TROJ_CRILOCK.CN

April 25, 2014

ALIASES:

Ransom-FJB!BACE0DE0E146 (McAfee); Troj/Ransom-AFS (Sophos); Trojan horse BackDoor.Generic16.BOF (AVG)

PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

OVERALL RISK RATING:

DAMAGE POTENTIAL:

DISTRIBUTION POTENTIAL:

REPORTED INFECTION:

Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

TECHNICAL DETAILS

File Size:

83,638 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

25 Apr 2014

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

%User Temp%\Adobe

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
winmes = "%User Temp%\etdD4mDj7Cd5XTc.exe"

Other System Modifications

This Trojan deletes the following files:

%Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.552.37796
%Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.552.37796
%User Profile%\v2.0.50727.42\security.config.cch.552.37937

(Note: %Windows% is the Windows folder, which is usually C:\Windows.. %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.)

It adds the following registry keys:

HKEY_CLASSES_ROOT\.CRYPTOLOCKER

HKEY_CLASSES_ROOT\IMBAJZCDFGWDRRF

HKEY_CLASSES_ROOT\IMBAJZCDFGWDRRF\DefaultIcon

HKEY_CLASSES_ROOT\IMBAJZCDFGWDRRF\shell\
open\command

HKEY_CURRENT_USER\Software\Adobe\
Adobe Acrobat\10.0

HKEY_CURRENT_USER\Software\Adobe\
Adobe Synchronizer\10.0

HKEY_LOCAL_MACHINE\System\Acrobatbrokerserverdispatchercpp789

HKEY_CURRENT_USER\Software\Adobe\
Acrobat Reader\10.0\Installer\
Migrated

Dropping Routine

This Trojan drops the following files:

%User Temp%\winrun4.exe
%User Temp%\Email.pdf
%System Root%\CRYPTOLOCKER.txt
%User Profile%\Security\CRYPTOLOCKER.txt
%User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%User Profile%\Application Data\CRYPTOLOCKER.txt
%User Profile%\S-1-5-18\CRYPTOLOCKER.txt
%User Profile%\Media Player\CRYPTOLOCKER.txt
%User Profile%\Pbk\CRYPTOLOCKER.txt
%User Profile%\Default Pictures\CRYPTOLOCKER.txt
%User Profile%\User Account Pictures\CRYPTOLOCKER.txt
%User Profile%\Documents\CRYPTOLOCKER.txt
%User Profile%\My Music\CRYPTOLOCKER.txt
%User Profile%\Sample Music\CRYPTOLOCKER.txt
%User Profile%\0008044E\CRYPTOLOCKER.txt
%User Profile%\My Pictures\CRYPTOLOCKER.txt
%User Profile%\Sample Pictures\CRYPTOLOCKER.txt
%User Profile%\My Videos\CRYPTOLOCKER.txt
%User Profile%\DRM\CRYPTOLOCKER.txt
%Start Menu%\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Communications\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\System Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\Administrative Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\CRYPTOLOCKER.txt
%Start Menu%\Programs\Games\CRYPTOLOCKER.txt
%Common Startup%\CRYPTOLOCKER.txt
%Start Menu%\Programs\WinPcap\CRYPTOLOCKER.txt
%User Profile%\Internet Explorer\CRYPTOLOCKER.txt
%User Profile%\Cookies\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Media Player\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%User Profile%\Local Settings\CRYPTOLOCKER.txt
%User Profile%\History\CRYPTOLOCKER.txt
%User Profile%\History.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\09RWHJQN\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\BVLBNMKH\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZDGZNKA5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZSGKJKO6\CRYPTOLOCKER.txt
%Temporary Internet Files%\CRYPTOLOCKER.txt
%User Profile%\CRYPTOLOCKER.txt
%User Profile%\SendTo\CRYPTOLOCKER.txt
%User Startup%\CRYPTOLOCKER.txt
%User Profile%\Templates\CRYPTOLOCKER.txt
%Application Data%\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\246FT6TD\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\9STOYKO4\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\NF72HY20\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\PHOM4UYK\CRYPTOLOCKER.txt
%User Profile%\Quick Launch\CRYPTOLOCKER.txt
%User Profile%\MMC\CRYPTOLOCKER.txt
%User Profile%\Themes\CRYPTOLOCKER.txt
%Favorites%\CRYPTOLOCKER.txt
%Favorites%\Links\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%Application Data%\Microsoft\CRYPTOLOCKER.txt
%User Profile%\MSHist012013061320130614\CRYPTOLOCKER.txt
%User Temp%\CRYPTOLOCKER.txt
%User Profile%\My Documents\CRYPTOLOCKER.txt
%User Profile%\Recent\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Esl\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\AIR\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Browser\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Services\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CMap\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\ARM\1.0\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\HelpCfg\en_US\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DAO\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1025\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1028\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1031\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1036\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1040\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1041\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1042\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\2052\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\3082\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\MSInfo\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Stationery\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\TextConv\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Triedit\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VC\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VGX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Web Folders\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Services\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\ado\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\msadc\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\Ole DB\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\Connection Wizard\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\PLUGINS\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\SIGNUP\CRYPTOLOCKER.txt
%Program Files%\Messenger\CRYPTOLOCKER.txt
%Program Files%\Microsoft.NET\RedistList\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\Profiles\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\OOBE\CRYPTOLOCKER.txt
%Program Files%\MSN Gaming Zone\Windows\CRYPTOLOCKER.txt
%Program Files%\MSXML 6.0\EULA\CRYPTOLOCKER.txt
%Program Files%\NetMeeting\CRYPTOLOCKER.txt
%Program Files%\Online Services\CRYPTOLOCKER.txt
%Program Files%\Outlook Express\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\Skins\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Accessories\CRYPTOLOCKER.txt
%Program Files%\Windows NT\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Pinball\CRYPTOLOCKER.txt
%Program Files%\WinPcap\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\spuninst\CRYPTOLOCKER.txt
%Windows%\$NtUninstallWIC$\spuninst\CRYPTOLOCKER.txt
%Windows%\CRYPTOLOCKER.txt
%Windows%\AppPatch\CRYPTOLOCKER.txt
%Windows%\assembly\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\0c0688825a79e72951210318eef63c82\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\0e1c79174260c4e2bf159a2cc1d77338\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\d2574c8ae333ff959be2e0d83121ad10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\3bfb841477d28ca866b91211f50199bb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\837fa037ca302e7432ea9913ae453e70\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\7cfd4a64a95807ee7cb6ae50cfabd93c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\11ef4be6ee227fce3725d6df534297a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\8973265600edd2135ecf5e369a087dfb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b384b96460ad28697e8990e56b0234d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\08b2c2639708ab20748653185d6b67be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5f595338c63c2fdb5a171760c29d5bcf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9952f66fc592ffc21b024803c8c955fd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\17921c875097ce0f638aa81a59093d3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2eef2f34c0295f1fe5d6d4441f9e790b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\edcde6e8ccca7996c2e1ad40bd0f2758\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\552a460a8bcf608aecc6418db0d40216\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\6a8da5dd61b1fcfed27f84047a3e2bad\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild\aa25092606e5e9826db7a7bd0adb9b2b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\d0e67f49781c157069bc3298454354bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI\15578874ee1464dc6a3545d4be842e59\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework\42f0e1a4e3081c50503d74ebc0540a60\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4d2a51c03b27e615ff9f1c430f2014ba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost\38f0d77629891e7808424103aaef0728\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities\931ad0783c03deb967760d5c2387274a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\607df7a11c3334146664bc74130bc38f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8594d07d18330843968d649ed6ef6166\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a57e34a36f38a007aa24f1bd07a167ab\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn\767e70aec1ffb52f95c2b07c08fa0781\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\5c87f21925d5a61059ee68cef72841f4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\caecc65b5c0ede0fe0d55b9f48ada80f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\642a7b3d47828fb0070a55cfeb58f42b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\7bab044e648dfea461b73dc898150539\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\db33744fb49e77c7233adb50f07fe62a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\685c7df1332a74aaa899f2bdb3beabc3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\ec884cc78d6c5bb67bc2c819b1f00ee5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services\62f067f8572551df931b3ee6493383d7\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment\90fd7fc9fbf5f4eed9135996b515a38a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device\36342e6024e2844502d0bdaa9d30971a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\46a7f51ef1a9d917598b96f7a758a459\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5166bf93ac5239837c9c92b58d183ea6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\7f4419b6f829a2485d83b3c3e7b26a97\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\386f41f744eedacd1517c8a15750a48b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9eac876f58a3ebca8878b8654efdc817\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log\150da10324f2811a48da58d3496bbe10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8b5fe7aff54a7aed07287257a9b8e420\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ab3e80af8e5e95a5a62092cc9293c91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net\dd5c866d2462dd913ed0a0287396aa50\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing\eb9369fc9393d29afe51e45cb49aa4be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\565496636c549f7f72fff7db554685b6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f3989d3e9cb8904e4edf23ede5adb6c1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2ac3fd2abc9bb5eab553ef8e44ca77ca\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\51c60db370e050d9cdcac17060aaac53\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\52481fccddb053768631c640d5059d4b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76a5d670ce969c0c65a905b7303d4bbf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9e32918462a2d0c786fbf21a873cc358\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c3831eb95ccf3904bab81a97a9b08ed3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dbf07cb14b4dcc210cdf8b5d90a12a56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech\61a931da70f8078539a51cef3888d02d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web\a70842538614699d690561ef5f43598b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\0d2eb147f2b4b13af1141810688e2d5f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\02068ef9dafba3308b13444b8f4e5940\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8fbe244f1f9ad9ce887c125bae44a50b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\9df99ed350ef0a43fbcc1b9e586f1c7f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\569a7210fae634e8827a1bd805922540\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\a1d43a413800a3fa024cba9161c34c44\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0d511c8f1da06cc18f2da9b593042841\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\c69974f79eb0c96357fbf031df6d8ed0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\0f643b7bd4525c3165733f6988bdbfe2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\2e2096834f67f11a362be1e5c0da4d54\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\c7b1290bb35d3e3c53d20e5928c9fa73\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\770e21411a66352a12b5d3f1e47e972e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9484262c4f1cfaace92aa9d1fee76025\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services\149f2dcb9c9706e592d1980a945850c2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\4cb0c81cca997d9fbecda9a1824f2fdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\9cf13572472dc2efe8f3b7c2ab6198d3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\18419dd13ced512c5f8dc15a79a601eb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9bbefd2263d8f2169ab3695798208293\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\544e73a3f3f2daea050f03e4c94e9a6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\467bcaca5f4d2914922f62772ea4ea7d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\be049b8fe1bf23daab7e76159a7e00dd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\ad9facc364268611cc4ca65f77caeddd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\70c840dc13aae2e1323b13d7b27030ae\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ece129234f9ba9ad856d0e77e4849137\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\5904383f7c86f1374a14198872dfa7d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cc063533b04f9420d1aa571a36d1fabd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig\3c0d21e75c9a48aba6fba3ddff0fcf39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\4daf91c66e01c3dd92b239feacaa8245\CRYPTOLOCKER.txt
%Windows%\Cursors\CRYPTOLOCKER.txt
%Windows%\Debug\CRYPTOLOCKER.txt
%Windows%\Debug\UserMode\CRYPTOLOCKER.txt
%Windows%\Downloaded Program Files\CRYPTOLOCKER.txt
%Windows%\Driver Cache\i386\CRYPTOLOCKER.txt
%Windows%\ehome\CRYPTOLOCKER.txt
%Windows%\Fonts\CRYPTOLOCKER.txt
%Windows%\Help\CRYPTOLOCKER.txt
%Windows%\Help\Tours\htmlTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\mmTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Css\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Scr\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Video\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\CRYPTOLOCKER.txt
%Windows%\ime\CRYPTOLOCKER.txt
%Windows%\inf\CRYPTOLOCKER.txt
%Windows%\Installer\CRYPTOLOCKER.txt
%Windows%\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\CRYPTOLOCKER.txt
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\CRYPTOLOCKER.txt
%Windows%\Installer\{835818DD-220C-4ABD-946E-0D8660B95E29}\CRYPTOLOCKER.txt
%Windows%\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%Windows%\Media\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.0.3705\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.1.4322\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\en-us\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL\en\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\en-US\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\CRYPTOLOCKER.txt
%Windows%\msagent\CRYPTOLOCKER.txt
%Windows%\msagent\chars\CRYPTOLOCKER.txt
%Windows%\msagent\intl\CRYPTOLOCKER.txt
%Windows%\mui\CRYPTOLOCKER.txt
%Windows%\Offline Web Pages\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\Cache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Database\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\DataColl\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Indices\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Logs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\Professional_32#0409\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\PackageStore\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\blurbs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CompatCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\dialogs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\DVDUpgrd\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\ErrMsg\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\errors\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\16x16\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\24x24\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\32x32\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\48x48\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Centers\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Expando\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\NetDiag\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\subpanels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\rc\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\scripts\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\UpdateCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Config\CRYPTOLOCKER.txt
%Windows%\PeerNet\CRYPTOLOCKER.txt
%Windows%\Prefetch\CRYPTOLOCKER.txt
%Windows%\Provisioning\Schemas\CRYPTOLOCKER.txt
%Windows%\pss\CRYPTOLOCKER.txt
%Windows%\Registration\CRYPTOLOCKER.txt
%Windows%\repair\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Homestead\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Metallic\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\NormalColor\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\CRYPTOLOCKER.txt
%Windows%\security\Database\CRYPTOLOCKER.txt
%Windows%\security\logs\CRYPTOLOCKER.txt
%Windows%\security\templates\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\Logs\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\CRYPTOLOCKER.txt
%Windows%\srchasst\chars\CRYPTOLOCKER.txt
%Windows%\srchasst\CRYPTOLOCKER.txt
%Windows%\srchasst\mui\0409\CRYPTOLOCKER.txt
%System%\CRYPTOLOCKER.txt
%System%\1033\CRYPTOLOCKER.txt
%System%\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\CRYPTOLOCKER.txt
%System%\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\Com\CRYPTOLOCKER.txt
%System%\config\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%System%\config\systemprofile\Cookies\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101620111017\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\28YE50EE\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8B98T9M7\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PTX100DX\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\T024QSIS\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\CRYPTOLOCKER.txt
%System%\config\systemprofile\SendTo\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Startup\CRYPTOLOCKER.txt
%System%\config\systemprofile\Templates\CRYPTOLOCKER.txt
%System%\DirectX\Dinput\CRYPTOLOCKER.txt
%System%\dllcache\CRYPTOLOCKER.txt
%System%\drivers\CRYPTOLOCKER.txt
%System%\drivers\etc\CRYPTOLOCKER.txt
%System%\en-us\CRYPTOLOCKER.txt
%System%\GroupPolicy\CRYPTOLOCKER.txt
%System%\ias\CRYPTOLOCKER.txt
%System%\icsxml\CRYPTOLOCKER.txt
%System%\Macromed\Flash\CRYPTOLOCKER.txt
%System%\Microsoft\Protect\S-1-5-18\User\CRYPTOLOCKER.txt
%System%\MsDtc\CRYPTOLOCKER.txt
%System%\MsDtc\Trace\CRYPTOLOCKER.txt
%System%\mui\0009\CRYPTOLOCKER.txt
%System%\mui\0401\CRYPTOLOCKER.txt
%System%\mui\0402\CRYPTOLOCKER.txt
%System%\mui\0404\CRYPTOLOCKER.txt
%System%\mui\0405\CRYPTOLOCKER.txt
%System%\mui\0406\CRYPTOLOCKER.txt
%System%\mui\0407\CRYPTOLOCKER.txt
%System%\mui\0408\CRYPTOLOCKER.txt
%System%\mui\0409\CRYPTOLOCKER.txt
%System%\mui\040b\CRYPTOLOCKER.txt
%System%\mui\040C\CRYPTOLOCKER.txt
%System%\mui\040D\CRYPTOLOCKER.txt
%System%\mui\040e\CRYPTOLOCKER.txt
%System%\mui\0410\CRYPTOLOCKER.txt
%System%\mui\0411\CRYPTOLOCKER.txt
%System%\mui\0412\CRYPTOLOCKER.txt
%System%\mui\0413\CRYPTOLOCKER.txt
%System%\mui\0414\CRYPTOLOCKER.txt
%System%\mui\0415\CRYPTOLOCKER.txt
%System%\mui\0416\CRYPTOLOCKER.txt
%System%\mui\0418\CRYPTOLOCKER.txt
%System%\mui\0419\CRYPTOLOCKER.txt
%System%\mui\041a\CRYPTOLOCKER.txt
%System%\mui\041b\CRYPTOLOCKER.txt
%System%\mui\041D\CRYPTOLOCKER.txt
%System%\mui\041e\CRYPTOLOCKER.txt
%System%\mui\041f\CRYPTOLOCKER.txt
%System%\mui\0424\CRYPTOLOCKER.txt
%System%\mui\0425\CRYPTOLOCKER.txt
%System%\mui\0426\CRYPTOLOCKER.txt
%System%\mui\0427\CRYPTOLOCKER.txt
%System%\mui\0804\CRYPTOLOCKER.txt
%System%\mui\0816\CRYPTOLOCKER.txt
%System%\mui\0C0A\CRYPTOLOCKER.txt
%System%\npp\CRYPTOLOCKER.txt
%System%\oobe\actsetup\CRYPTOLOCKER.txt
%System%\oobe\CRYPTOLOCKER.txt
%System%\oobe\error\CRYPTOLOCKER.txt
%System%\oobe\html\dslmain\CRYPTOLOCKER.txt
%System%\oobe\html\iconnect\CRYPTOLOCKER.txt
%System%\oobe\html\isptype\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\images\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\CRYPTOLOCKER.txt
%System%\oobe\html\sconnect\CRYPTOLOCKER.txt
%System%\oobe\icserror\CRYPTOLOCKER.txt
%System%\oobe\images\CRYPTOLOCKER.txt
%System%\oobe\isperror\CRYPTOLOCKER.txt
%System%\oobe\regerror\CRYPTOLOCKER.txt
%System%\oobe\setup\CRYPTOLOCKER.txt
%System%\ras\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0000\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\i386\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0002\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0003\DriverFiles\CRYPTOLOCKER.txt
%System%\Restore\CRYPTOLOCKER.txt
%System%\Setup\CRYPTOLOCKER.txt
%System%\spool\drivers\color\CRYPTOLOCKER.txt
%System%\spool\drivers\w32x86\3\CRYPTOLOCKER.txt
%System%\spool\prtprocs\w32x86\CRYPTOLOCKER.txt
%System%\spool\prtprocs\x64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\CRYPTOLOCKER.txt
%System%\usmt\CRYPTOLOCKER.txt
%System%\wbem\AutoRecover\CRYPTOLOCKER.txt
%System%\wbem\CRYPTOLOCKER.txt
%System%\wbem\Logs\CRYPTOLOCKER.txt
%System%\wbem\Performance\CRYPTOLOCKER.txt
%System%\wbem\Repository\CRYPTOLOCKER.txt
%System%\wbem\Repository\FS\CRYPTOLOCKER.txt
%System%\wbem\xml\CRYPTOLOCKER.txt
%System%\XPSViewer\en-us\CRYPTOLOCKER.txt
%System%\XPSViewer\CRYPTOLOCKER.txt
%Windows%\Tasks\CRYPTOLOCKER.txt
%Temp%\CRYPTOLOCKER.txt
%Windows%\twain_32\CRYPTOLOCKER.txt
%Windows%\Web\CRYPTOLOCKER.txt
%Windows%\Web\printers\images\CRYPTOLOCKER.txt
%Windows%\Web\printers\CRYPTOLOCKER.txt
%Windows%\Web\Wallpaper\CRYPTOLOCKER.txt
%Windows%\WinSxS\Manifests\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\CRYPTOLOCKER.txt
%Desktop%\CRYPTOLOCKER.txt
%User Temp%\etdD4mDj7Cd5XTc.exe

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.. %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.. %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista and 7.. %Common Startup% is the system's shared Startup folder, which is usually C:\Documents and Settings\All Users\Start Menu\Programs\Startup on Windows 2000, XP, and Server 2003.. %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.. %Temporary Internet Files% is the Temporary Internet Files folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temporary Internet Files on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Microsoft\Windows\Temporary Internet Files on Windows Vista and 7.. %User Startup% is the current user's Startup folder, which is usually C:\Windows\Profiles\{user name}\Start Menu\Programs\Startup on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Start Menu\Programs\Startup on Windows NT, and C:\Documents and Settings\{User name}\Start Menu\Programs\Startup.. %Favorites% is the current user's Favorites folder, which is usually C:\Documents and Settings\{user name}\Favorites on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\Favorites on Windows Vista and 7.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).. %Windows% is the Windows folder, which is usually C:\Windows.. %System% is the Windows system folder, which is usually C:\Windows\System32.. %Temp% is the Windows Temporary folder, which is usually C:\Windows\Temp.. %Desktop% is the current user's desktop, which is usually C:\Documents and Settings\{User Name}\Desktop on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\Desktop on Windows Vista and 7.)

This report is generated via an automated analysis system.

SOLUTION

Minimum Scan Engine:

9.300

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

In HKEY_CLASSES_ROOT
- .CRYPTOLOCKER

In HKEY_CLASSES_ROOT
- IMBAJZCDFGWDRRF

In HKEY_CLASSES_ROOT\IMBAJZCDFGWDRRF
- DefaultIcon

In HKEY_CLASSES_ROOT\IMBAJZCDFGWDRRF\shell\open
- command

In HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat
- 10.0

In HKEY_CURRENT_USER\Software\Adobe\Adobe Synchronizer
- 10.0

In HKEY_LOCAL_MACHINE\System
- Acrobatbrokerserverdispatchercpp789

In HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\Installer
- Migrated

Step 4

Delete this registry value

[ Learn More ]

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- winmes = "%User Temp%\etdD4mDj7Cd5XTc.exe"

Step 5

Search and delete these components

[ Learn More ]

There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

%User Temp%\winrun4.exe
%User Temp%\Email.pdf
%System Root%\CRYPTOLOCKER.txt
%User Profile%\Security\CRYPTOLOCKER.txt
%User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%User Profile%\Application Data\CRYPTOLOCKER.txt
%User Profile%\S-1-5-18\CRYPTOLOCKER.txt
%User Profile%\Media Player\CRYPTOLOCKER.txt
%User Profile%\Pbk\CRYPTOLOCKER.txt
%User Profile%\Default Pictures\CRYPTOLOCKER.txt
%User Profile%\User Account Pictures\CRYPTOLOCKER.txt
%User Profile%\Documents\CRYPTOLOCKER.txt
%User Profile%\My Music\CRYPTOLOCKER.txt
%User Profile%\Sample Music\CRYPTOLOCKER.txt
%User Profile%\0008044E\CRYPTOLOCKER.txt
%User Profile%\My Pictures\CRYPTOLOCKER.txt
%User Profile%\Sample Pictures\CRYPTOLOCKER.txt
%User Profile%\My Videos\CRYPTOLOCKER.txt
%User Profile%\DRM\CRYPTOLOCKER.txt
%Start Menu%\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Communications\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\System Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\Administrative Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\CRYPTOLOCKER.txt
%Start Menu%\Programs\Games\CRYPTOLOCKER.txt
%Common Startup%\CRYPTOLOCKER.txt
%Start Menu%\Programs\WinPcap\CRYPTOLOCKER.txt
%User Profile%\Internet Explorer\CRYPTOLOCKER.txt
%User Profile%\Cookies\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Media Player\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%User Profile%\Local Settings\CRYPTOLOCKER.txt
%User Profile%\History\CRYPTOLOCKER.txt
%User Profile%\History.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\09RWHJQN\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\BVLBNMKH\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZDGZNKA5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZSGKJKO6\CRYPTOLOCKER.txt
%Temporary Internet Files%\CRYPTOLOCKER.txt
%User Profile%\CRYPTOLOCKER.txt
%User Profile%\SendTo\CRYPTOLOCKER.txt
%User Startup%\CRYPTOLOCKER.txt
%User Profile%\Templates\CRYPTOLOCKER.txt
%Application Data%\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\246FT6TD\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\9STOYKO4\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\NF72HY20\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\PHOM4UYK\CRYPTOLOCKER.txt
%User Profile%\Quick Launch\CRYPTOLOCKER.txt
%User Profile%\MMC\CRYPTOLOCKER.txt
%User Profile%\Themes\CRYPTOLOCKER.txt
%Favorites%\CRYPTOLOCKER.txt
%Favorites%\Links\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%Application Data%\Microsoft\CRYPTOLOCKER.txt
%User Profile%\MSHist012013061320130614\CRYPTOLOCKER.txt
%User Temp%\CRYPTOLOCKER.txt
%User Profile%\My Documents\CRYPTOLOCKER.txt
%User Profile%\Recent\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Esl\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\AIR\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Browser\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Services\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CMap\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\ARM\1.0\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\HelpCfg\en_US\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DAO\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1025\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1028\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1031\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1036\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1040\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1041\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1042\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\2052\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\3082\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\MSInfo\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Stationery\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\TextConv\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Triedit\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VC\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VGX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Web Folders\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Services\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\ado\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\msadc\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\Ole DB\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\Connection Wizard\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\PLUGINS\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\SIGNUP\CRYPTOLOCKER.txt
%Program Files%\Messenger\CRYPTOLOCKER.txt
%Program Files%\Microsoft.NET\RedistList\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\Profiles\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\OOBE\CRYPTOLOCKER.txt
%Program Files%\MSN Gaming Zone\Windows\CRYPTOLOCKER.txt
%Program Files%\MSXML 6.0\EULA\CRYPTOLOCKER.txt
%Program Files%\NetMeeting\CRYPTOLOCKER.txt
%Program Files%\Online Services\CRYPTOLOCKER.txt
%Program Files%\Outlook Express\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\Skins\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Accessories\CRYPTOLOCKER.txt
%Program Files%\Windows NT\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Pinball\CRYPTOLOCKER.txt
%Program Files%\WinPcap\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\spuninst\CRYPTOLOCKER.txt
%Windows%\$NtUninstallWIC$\spuninst\CRYPTOLOCKER.txt
%Windows%\CRYPTOLOCKER.txt
%Windows%\AppPatch\CRYPTOLOCKER.txt
%Windows%\assembly\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\0c0688825a79e72951210318eef63c82\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\0e1c79174260c4e2bf159a2cc1d77338\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\d2574c8ae333ff959be2e0d83121ad10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\3bfb841477d28ca866b91211f50199bb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\837fa037ca302e7432ea9913ae453e70\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\7cfd4a64a95807ee7cb6ae50cfabd93c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\11ef4be6ee227fce3725d6df534297a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\8973265600edd2135ecf5e369a087dfb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b384b96460ad28697e8990e56b0234d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\08b2c2639708ab20748653185d6b67be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5f595338c63c2fdb5a171760c29d5bcf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9952f66fc592ffc21b024803c8c955fd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\17921c875097ce0f638aa81a59093d3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2eef2f34c0295f1fe5d6d4441f9e790b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\edcde6e8ccca7996c2e1ad40bd0f2758\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\552a460a8bcf608aecc6418db0d40216\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\6a8da5dd61b1fcfed27f84047a3e2bad\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild\aa25092606e5e9826db7a7bd0adb9b2b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\d0e67f49781c157069bc3298454354bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI\15578874ee1464dc6a3545d4be842e59\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework\42f0e1a4e3081c50503d74ebc0540a60\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4d2a51c03b27e615ff9f1c430f2014ba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost\38f0d77629891e7808424103aaef0728\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities\931ad0783c03deb967760d5c2387274a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\607df7a11c3334146664bc74130bc38f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8594d07d18330843968d649ed6ef6166\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a57e34a36f38a007aa24f1bd07a167ab\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn\767e70aec1ffb52f95c2b07c08fa0781\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\5c87f21925d5a61059ee68cef72841f4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\caecc65b5c0ede0fe0d55b9f48ada80f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\642a7b3d47828fb0070a55cfeb58f42b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\7bab044e648dfea461b73dc898150539\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\db33744fb49e77c7233adb50f07fe62a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\685c7df1332a74aaa899f2bdb3beabc3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\ec884cc78d6c5bb67bc2c819b1f00ee5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services\62f067f8572551df931b3ee6493383d7\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment\90fd7fc9fbf5f4eed9135996b515a38a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device\36342e6024e2844502d0bdaa9d30971a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\46a7f51ef1a9d917598b96f7a758a459\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5166bf93ac5239837c9c92b58d183ea6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\7f4419b6f829a2485d83b3c3e7b26a97\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\386f41f744eedacd1517c8a15750a48b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9eac876f58a3ebca8878b8654efdc817\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log\150da10324f2811a48da58d3496bbe10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8b5fe7aff54a7aed07287257a9b8e420\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ab3e80af8e5e95a5a62092cc9293c91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net\dd5c866d2462dd913ed0a0287396aa50\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing\eb9369fc9393d29afe51e45cb49aa4be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\565496636c549f7f72fff7db554685b6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f3989d3e9cb8904e4edf23ede5adb6c1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2ac3fd2abc9bb5eab553ef8e44ca77ca\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\51c60db370e050d9cdcac17060aaac53\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\52481fccddb053768631c640d5059d4b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76a5d670ce969c0c65a905b7303d4bbf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9e32918462a2d0c786fbf21a873cc358\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c3831eb95ccf3904bab81a97a9b08ed3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dbf07cb14b4dcc210cdf8b5d90a12a56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech\61a931da70f8078539a51cef3888d02d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web\a70842538614699d690561ef5f43598b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\0d2eb147f2b4b13af1141810688e2d5f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\02068ef9dafba3308b13444b8f4e5940\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8fbe244f1f9ad9ce887c125bae44a50b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\9df99ed350ef0a43fbcc1b9e586f1c7f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\569a7210fae634e8827a1bd805922540\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\a1d43a413800a3fa024cba9161c34c44\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0d511c8f1da06cc18f2da9b593042841\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\c69974f79eb0c96357fbf031df6d8ed0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\0f643b7bd4525c3165733f6988bdbfe2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\2e2096834f67f11a362be1e5c0da4d54\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\c7b1290bb35d3e3c53d20e5928c9fa73\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\770e21411a66352a12b5d3f1e47e972e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9484262c4f1cfaace92aa9d1fee76025\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services\149f2dcb9c9706e592d1980a945850c2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\4cb0c81cca997d9fbecda9a1824f2fdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\9cf13572472dc2efe8f3b7c2ab6198d3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\18419dd13ced512c5f8dc15a79a601eb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9bbefd2263d8f2169ab3695798208293\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\544e73a3f3f2daea050f03e4c94e9a6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\467bcaca5f4d2914922f62772ea4ea7d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\be049b8fe1bf23daab7e76159a7e00dd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\ad9facc364268611cc4ca65f77caeddd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\70c840dc13aae2e1323b13d7b27030ae\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ece129234f9ba9ad856d0e77e4849137\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\5904383f7c86f1374a14198872dfa7d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cc063533b04f9420d1aa571a36d1fabd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig\3c0d21e75c9a48aba6fba3ddff0fcf39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\4daf91c66e01c3dd92b239feacaa8245\CRYPTOLOCKER.txt
%Windows%\Cursors\CRYPTOLOCKER.txt
%Windows%\Debug\CRYPTOLOCKER.txt
%Windows%\Debug\UserMode\CRYPTOLOCKER.txt
%Windows%\Downloaded Program Files\CRYPTOLOCKER.txt
%Windows%\Driver Cache\i386\CRYPTOLOCKER.txt
%Windows%\ehome\CRYPTOLOCKER.txt
%Windows%\Fonts\CRYPTOLOCKER.txt
%Windows%\Help\CRYPTOLOCKER.txt
%Windows%\Help\Tours\htmlTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\mmTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Css\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Scr\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Video\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\CRYPTOLOCKER.txt
%Windows%\ime\CRYPTOLOCKER.txt
%Windows%\inf\CRYPTOLOCKER.txt
%Windows%\Installer\CRYPTOLOCKER.txt
%Windows%\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\CRYPTOLOCKER.txt
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\CRYPTOLOCKER.txt
%Windows%\Installer\{835818DD-220C-4ABD-946E-0D8660B95E29}\CRYPTOLOCKER.txt
%Windows%\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%Windows%\Media\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.0.3705\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.1.4322\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\en-us\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL\en\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\en-US\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\CRYPTOLOCKER.txt
%Windows%\msagent\CRYPTOLOCKER.txt
%Windows%\msagent\chars\CRYPTOLOCKER.txt
%Windows%\msagent\intl\CRYPTOLOCKER.txt
%Windows%\mui\CRYPTOLOCKER.txt
%Windows%\Offline Web Pages\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\Cache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Database\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\DataColl\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Indices\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Logs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\Professional_32#0409\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\PackageStore\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\blurbs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CompatCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\dialogs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\DVDUpgrd\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\ErrMsg\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\errors\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\16x16\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\24x24\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\32x32\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\48x48\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Centers\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Expando\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\NetDiag\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\subpanels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\rc\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\scripts\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\UpdateCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Config\CRYPTOLOCKER.txt
%Windows%\PeerNet\CRYPTOLOCKER.txt
%Windows%\Prefetch\CRYPTOLOCKER.txt
%Windows%\Provisioning\Schemas\CRYPTOLOCKER.txt
%Windows%\pss\CRYPTOLOCKER.txt
%Windows%\Registration\CRYPTOLOCKER.txt
%Windows%\repair\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Homestead\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Metallic\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\NormalColor\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\CRYPTOLOCKER.txt
%Windows%\security\Database\CRYPTOLOCKER.txt
%Windows%\security\logs\CRYPTOLOCKER.txt
%Windows%\security\templates\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\Logs\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\CRYPTOLOCKER.txt
%Windows%\srchasst\chars\CRYPTOLOCKER.txt
%Windows%\srchasst\CRYPTOLOCKER.txt
%Windows%\srchasst\mui\0409\CRYPTOLOCKER.txt
%System%\CRYPTOLOCKER.txt
%System%\1033\CRYPTOLOCKER.txt
%System%\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\CRYPTOLOCKER.txt
%System%\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\Com\CRYPTOLOCKER.txt
%System%\config\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%System%\config\systemprofile\Cookies\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101620111017\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\28YE50EE\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8B98T9M7\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PTX100DX\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\T024QSIS\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\CRYPTOLOCKER.txt
%System%\config\systemprofile\SendTo\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Startup\CRYPTOLOCKER.txt
%System%\config\systemprofile\Templates\CRYPTOLOCKER.txt
%System%\DirectX\Dinput\CRYPTOLOCKER.txt
%System%\dllcache\CRYPTOLOCKER.txt
%System%\drivers\CRYPTOLOCKER.txt
%System%\drivers\etc\CRYPTOLOCKER.txt
%System%\en-us\CRYPTOLOCKER.txt
%System%\GroupPolicy\CRYPTOLOCKER.txt
%System%\ias\CRYPTOLOCKER.txt
%System%\icsxml\CRYPTOLOCKER.txt
%System%\Macromed\Flash\CRYPTOLOCKER.txt
%System%\Microsoft\Protect\S-1-5-18\User\CRYPTOLOCKER.txt
%System%\MsDtc\CRYPTOLOCKER.txt
%System%\MsDtc\Trace\CRYPTOLOCKER.txt
%System%\mui\0009\CRYPTOLOCKER.txt
%System%\mui\0401\CRYPTOLOCKER.txt
%System%\mui\0402\CRYPTOLOCKER.txt
%System%\mui\0404\CRYPTOLOCKER.txt
%System%\mui\0405\CRYPTOLOCKER.txt
%System%\mui\0406\CRYPTOLOCKER.txt
%System%\mui\0407\CRYPTOLOCKER.txt
%System%\mui\0408\CRYPTOLOCKER.txt
%System%\mui\0409\CRYPTOLOCKER.txt
%System%\mui\040b\CRYPTOLOCKER.txt
%System%\mui\040C\CRYPTOLOCKER.txt
%System%\mui\040D\CRYPTOLOCKER.txt
%System%\mui\040e\CRYPTOLOCKER.txt
%System%\mui\0410\CRYPTOLOCKER.txt
%System%\mui\0411\CRYPTOLOCKER.txt
%System%\mui\0412\CRYPTOLOCKER.txt
%System%\mui\0413\CRYPTOLOCKER.txt
%System%\mui\0414\CRYPTOLOCKER.txt
%System%\mui\0415\CRYPTOLOCKER.txt
%System%\mui\0416\CRYPTOLOCKER.txt
%System%\mui\0418\CRYPTOLOCKER.txt
%System%\mui\0419\CRYPTOLOCKER.txt
%System%\mui\041a\CRYPTOLOCKER.txt
%System%\mui\041b\CRYPTOLOCKER.txt
%System%\mui\041D\CRYPTOLOCKER.txt
%System%\mui\041e\CRYPTOLOCKER.txt
%System%\mui\041f\CRYPTOLOCKER.txt
%System%\mui\0424\CRYPTOLOCKER.txt
%System%\mui\0425\CRYPTOLOCKER.txt
%System%\mui\0426\CRYPTOLOCKER.txt
%System%\mui\0427\CRYPTOLOCKER.txt
%System%\mui\0804\CRYPTOLOCKER.txt
%System%\mui\0816\CRYPTOLOCKER.txt
%System%\mui\0C0A\CRYPTOLOCKER.txt
%System%\npp\CRYPTOLOCKER.txt
%System%\oobe\actsetup\CRYPTOLOCKER.txt
%System%\oobe\CRYPTOLOCKER.txt
%System%\oobe\error\CRYPTOLOCKER.txt
%System%\oobe\html\dslmain\CRYPTOLOCKER.txt
%System%\oobe\html\iconnect\CRYPTOLOCKER.txt
%System%\oobe\html\isptype\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\images\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\CRYPTOLOCKER.txt
%System%\oobe\html\sconnect\CRYPTOLOCKER.txt
%System%\oobe\icserror\CRYPTOLOCKER.txt
%System%\oobe\images\CRYPTOLOCKER.txt
%System%\oobe\isperror\CRYPTOLOCKER.txt
%System%\oobe\regerror\CRYPTOLOCKER.txt
%System%\oobe\setup\CRYPTOLOCKER.txt
%System%\ras\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0000\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\i386\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0002\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0003\DriverFiles\CRYPTOLOCKER.txt
%System%\Restore\CRYPTOLOCKER.txt
%System%\Setup\CRYPTOLOCKER.txt
%System%\spool\drivers\color\CRYPTOLOCKER.txt
%System%\spool\drivers\w32x86\3\CRYPTOLOCKER.txt
%System%\spool\prtprocs\w32x86\CRYPTOLOCKER.txt
%System%\spool\prtprocs\x64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\CRYPTOLOCKER.txt
%System%\usmt\CRYPTOLOCKER.txt
%System%\wbem\AutoRecover\CRYPTOLOCKER.txt
%System%\wbem\CRYPTOLOCKER.txt
%System%\wbem\Logs\CRYPTOLOCKER.txt
%System%\wbem\Performance\CRYPTOLOCKER.txt
%System%\wbem\Repository\CRYPTOLOCKER.txt
%System%\wbem\Repository\FS\CRYPTOLOCKER.txt
%System%\wbem\xml\CRYPTOLOCKER.txt
%System%\XPSViewer\en-us\CRYPTOLOCKER.txt
%System%\XPSViewer\CRYPTOLOCKER.txt
%Windows%\Tasks\CRYPTOLOCKER.txt
%Temp%\CRYPTOLOCKER.txt
%Windows%\twain_32\CRYPTOLOCKER.txt
%Windows%\Web\CRYPTOLOCKER.txt
%Windows%\Web\printers\images\CRYPTOLOCKER.txt
%Windows%\Web\printers\CRYPTOLOCKER.txt
%Windows%\Web\Wallpaper\CRYPTOLOCKER.txt
%Windows%\WinSxS\Manifests\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\CRYPTOLOCKER.txt
%Desktop%\CRYPTOLOCKER.txt
%User Temp%\etdD4mDj7Cd5XTc.exe

To manually delete a malware/grayware component from an affected system:

• For Windows 2000, Windows XP, and Windows Server 2003:

Right-click Start then click Search....
In the Named input box, type:
%User Temp%\winrun4.exe
%User Temp%\Email.pdf
%System Root%\CRYPTOLOCKER.txt
%User Profile%\Security\CRYPTOLOCKER.txt
%User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%User Profile%\Application Data\CRYPTOLOCKER.txt
%User Profile%\S-1-5-18\CRYPTOLOCKER.txt
%User Profile%\Media Player\CRYPTOLOCKER.txt
%User Profile%\Pbk\CRYPTOLOCKER.txt
%User Profile%\Default Pictures\CRYPTOLOCKER.txt
%User Profile%\User Account Pictures\CRYPTOLOCKER.txt
%User Profile%\Documents\CRYPTOLOCKER.txt
%User Profile%\My Music\CRYPTOLOCKER.txt
%User Profile%\Sample Music\CRYPTOLOCKER.txt
%User Profile%\0008044E\CRYPTOLOCKER.txt
%User Profile%\My Pictures\CRYPTOLOCKER.txt
%User Profile%\Sample Pictures\CRYPTOLOCKER.txt
%User Profile%\My Videos\CRYPTOLOCKER.txt
%User Profile%\DRM\CRYPTOLOCKER.txt
%Start Menu%\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Communications\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\System Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\Administrative Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\CRYPTOLOCKER.txt
%Start Menu%\Programs\Games\CRYPTOLOCKER.txt
%Common Startup%\CRYPTOLOCKER.txt
%Start Menu%\Programs\WinPcap\CRYPTOLOCKER.txt
%User Profile%\Internet Explorer\CRYPTOLOCKER.txt
%User Profile%\Cookies\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Media Player\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%User Profile%\Local Settings\CRYPTOLOCKER.txt
%User Profile%\History\CRYPTOLOCKER.txt
%User Profile%\History.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\09RWHJQN\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\BVLBNMKH\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZDGZNKA5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZSGKJKO6\CRYPTOLOCKER.txt
%Temporary Internet Files%\CRYPTOLOCKER.txt
%User Profile%\CRYPTOLOCKER.txt
%User Profile%\SendTo\CRYPTOLOCKER.txt
%User Startup%\CRYPTOLOCKER.txt
%User Profile%\Templates\CRYPTOLOCKER.txt
%Application Data%\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\246FT6TD\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\9STOYKO4\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\NF72HY20\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\PHOM4UYK\CRYPTOLOCKER.txt
%User Profile%\Quick Launch\CRYPTOLOCKER.txt
%User Profile%\MMC\CRYPTOLOCKER.txt
%User Profile%\Themes\CRYPTOLOCKER.txt
%Favorites%\CRYPTOLOCKER.txt
%Favorites%\Links\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%Application Data%\Microsoft\CRYPTOLOCKER.txt
%User Profile%\MSHist012013061320130614\CRYPTOLOCKER.txt
%User Temp%\CRYPTOLOCKER.txt
%User Profile%\My Documents\CRYPTOLOCKER.txt
%User Profile%\Recent\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Esl\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\AIR\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Browser\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Services\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CMap\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\ARM\1.0\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\HelpCfg\en_US\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DAO\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1025\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1028\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1031\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1036\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1040\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1041\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1042\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\2052\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\3082\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\MSInfo\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Stationery\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\TextConv\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Triedit\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VC\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VGX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Web Folders\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Services\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\ado\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\msadc\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\Ole DB\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\Connection Wizard\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\PLUGINS\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\SIGNUP\CRYPTOLOCKER.txt
%Program Files%\Messenger\CRYPTOLOCKER.txt
%Program Files%\Microsoft.NET\RedistList\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\Profiles\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\OOBE\CRYPTOLOCKER.txt
%Program Files%\MSN Gaming Zone\Windows\CRYPTOLOCKER.txt
%Program Files%\MSXML 6.0\EULA\CRYPTOLOCKER.txt
%Program Files%\NetMeeting\CRYPTOLOCKER.txt
%Program Files%\Online Services\CRYPTOLOCKER.txt
%Program Files%\Outlook Express\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\Skins\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Accessories\CRYPTOLOCKER.txt
%Program Files%\Windows NT\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Pinball\CRYPTOLOCKER.txt
%Program Files%\WinPcap\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\spuninst\CRYPTOLOCKER.txt
%Windows%\$NtUninstallWIC$\spuninst\CRYPTOLOCKER.txt
%Windows%\CRYPTOLOCKER.txt
%Windows%\AppPatch\CRYPTOLOCKER.txt
%Windows%\assembly\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\0c0688825a79e72951210318eef63c82\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\0e1c79174260c4e2bf159a2cc1d77338\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\d2574c8ae333ff959be2e0d83121ad10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\3bfb841477d28ca866b91211f50199bb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\837fa037ca302e7432ea9913ae453e70\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\7cfd4a64a95807ee7cb6ae50cfabd93c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\11ef4be6ee227fce3725d6df534297a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\8973265600edd2135ecf5e369a087dfb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b384b96460ad28697e8990e56b0234d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\08b2c2639708ab20748653185d6b67be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5f595338c63c2fdb5a171760c29d5bcf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9952f66fc592ffc21b024803c8c955fd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\17921c875097ce0f638aa81a59093d3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2eef2f34c0295f1fe5d6d4441f9e790b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\edcde6e8ccca7996c2e1ad40bd0f2758\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\552a460a8bcf608aecc6418db0d40216\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\6a8da5dd61b1fcfed27f84047a3e2bad\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild\aa25092606e5e9826db7a7bd0adb9b2b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\d0e67f49781c157069bc3298454354bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI\15578874ee1464dc6a3545d4be842e59\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework\42f0e1a4e3081c50503d74ebc0540a60\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4d2a51c03b27e615ff9f1c430f2014ba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost\38f0d77629891e7808424103aaef0728\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities\931ad0783c03deb967760d5c2387274a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\607df7a11c3334146664bc74130bc38f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8594d07d18330843968d649ed6ef6166\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a57e34a36f38a007aa24f1bd07a167ab\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn\767e70aec1ffb52f95c2b07c08fa0781\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\5c87f21925d5a61059ee68cef72841f4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\caecc65b5c0ede0fe0d55b9f48ada80f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\642a7b3d47828fb0070a55cfeb58f42b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\7bab044e648dfea461b73dc898150539\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\db33744fb49e77c7233adb50f07fe62a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\685c7df1332a74aaa899f2bdb3beabc3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\ec884cc78d6c5bb67bc2c819b1f00ee5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services\62f067f8572551df931b3ee6493383d7\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment\90fd7fc9fbf5f4eed9135996b515a38a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device\36342e6024e2844502d0bdaa9d30971a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\46a7f51ef1a9d917598b96f7a758a459\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5166bf93ac5239837c9c92b58d183ea6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\7f4419b6f829a2485d83b3c3e7b26a97\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\386f41f744eedacd1517c8a15750a48b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9eac876f58a3ebca8878b8654efdc817\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log\150da10324f2811a48da58d3496bbe10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8b5fe7aff54a7aed07287257a9b8e420\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ab3e80af8e5e95a5a62092cc9293c91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net\dd5c866d2462dd913ed0a0287396aa50\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing\eb9369fc9393d29afe51e45cb49aa4be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\565496636c549f7f72fff7db554685b6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f3989d3e9cb8904e4edf23ede5adb6c1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2ac3fd2abc9bb5eab553ef8e44ca77ca\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\51c60db370e050d9cdcac17060aaac53\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\52481fccddb053768631c640d5059d4b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76a5d670ce969c0c65a905b7303d4bbf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9e32918462a2d0c786fbf21a873cc358\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c3831eb95ccf3904bab81a97a9b08ed3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dbf07cb14b4dcc210cdf8b5d90a12a56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech\61a931da70f8078539a51cef3888d02d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web\a70842538614699d690561ef5f43598b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\0d2eb147f2b4b13af1141810688e2d5f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\02068ef9dafba3308b13444b8f4e5940\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8fbe244f1f9ad9ce887c125bae44a50b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\9df99ed350ef0a43fbcc1b9e586f1c7f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\569a7210fae634e8827a1bd805922540\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\a1d43a413800a3fa024cba9161c34c44\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0d511c8f1da06cc18f2da9b593042841\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\c69974f79eb0c96357fbf031df6d8ed0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\0f643b7bd4525c3165733f6988bdbfe2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\2e2096834f67f11a362be1e5c0da4d54\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\c7b1290bb35d3e3c53d20e5928c9fa73\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\770e21411a66352a12b5d3f1e47e972e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9484262c4f1cfaace92aa9d1fee76025\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services\149f2dcb9c9706e592d1980a945850c2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\4cb0c81cca997d9fbecda9a1824f2fdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\9cf13572472dc2efe8f3b7c2ab6198d3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\18419dd13ced512c5f8dc15a79a601eb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9bbefd2263d8f2169ab3695798208293\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\544e73a3f3f2daea050f03e4c94e9a6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\467bcaca5f4d2914922f62772ea4ea7d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\be049b8fe1bf23daab7e76159a7e00dd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\ad9facc364268611cc4ca65f77caeddd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\70c840dc13aae2e1323b13d7b27030ae\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ece129234f9ba9ad856d0e77e4849137\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\5904383f7c86f1374a14198872dfa7d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cc063533b04f9420d1aa571a36d1fabd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig\3c0d21e75c9a48aba6fba3ddff0fcf39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\4daf91c66e01c3dd92b239feacaa8245\CRYPTOLOCKER.txt
%Windows%\Cursors\CRYPTOLOCKER.txt
%Windows%\Debug\CRYPTOLOCKER.txt
%Windows%\Debug\UserMode\CRYPTOLOCKER.txt
%Windows%\Downloaded Program Files\CRYPTOLOCKER.txt
%Windows%\Driver Cache\i386\CRYPTOLOCKER.txt
%Windows%\ehome\CRYPTOLOCKER.txt
%Windows%\Fonts\CRYPTOLOCKER.txt
%Windows%\Help\CRYPTOLOCKER.txt
%Windows%\Help\Tours\htmlTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\mmTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Css\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Scr\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Video\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\CRYPTOLOCKER.txt
%Windows%\ime\CRYPTOLOCKER.txt
%Windows%\inf\CRYPTOLOCKER.txt
%Windows%\Installer\CRYPTOLOCKER.txt
%Windows%\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\CRYPTOLOCKER.txt
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\CRYPTOLOCKER.txt
%Windows%\Installer\{835818DD-220C-4ABD-946E-0D8660B95E29}\CRYPTOLOCKER.txt
%Windows%\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%Windows%\Media\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.0.3705\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.1.4322\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\en-us\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL\en\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\en-US\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\CRYPTOLOCKER.txt
%Windows%\msagent\CRYPTOLOCKER.txt
%Windows%\msagent\chars\CRYPTOLOCKER.txt
%Windows%\msagent\intl\CRYPTOLOCKER.txt
%Windows%\mui\CRYPTOLOCKER.txt
%Windows%\Offline Web Pages\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\Cache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Database\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\DataColl\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Indices\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Logs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\Professional_32#0409\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\PackageStore\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\blurbs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CompatCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\dialogs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\DVDUpgrd\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\ErrMsg\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\errors\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\16x16\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\24x24\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\32x32\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\48x48\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Centers\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Expando\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\NetDiag\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\subpanels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\rc\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\scripts\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\UpdateCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Config\CRYPTOLOCKER.txt
%Windows%\PeerNet\CRYPTOLOCKER.txt
%Windows%\Prefetch\CRYPTOLOCKER.txt
%Windows%\Provisioning\Schemas\CRYPTOLOCKER.txt
%Windows%\pss\CRYPTOLOCKER.txt
%Windows%\Registration\CRYPTOLOCKER.txt
%Windows%\repair\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Homestead\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Metallic\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\NormalColor\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\CRYPTOLOCKER.txt
%Windows%\security\Database\CRYPTOLOCKER.txt
%Windows%\security\logs\CRYPTOLOCKER.txt
%Windows%\security\templates\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\Logs\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\CRYPTOLOCKER.txt
%Windows%\srchasst\chars\CRYPTOLOCKER.txt
%Windows%\srchasst\CRYPTOLOCKER.txt
%Windows%\srchasst\mui\0409\CRYPTOLOCKER.txt
%System%\CRYPTOLOCKER.txt
%System%\1033\CRYPTOLOCKER.txt
%System%\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\CRYPTOLOCKER.txt
%System%\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\Com\CRYPTOLOCKER.txt
%System%\config\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%System%\config\systemprofile\Cookies\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101620111017\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\28YE50EE\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8B98T9M7\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PTX100DX\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\T024QSIS\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\CRYPTOLOCKER.txt
%System%\config\systemprofile\SendTo\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Startup\CRYPTOLOCKER.txt
%System%\config\systemprofile\Templates\CRYPTOLOCKER.txt
%System%\DirectX\Dinput\CRYPTOLOCKER.txt
%System%\dllcache\CRYPTOLOCKER.txt
%System%\drivers\CRYPTOLOCKER.txt
%System%\drivers\etc\CRYPTOLOCKER.txt
%System%\en-us\CRYPTOLOCKER.txt
%System%\GroupPolicy\CRYPTOLOCKER.txt
%System%\ias\CRYPTOLOCKER.txt
%System%\icsxml\CRYPTOLOCKER.txt
%System%\Macromed\Flash\CRYPTOLOCKER.txt
%System%\Microsoft\Protect\S-1-5-18\User\CRYPTOLOCKER.txt
%System%\MsDtc\CRYPTOLOCKER.txt
%System%\MsDtc\Trace\CRYPTOLOCKER.txt
%System%\mui\0009\CRYPTOLOCKER.txt
%System%\mui\0401\CRYPTOLOCKER.txt
%System%\mui\0402\CRYPTOLOCKER.txt
%System%\mui\0404\CRYPTOLOCKER.txt
%System%\mui\0405\CRYPTOLOCKER.txt
%System%\mui\0406\CRYPTOLOCKER.txt
%System%\mui\0407\CRYPTOLOCKER.txt
%System%\mui\0408\CRYPTOLOCKER.txt
%System%\mui\0409\CRYPTOLOCKER.txt
%System%\mui\040b\CRYPTOLOCKER.txt
%System%\mui\040C\CRYPTOLOCKER.txt
%System%\mui\040D\CRYPTOLOCKER.txt
%System%\mui\040e\CRYPTOLOCKER.txt
%System%\mui\0410\CRYPTOLOCKER.txt
%System%\mui\0411\CRYPTOLOCKER.txt
%System%\mui\0412\CRYPTOLOCKER.txt
%System%\mui\0413\CRYPTOLOCKER.txt
%System%\mui\0414\CRYPTOLOCKER.txt
%System%\mui\0415\CRYPTOLOCKER.txt
%System%\mui\0416\CRYPTOLOCKER.txt
%System%\mui\0418\CRYPTOLOCKER.txt
%System%\mui\0419\CRYPTOLOCKER.txt
%System%\mui\041a\CRYPTOLOCKER.txt
%System%\mui\041b\CRYPTOLOCKER.txt
%System%\mui\041D\CRYPTOLOCKER.txt
%System%\mui\041e\CRYPTOLOCKER.txt
%System%\mui\041f\CRYPTOLOCKER.txt
%System%\mui\0424\CRYPTOLOCKER.txt
%System%\mui\0425\CRYPTOLOCKER.txt
%System%\mui\0426\CRYPTOLOCKER.txt
%System%\mui\0427\CRYPTOLOCKER.txt
%System%\mui\0804\CRYPTOLOCKER.txt
%System%\mui\0816\CRYPTOLOCKER.txt
%System%\mui\0C0A\CRYPTOLOCKER.txt
%System%\npp\CRYPTOLOCKER.txt
%System%\oobe\actsetup\CRYPTOLOCKER.txt
%System%\oobe\CRYPTOLOCKER.txt
%System%\oobe\error\CRYPTOLOCKER.txt
%System%\oobe\html\dslmain\CRYPTOLOCKER.txt
%System%\oobe\html\iconnect\CRYPTOLOCKER.txt
%System%\oobe\html\isptype\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\images\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\CRYPTOLOCKER.txt
%System%\oobe\html\sconnect\CRYPTOLOCKER.txt
%System%\oobe\icserror\CRYPTOLOCKER.txt
%System%\oobe\images\CRYPTOLOCKER.txt
%System%\oobe\isperror\CRYPTOLOCKER.txt
%System%\oobe\regerror\CRYPTOLOCKER.txt
%System%\oobe\setup\CRYPTOLOCKER.txt
%System%\ras\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0000\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\i386\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0002\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0003\DriverFiles\CRYPTOLOCKER.txt
%System%\Restore\CRYPTOLOCKER.txt
%System%\Setup\CRYPTOLOCKER.txt
%System%\spool\drivers\color\CRYPTOLOCKER.txt
%System%\spool\drivers\w32x86\3\CRYPTOLOCKER.txt
%System%\spool\prtprocs\w32x86\CRYPTOLOCKER.txt
%System%\spool\prtprocs\x64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\CRYPTOLOCKER.txt
%System%\usmt\CRYPTOLOCKER.txt
%System%\wbem\AutoRecover\CRYPTOLOCKER.txt
%System%\wbem\CRYPTOLOCKER.txt
%System%\wbem\Logs\CRYPTOLOCKER.txt
%System%\wbem\Performance\CRYPTOLOCKER.txt
%System%\wbem\Repository\CRYPTOLOCKER.txt
%System%\wbem\Repository\FS\CRYPTOLOCKER.txt
%System%\wbem\xml\CRYPTOLOCKER.txt
%System%\XPSViewer\en-us\CRYPTOLOCKER.txt
%System%\XPSViewer\CRYPTOLOCKER.txt
%Windows%\Tasks\CRYPTOLOCKER.txt
%Temp%\CRYPTOLOCKER.txt
%Windows%\twain_32\CRYPTOLOCKER.txt
%Windows%\Web\CRYPTOLOCKER.txt
%Windows%\Web\printers\images\CRYPTOLOCKER.txt
%Windows%\Web\printers\CRYPTOLOCKER.txt
%Windows%\Web\Wallpaper\CRYPTOLOCKER.txt
%Windows%\WinSxS\Manifests\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\CRYPTOLOCKER.txt
%Desktop%\CRYPTOLOCKER.txt
%User Temp%\etdD4mDj7Cd5XTc.exe
In the Look In drop-down list, select My Computer then press Enter.
Once located, select the file then press SHIFT+DELETE to delete it.
Repeat the said steps for all files listed.

• For Windows Vista and Windows 7 users:

Click Start>Computer.
In the Search input box, type:
%User Temp%\winrun4.exe
%User Temp%\Email.pdf
%System Root%\CRYPTOLOCKER.txt
%User Profile%\Security\CRYPTOLOCKER.txt
%User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%User Profile%\Application Data\CRYPTOLOCKER.txt
%User Profile%\S-1-5-18\CRYPTOLOCKER.txt
%User Profile%\Media Player\CRYPTOLOCKER.txt
%User Profile%\Pbk\CRYPTOLOCKER.txt
%User Profile%\Default Pictures\CRYPTOLOCKER.txt
%User Profile%\User Account Pictures\CRYPTOLOCKER.txt
%User Profile%\Documents\CRYPTOLOCKER.txt
%User Profile%\My Music\CRYPTOLOCKER.txt
%User Profile%\Sample Music\CRYPTOLOCKER.txt
%User Profile%\0008044E\CRYPTOLOCKER.txt
%User Profile%\My Pictures\CRYPTOLOCKER.txt
%User Profile%\Sample Pictures\CRYPTOLOCKER.txt
%User Profile%\My Videos\CRYPTOLOCKER.txt
%User Profile%\DRM\CRYPTOLOCKER.txt
%Start Menu%\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Communications\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%Start Menu%\Programs\Accessories\System Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\Administrative Tools\CRYPTOLOCKER.txt
%Start Menu%\Programs\CRYPTOLOCKER.txt
%Start Menu%\Programs\Games\CRYPTOLOCKER.txt
%Common Startup%\CRYPTOLOCKER.txt
%Start Menu%\Programs\WinPcap\CRYPTOLOCKER.txt
%User Profile%\Internet Explorer\CRYPTOLOCKER.txt
%User Profile%\Cookies\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Media Player\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%User Profile%\Local Settings\CRYPTOLOCKER.txt
%User Profile%\History\CRYPTOLOCKER.txt
%User Profile%\History.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\09RWHJQN\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\BVLBNMKH\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZDGZNKA5\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\ZSGKJKO6\CRYPTOLOCKER.txt
%Temporary Internet Files%\CRYPTOLOCKER.txt
%User Profile%\CRYPTOLOCKER.txt
%User Profile%\SendTo\CRYPTOLOCKER.txt
%User Startup%\CRYPTOLOCKER.txt
%User Profile%\Templates\CRYPTOLOCKER.txt
%Application Data%\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Windows\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\246FT6TD\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\9STOYKO4\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\NF72HY20\CRYPTOLOCKER.txt
%Temporary Internet Files%\Content.IE5\PHOM4UYK\CRYPTOLOCKER.txt
%User Profile%\Quick Launch\CRYPTOLOCKER.txt
%User Profile%\MMC\CRYPTOLOCKER.txt
%User Profile%\Themes\CRYPTOLOCKER.txt
%Favorites%\CRYPTOLOCKER.txt
%Favorites%\Links\CRYPTOLOCKER.txt
%Application Data%\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%Application Data%\Microsoft\CRYPTOLOCKER.txt
%User Profile%\MSHist012013061320130614\CRYPTOLOCKER.txt
%User Temp%\CRYPTOLOCKER.txt
%User Profile%\My Documents\CRYPTOLOCKER.txt
%User Profile%\Recent\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Esl\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\AIR\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Browser\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Services\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CMap\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CRYPTOLOCKER.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\ARM\1.0\CRYPTOLOCKER.txt
%Program Files%\Common Files\Adobe\HelpCfg\en_US\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DAO\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1025\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1028\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1031\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1036\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1040\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1041\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\1042\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\2052\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\3082\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\DW\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\MSInfo\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Speech\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Stationery\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\TextConv\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Triedit\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VC\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\VGX\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\Web Folders\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\CRYPTOLOCKER.txt
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\Services\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\CRYPTOLOCKER.txt
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\ado\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\msadc\CRYPTOLOCKER.txt
%Program Files%\Common Files\System\Ole DB\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\Connection Wizard\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\PLUGINS\CRYPTOLOCKER.txt
%Program Files%\Internet Explorer\SIGNUP\CRYPTOLOCKER.txt
%Program Files%\Messenger\CRYPTOLOCKER.txt
%Program Files%\Microsoft.NET\RedistList\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\MUI\0409\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\CRYPTOLOCKER.txt
%Program Files%\Movie Maker\Shared\Profiles\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\CRYPTOLOCKER.txt
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\CRYPTOLOCKER.txt
%Program Files%\MSN\MSNCoreFiles\OOBE\CRYPTOLOCKER.txt
%Program Files%\MSN Gaming Zone\Windows\CRYPTOLOCKER.txt
%Program Files%\MSXML 6.0\EULA\CRYPTOLOCKER.txt
%Program Files%\NetMeeting\CRYPTOLOCKER.txt
%Program Files%\Online Services\CRYPTOLOCKER.txt
%Program Files%\Outlook Express\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\CRYPTOLOCKER.txt
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\CRYPTOLOCKER.txt
%Program Files%\Windows Media Player\Skins\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Accessories\CRYPTOLOCKER.txt
%Program Files%\Windows NT\CRYPTOLOCKER.txt
%Program Files%\Windows NT\Pinball\CRYPTOLOCKER.txt
%Program Files%\WinPcap\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\CRYPTOLOCKER.txt
%Windows%\$MSI31Uninstall_KB893803v2$\spuninst\CRYPTOLOCKER.txt
%Windows%\$NtUninstallWIC$\spuninst\CRYPTOLOCKER.txt
%Windows%\CRYPTOLOCKER.txt
%Windows%\AppPatch\CRYPTOLOCKER.txt
%Windows%\assembly\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\0c0688825a79e72951210318eef63c82\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\0e1c79174260c4e2bf159a2cc1d77338\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\d2574c8ae333ff959be2e0d83121ad10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\3bfb841477d28ca866b91211f50199bb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\837fa037ca302e7432ea9913ae453e70\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\7cfd4a64a95807ee7cb6ae50cfabd93c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\11ef4be6ee227fce3725d6df534297a4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\8973265600edd2135ecf5e369a087dfb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b384b96460ad28697e8990e56b0234d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\08b2c2639708ab20748653185d6b67be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5f595338c63c2fdb5a171760c29d5bcf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9952f66fc592ffc21b024803c8c955fd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\17921c875097ce0f638aa81a59093d3a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2eef2f34c0295f1fe5d6d4441f9e790b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\edcde6e8ccca7996c2e1ad40bd0f2758\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\552a460a8bcf608aecc6418db0d40216\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\6a8da5dd61b1fcfed27f84047a3e2bad\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild\aa25092606e5e9826db7a7bd0adb9b2b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\d0e67f49781c157069bc3298454354bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI\15578874ee1464dc6a3545d4be842e59\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework\42f0e1a4e3081c50503d74ebc0540a60\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4d2a51c03b27e615ff9f1c430f2014ba\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost\38f0d77629891e7808424103aaef0728\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities\931ad0783c03deb967760d5c2387274a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\607df7a11c3334146664bc74130bc38f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8594d07d18330843968d649ed6ef6166\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a57e34a36f38a007aa24f1bd07a167ab\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn\767e70aec1ffb52f95c2b07c08fa0781\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\5c87f21925d5a61059ee68cef72841f4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\caecc65b5c0ede0fe0d55b9f48ada80f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\642a7b3d47828fb0070a55cfeb58f42b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\7bab044e648dfea461b73dc898150539\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\db33744fb49e77c7233adb50f07fe62a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\685c7df1332a74aaa899f2bdb3beabc3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\ec884cc78d6c5bb67bc2c819b1f00ee5\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services\62f067f8572551df931b3ee6493383d7\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment\90fd7fc9fbf5f4eed9135996b515a38a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device\36342e6024e2844502d0bdaa9d30971a\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\46a7f51ef1a9d917598b96f7a758a459\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5166bf93ac5239837c9c92b58d183ea6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\7f4419b6f829a2485d83b3c3e7b26a97\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\386f41f744eedacd1517c8a15750a48b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9eac876f58a3ebca8878b8654efdc817\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log\150da10324f2811a48da58d3496bbe10\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8b5fe7aff54a7aed07287257a9b8e420\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ab3e80af8e5e95a5a62092cc9293c91\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net\dd5c866d2462dd913ed0a0287396aa50\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing\eb9369fc9393d29afe51e45cb49aa4be\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\565496636c549f7f72fff7db554685b6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f3989d3e9cb8904e4edf23ede5adb6c1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2ac3fd2abc9bb5eab553ef8e44ca77ca\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\51c60db370e050d9cdcac17060aaac53\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\52481fccddb053768631c640d5059d4b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76a5d670ce969c0c65a905b7303d4bbf\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9e32918462a2d0c786fbf21a873cc358\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c3831eb95ccf3904bab81a97a9b08ed3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dbf07cb14b4dcc210cdf8b5d90a12a56\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech\61a931da70f8078539a51cef3888d02d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web\a70842538614699d690561ef5f43598b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\0d2eb147f2b4b13af1141810688e2d5f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\02068ef9dafba3308b13444b8f4e5940\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8fbe244f1f9ad9ce887c125bae44a50b\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\9df99ed350ef0a43fbcc1b9e586f1c7f\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\569a7210fae634e8827a1bd805922540\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\a1d43a413800a3fa024cba9161c34c44\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0d511c8f1da06cc18f2da9b593042841\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\c69974f79eb0c96357fbf031df6d8ed0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\0f643b7bd4525c3165733f6988bdbfe2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\2e2096834f67f11a362be1e5c0da4d54\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\c7b1290bb35d3e3c53d20e5928c9fa73\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\770e21411a66352a12b5d3f1e47e972e\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9484262c4f1cfaace92aa9d1fee76025\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services\149f2dcb9c9706e592d1980a945850c2\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\4cb0c81cca997d9fbecda9a1824f2fdb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\9cf13572472dc2efe8f3b7c2ab6198d3\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\18419dd13ced512c5f8dc15a79a601eb\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9bbefd2263d8f2169ab3695798208293\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\544e73a3f3f2daea050f03e4c94e9a6d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\467bcaca5f4d2914922f62772ea4ea7d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\be049b8fe1bf23daab7e76159a7e00dd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\ad9facc364268611cc4ca65f77caeddd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\70c840dc13aae2e1323b13d7b27030ae\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ece129234f9ba9ad856d0e77e4849137\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\5904383f7c86f1374a14198872dfa7d8\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cc063533b04f9420d1aa571a36d1fabd\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig\3c0d21e75c9a48aba6fba3ddff0fcf39\CRYPTOLOCKER.txt
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\4daf91c66e01c3dd92b239feacaa8245\CRYPTOLOCKER.txt
%Windows%\Cursors\CRYPTOLOCKER.txt
%Windows%\Debug\CRYPTOLOCKER.txt
%Windows%\Debug\UserMode\CRYPTOLOCKER.txt
%Windows%\Downloaded Program Files\CRYPTOLOCKER.txt
%Windows%\Driver Cache\i386\CRYPTOLOCKER.txt
%Windows%\ehome\CRYPTOLOCKER.txt
%Windows%\Fonts\CRYPTOLOCKER.txt
%Windows%\Help\CRYPTOLOCKER.txt
%Windows%\Help\Tours\htmlTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\mmTour\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Css\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Scr\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Video\CRYPTOLOCKER.txt
%Windows%\Help\Tours\WindowsMediaPlayer\CRYPTOLOCKER.txt
%Windows%\ime\CRYPTOLOCKER.txt
%Windows%\inf\CRYPTOLOCKER.txt
%Windows%\Installer\CRYPTOLOCKER.txt
%Windows%\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\CRYPTOLOCKER.txt
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\CRYPTOLOCKER.txt
%Windows%\Installer\{835818DD-220C-4ABD-946E-0D8660B95E29}\CRYPTOLOCKER.txt
%Windows%\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}\CRYPTOLOCKER.txt
%Windows%\Media\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.0.3705\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v1.1.4322\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\en-us\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\SQL\EN\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MOF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MSBuild\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI\0409\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Graphics\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL\en\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\en-US\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\CRYPTOLOCKER.txt
%Windows%\Microsoft.NET\CRYPTOLOCKER.txt
%Windows%\msagent\CRYPTOLOCKER.txt
%Windows%\msagent\chars\CRYPTOLOCKER.txt
%Windows%\msagent\intl\CRYPTOLOCKER.txt
%Windows%\mui\CRYPTOLOCKER.txt
%Windows%\Offline Web Pages\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\Cache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Config\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Database\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\DataColl\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Indices\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Logs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\OfflineCache\Professional_32#0409\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\PackageStore\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\blurbs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CompatCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\dialogs\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\DVDUpgrd\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\ErrMsg\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\errors\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\16x16\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\24x24\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\32x32\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\48x48\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Centers\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\images\Expando\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\NetDiag\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\panels\subpanels\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\rc\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\scripts\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\sysinfo\graphics\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\System\UpdateCtr\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\CRYPTOLOCKER.txt
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Binaries\CRYPTOLOCKER.txt
%Windows%\pchealth\UploadLB\Config\CRYPTOLOCKER.txt
%Windows%\PeerNet\CRYPTOLOCKER.txt
%Windows%\Prefetch\CRYPTOLOCKER.txt
%Windows%\Provisioning\Schemas\CRYPTOLOCKER.txt
%Windows%\pss\CRYPTOLOCKER.txt
%Windows%\Registration\CRYPTOLOCKER.txt
%Windows%\repair\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Homestead\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\Metallic\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\Luna\Shell\NormalColor\CRYPTOLOCKER.txt
%Windows%\Resources\Themes\CRYPTOLOCKER.txt
%Windows%\security\Database\CRYPTOLOCKER.txt
%Windows%\security\logs\CRYPTOLOCKER.txt
%Windows%\security\templates\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\DataStore\Logs\CRYPTOLOCKER.txt
%Windows%\SoftwareDistribution\CRYPTOLOCKER.txt
%Windows%\srchasst\chars\CRYPTOLOCKER.txt
%Windows%\srchasst\CRYPTOLOCKER.txt
%Windows%\srchasst\mui\0409\CRYPTOLOCKER.txt
%System%\CRYPTOLOCKER.txt
%System%\1033\CRYPTOLOCKER.txt
%System%\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\CRYPTOLOCKER.txt
%System%\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CRYPTOLOCKER.txt
%System%\Com\CRYPTOLOCKER.txt
%System%\config\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\CRYPTOLOCKER.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\CRYPTOLOCKER.txt
%System%\config\systemprofile\Cookies\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101620111017\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\28YE50EE\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8B98T9M7\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PTX100DX\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\T024QSIS\CRYPTOLOCKER.txt
%System%\config\systemprofile\Local Settings\Temporary Internet Files\CRYPTOLOCKER.txt
%System%\config\systemprofile\SendTo\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\CRYPTOLOCKER.txt
%System%\config\systemprofile\Start Menu\Programs\Startup\CRYPTOLOCKER.txt
%System%\config\systemprofile\Templates\CRYPTOLOCKER.txt
%System%\DirectX\Dinput\CRYPTOLOCKER.txt
%System%\dllcache\CRYPTOLOCKER.txt
%System%\drivers\CRYPTOLOCKER.txt
%System%\drivers\etc\CRYPTOLOCKER.txt
%System%\en-us\CRYPTOLOCKER.txt
%System%\GroupPolicy\CRYPTOLOCKER.txt
%System%\ias\CRYPTOLOCKER.txt
%System%\icsxml\CRYPTOLOCKER.txt
%System%\Macromed\Flash\CRYPTOLOCKER.txt
%System%\Microsoft\Protect\S-1-5-18\User\CRYPTOLOCKER.txt
%System%\MsDtc\CRYPTOLOCKER.txt
%System%\MsDtc\Trace\CRYPTOLOCKER.txt
%System%\mui\0009\CRYPTOLOCKER.txt
%System%\mui\0401\CRYPTOLOCKER.txt
%System%\mui\0402\CRYPTOLOCKER.txt
%System%\mui\0404\CRYPTOLOCKER.txt
%System%\mui\0405\CRYPTOLOCKER.txt
%System%\mui\0406\CRYPTOLOCKER.txt
%System%\mui\0407\CRYPTOLOCKER.txt
%System%\mui\0408\CRYPTOLOCKER.txt
%System%\mui\0409\CRYPTOLOCKER.txt
%System%\mui\040b\CRYPTOLOCKER.txt
%System%\mui\040C\CRYPTOLOCKER.txt
%System%\mui\040D\CRYPTOLOCKER.txt
%System%\mui\040e\CRYPTOLOCKER.txt
%System%\mui\0410\CRYPTOLOCKER.txt
%System%\mui\0411\CRYPTOLOCKER.txt
%System%\mui\0412\CRYPTOLOCKER.txt
%System%\mui\0413\CRYPTOLOCKER.txt
%System%\mui\0414\CRYPTOLOCKER.txt
%System%\mui\0415\CRYPTOLOCKER.txt
%System%\mui\0416\CRYPTOLOCKER.txt
%System%\mui\0418\CRYPTOLOCKER.txt
%System%\mui\0419\CRYPTOLOCKER.txt
%System%\mui\041a\CRYPTOLOCKER.txt
%System%\mui\041b\CRYPTOLOCKER.txt
%System%\mui\041D\CRYPTOLOCKER.txt
%System%\mui\041e\CRYPTOLOCKER.txt
%System%\mui\041f\CRYPTOLOCKER.txt
%System%\mui\0424\CRYPTOLOCKER.txt
%System%\mui\0425\CRYPTOLOCKER.txt
%System%\mui\0426\CRYPTOLOCKER.txt
%System%\mui\0427\CRYPTOLOCKER.txt
%System%\mui\0804\CRYPTOLOCKER.txt
%System%\mui\0816\CRYPTOLOCKER.txt
%System%\mui\0C0A\CRYPTOLOCKER.txt
%System%\npp\CRYPTOLOCKER.txt
%System%\oobe\actsetup\CRYPTOLOCKER.txt
%System%\oobe\CRYPTOLOCKER.txt
%System%\oobe\error\CRYPTOLOCKER.txt
%System%\oobe\html\dslmain\CRYPTOLOCKER.txt
%System%\oobe\html\iconnect\CRYPTOLOCKER.txt
%System%\oobe\html\isptype\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\images\CRYPTOLOCKER.txt
%System%\oobe\html\mouse\CRYPTOLOCKER.txt
%System%\oobe\html\sconnect\CRYPTOLOCKER.txt
%System%\oobe\icserror\CRYPTOLOCKER.txt
%System%\oobe\images\CRYPTOLOCKER.txt
%System%\oobe\isperror\CRYPTOLOCKER.txt
%System%\oobe\regerror\CRYPTOLOCKER.txt
%System%\oobe\setup\CRYPTOLOCKER.txt
%System%\ras\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0000\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\i386\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0001\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0002\DriverFiles\CRYPTOLOCKER.txt
%System%\ReinstallBackups\0003\DriverFiles\CRYPTOLOCKER.txt
%System%\Restore\CRYPTOLOCKER.txt
%System%\Setup\CRYPTOLOCKER.txt
%System%\spool\drivers\color\CRYPTOLOCKER.txt
%System%\spool\drivers\w32x86\3\CRYPTOLOCKER.txt
%System%\spool\prtprocs\w32x86\CRYPTOLOCKER.txt
%System%\spool\prtprocs\x64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\amd64\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\i386\CRYPTOLOCKER.txt
%System%\spool\XPSEP\CRYPTOLOCKER.txt
%System%\usmt\CRYPTOLOCKER.txt
%System%\wbem\AutoRecover\CRYPTOLOCKER.txt
%System%\wbem\CRYPTOLOCKER.txt
%System%\wbem\Logs\CRYPTOLOCKER.txt
%System%\wbem\Performance\CRYPTOLOCKER.txt
%System%\wbem\Repository\CRYPTOLOCKER.txt
%System%\wbem\Repository\FS\CRYPTOLOCKER.txt
%System%\wbem\xml\CRYPTOLOCKER.txt
%System%\XPSViewer\en-us\CRYPTOLOCKER.txt
%System%\XPSViewer\CRYPTOLOCKER.txt
%Windows%\Tasks\CRYPTOLOCKER.txt
%Temp%\CRYPTOLOCKER.txt
%Windows%\twain_32\CRYPTOLOCKER.txt
%Windows%\Web\CRYPTOLOCKER.txt
%Windows%\Web\printers\images\CRYPTOLOCKER.txt
%Windows%\Web\printers\CRYPTOLOCKER.txt
%Windows%\Web\Wallpaper\CRYPTOLOCKER.txt
%Windows%\WinSxS\Manifests\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30\CRYPTOLOCKER.txt
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\CRYPTOLOCKER.txt
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\CRYPTOLOCKER.txt
%Desktop%\CRYPTOLOCKER.txt
%User Temp%\etdD4mDj7Cd5XTc.exe
Once located, select the file then press SHIFT+DELETE to delete it.
Repeat the said steps for all files listed.
*Note: Read the following Microsoft page if these steps do not work on Windows 7.

Step 6

Search and delete this folder

[ Learn More ]

Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.

%User Temp%\Adobe

Step 7

Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_CRILOCK.CN. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 8

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

%Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.552.37796
%Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.552.37796
%User Profile%\v2.0.50727.42\security.config.cch.552.37937

Did this description help? Tell us how we did.

TROJ_CRILOCK.CN

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

TROJ_CRILOCK.CN

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific