer\signup\install.ins.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.phalcon
from %ProgramFiles(x86)%\mozilla firefox\browser\override.ini to %ProgramFiles(x86)%\mozilla firefox\browser\override.ini.phalcon
from %ProgramFiles(x86)%\mozilla firefox\distibution\policies.json to %ProgramFiles(x86)%\mozilla firefox\distibution\policies.json.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin to %ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.phalcon
from %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.phalcon
from %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi to %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.phalcon
from %ProgramFiles%\microsoft office\office14\segoechess.ttf to %ProgramFiles%\microsoft office\office14\segoechess.ttf.phalcon
from %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini to %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.phalcon
from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.phalcon
from %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.phalcon
from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.phalcon
from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.phalcon
from %ProgramFiles%\mozilla firefox\browser\override.ini to %ProgramFiles%\mozilla firefox\browser\override.ini.phalcon
from %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log to %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.phalcon
from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.phalcon
from %ProgramFiles%\microsoft office\office14\xml2word.xsl to %ProgramFiles%\microsoft office\office14\xml2word.xsl.phalcon
from %ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv to %ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv.phalcon
from %ProgramFiles%\microsoft office\office14\thocr.psp to %ProgramFiles%\microsoft office\office14\thocr.psp.phalcon
from %ProgramFiles%\microsoft office\office14\subscription.xsd to %ProgramFiles%\microsoft office\office14\subscription.xsd.phalcon
from %ProgramFiles%\microsoft office\office14\spanish.lng to %ProgramFiles%\microsoft office\office14\spanish.lng.phalcon
from %ProgramFiles%\microsoft office\office14\xocr3.psp to %ProgramFiles%\microsoft office\office14\xocr3.psp.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.licenses to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.licenses.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.version to %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.version.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.phalcon
from %ProgramFiles%\microsoft office\office14\reminder.wav to %ProgramFiles%\microsoft office\office14\reminder.wav.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.phalcon
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.phalcon
from %ProgramFiles(x86)%\steam\package\steam_client_metrics.bin to %ProgramFiles(x86)%\steam\package\steam_client_metrics.bin.phalcon
from %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt to %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.phalcon
from %ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin to %ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.phalcon
from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.phalcon
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.phalcon

Modifies the following files

C:\kms\kms_vl_all_aio.cmd
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\contoso_1.cer.phalcon
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\testcertificate.cer.phalcon
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\contoso.cer.phalcon
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\contosoroot_1.cer.phalcon
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\dial.bmp.phalcon
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dashborder_120.bmp.phalcon
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dialmap.bmp.phalcon
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dashborder_96.bmp.phalcon
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\tileimage.bmp.phalcon
C:\kms\kms_vl_all_aio_debug.log.phalcon
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\000814251_video_01.avi.phalcon
<Drive name for removable media>:\000814251_video_01.avi
C:\kms\kms_vl_all_aio_debug.log
C:\kms\kms_vl_all_aio.cmd.phalcon
D:\install.log.phalcon
D:\install.log
<Drive name for removable media>:\sdksampleunprivdeveloper.cer.phalcon
<Drive name for removable media>:\coffee.bmp.phalcon

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /c SCHTASKS.exe /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c SCHTASKS.exe /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F
'%WINDIR%\syswow64\schtasks.exe' /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial