Trojan.KillProc2.27626

Technical Information

Malicious functions

Terminates or attempts to terminate

the following system processes:

%WINDIR%\explorer.exe
<SYSTEM32>\taskhost.exe
<SYSTEM32>\dwm.exe

the following user processes:

iexplore.exe
firefox.exe

Modifies file system

Creates the following files

%WINDIR%y1s2fctrp3
%CommonProgramFiles%\microsoft shared\horse apv53deiq9fw gsva2xn .zip.exe
%ProgramFiles%\dvd maker\shared\lpcu5ai3 sperm apv53deiq9fw .zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\f07qtt tsomq34 hot (!) .avi.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\4h1e2a346 xakmpl bd1l5ir hot (!) ash girly .rar.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\z9z7rwe bd1l5ir mnho9y54 apv53deiq9fw feet .mpg.exe
%ProgramFiles%\microsoft office\templates\yzw1afy nom72kl feet (dehod0).zip.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\mzwpstr8n yzw1afy ihthd33 .zip.exe
%ProgramFiles%\windows journal\templates\zc8giv9 8ok6yf apv53deiq9fw (sonja,sonja).mpeg.exe
%ProgramFiles%\windows sidebar\shared gadgets\ikdyfwhy yzw1afy uncut .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\4h1e2a346 xakmpl l9hwcs7vvnphd9 rv0y8n (sandy,hyo87il).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\yzw1afy cum vjq39c1gwy .rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\s2fkave cum nom72kl .rar.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\ddqayq 7vepaqjm .avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\ikdyfwhy wep6b08 uncut ash gsva2xn .mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\f1i7cm sperm beast ihthd33 boots .avi.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\bd1l5ir sgu4m7oc (y8oxsqa,haj1oyikd).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\8r3baiec gay mzwpstr8n l9hwcs7vvnphd9 6tl9zg0uqa .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\lpcu5ai3 ddqayq ihthd33 6tl9zg0uqa (dxocjwba,jade).avi.exe
%ALLUSERSPROFILE%\templates\s2fkave xakmpl [free] kfp2yqq nrb42wq .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\ikdyfwhy beast ddqayq 7vepaqjm js80j73 .rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\asian h93bklf porn nom72kl .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\black mzwpstr8n apv53deiq9fw nrb42wq .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\bd1l5ir cum 7vepaqjm legs .zip.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\f07qtt tsomq34 bq4kno 6tl9zg0uqa .zip.exe
C:\users\default\appdata\local\temp\mnho9y54 big .mpeg.exe
C:\users\default\appdata\local\<INETFILES>\horse 8ok6yf [milf] 50+ .zip.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\8r3baiec beast uncut fishy .avi.exe
C:\users\default\templates\0287zh nude horse ihthd33 hole sgoibhh .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\horse nom72kl uncut 50+ .zip.exe
%TEMP%\wep6b08 mzwpstr8n uncut ae2sd7u4xh .mpg.exe
%LOCALAPPDATA%\<INETFILES>\upfgetx ddqayq xxx epyxwn cock 8bgkvshe1 (rdl1tfkz,sarah).mpeg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\porn ihthd33 ol6p1tua .zip.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\horse 8ok6yf 7vepaqjm hole .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\mzwpstr8n nom72kl vjq39c1gwy fishy .zip.exe
%APPDATA%\microsoft\templates\cum bd1l5ir [milf] .zip.exe
%APPDATA%\microsoft\windows\templates\7b6fhxi bd1l5ir 7nd83wovj hot (!) .zip.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\7nd83wovj w6csjja14n1 epyxwn sgoibhh (jade,gina).mpg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\beast mnho9y54 epyxwn jxqgtp rv0y8n .mpg.exe
%HOMEPATH%\templates\eq7k2xcxt nude yzw1afy [bangbus] fishy .avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\eq7k2xcxt yzw1afy [free] .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\wep6b08 big (c4w8hqa,cy4xpd).avi.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\black beast ddqayq uncut jxqgtp wifey .avi.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\asian nom72kl [milf] (36mho73).rar.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\z9z7rwe gay bq4kno kfp2yqq qx2j1b5 .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\ [free] rv0y8n .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\sperm [milf] .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\wpjwijv bd1l5ir [milf] .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\upfgetx lpcu5ai3 ihthd33 glans boots .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\gay wep6b08 [free] 6tl9zg0uqa (sarah).zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\zc8giv9 mnho9y54 bd1l5ir l9hwcs7vvnphd9 hotel .zip.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\gzn4ud7e bd1l5ir bq4kno .avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\7b6fhxi mnho9y54 [bangbus] fw58kpr41ob1w .avi.exe
%WINDIR%\assembly\temp\porn epyxwn b37oavmx289 .zip.exe
%WINDIR%\assembly\tmp\7b6fhxi xxx l9hwcs7vvnphd9 lady .mpeg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\s2fkave nude uncut .avi.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\0287zh cum apv53deiq9fw .zip.exe
%WINDIR%\pla\templates\ nude l9hwcs7vvnphd9 kfp2yqq 40+ .mpeg.exe
%WINDIR%\security\templates\gay 7vepaqjm cock .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\horse uncut .mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\sperm hot (!) cock .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\wpjwijv xxx [bangbus] hole .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\z1qxwcd xakmpl l9hwcs7vvnphd9 (liz,sandy).mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\jxaglwti 8ok6yf [milf] (sandy,sarah).rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\gzn4ud7e yzw1afy sgu4m7oc boots .avi.exe
%WINDIR%\syswow64\config\systemprofile\nom72kl ddqayq uncut cock .mpg.exe
%WINDIR%\syswow64\fxstmp\f07qtt mzwpstr8n [milf] ash .rar.exe
%WINDIR%\syswow64\ime\shared\z9z7rwe tsomq34 mzwpstr8n [milf] legs 6tl9zg0uqa .zip.exe
%WINDIR%\syswow64\config\systemprofile\cum girls ash (jenna).rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f07qtt mnho9y54 uncut (hyo87il).zip.exe
%WINDIR%\syswow64\fxstmp\8r3baiec horse 8ok6yf hot (!) .mpg.exe
%WINDIR%\syswow64\ime\shared\f1i7cm w6csjja14n1 vjq39c1gwy lzxyhb7k (karin).avi.exe
%WINDIR%\temp\zc8giv9 mnho9y54 gay l9hwcs7vvnphd9 (g6u8n4r,rdl1tfkz).zip.exe
%WINDIR%\winsxs\installtemp\ [free] .mpg.exe
<Current directory>\sqjaed7r1vnw
%CommonProgramFiles%\microsoft shared\cum apv53deiq9fw nmibe2 .mpg.exe
%CommonProgramFiles%\microsoft shared\black 7nd83wovj lpcu5ai3 [bangbus] titts ash (sarah).zip.exe
%ProgramFiles%\dvd maker\shared\ l9hwcs7vvnphd9 feet .mpeg.exe
%ProgramFiles%\dvd maker\shared\s2fkave cum nom72kl glans (jade,36mho73).mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\8r3baiec lpcu5ai3 sperm [free] (sandy,c4w8hqa).avi.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\f07qtt nom72kl sgu4m7oc legs .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\fac71w2 xakmpl lpcu5ai3 vjq39c1gwy eigt45 .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\mzwpstr8n l9hwcs7vvnphd9 40+ .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\black lpcu5ai3 mzwpstr8n hot (!) glans 8bgkvshe1 .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\mnho9y54 hot (!) ae2sd7u4xh .mpeg.exe
%ProgramFiles%\microsoft office\templates\f1i7cm wep6b08 mzwpstr8n nom72kl shoes .mpg.exe
%ProgramFiles%\microsoft office\templates\f1i7cm bd1l5ir lpcu5ai3 [milf] cock .mpeg.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\sperm apv53deiq9fw ae2sd7u4xh (gina,sandy).avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\tsomq34 vjq39c1gwy ae2sd7u4xh .rar.exe
%ProgramFiles%\windows journal\templates\cum mnho9y54 sgu4m7oc hole (gina).rar.exe
%ProgramFiles%\windows journal\templates\f07qtt wep6b08 nom72kl nom72kl hole sgoibhh .zip.exe
%ProgramFiles%\windows sidebar\shared gadgets\f1i7cm 8ok6yf xxx epyxwn lzxyhb7k .zip.exe
%ProgramFiles%\windows sidebar\shared gadgets\asian h93bklf l9hwcs7vvnphd9 hole .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\fac71w2 nude tsomq34 ihthd33 glans .mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\8r3baiec horse nom72kl girls ash .rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\black wep6b08 beast 7vepaqjm hole 779mipj (g6u8n4r).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\mzwpstr8n [bangbus] boots .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\ikdyfwhy bd1l5ir bq4kno ejn547rbxhd1 .rar.exe
%CommonProgramFiles(x86)%\microsoft shared\beast girls qx2j1b5 (sandy,g6u8n4r).mpg.exe
%CommonProgramFiles(x86)%\microsoft shared\z1qxwcd 7nd83wovj nom72kl .zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\upfgetx 7nd83wovj horse epyxwn (jade).avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\yzw1afy hot (!) .rar.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\beast 7vepaqjm (c4w8hqa,sandy).mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\gzn4ud7e w6csjja14n1 mzwpstr8n vjq39c1gwy girly (gina,c4w8hqa).avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\upfgetx 7nd83wovj nom72kl eigt45 .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\gzn4ud7e horse 8ok6yf ihthd33 sm .mpg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\fac71w2 epyxwn boots (haj1oyikd,gina).avi.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\eq7k2xcxt xakmpl yzw1afy sgu4m7oc feet hairy (karin).rar.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\asian 8ok6yf hot (!) (36mho73,c4w8hqa).zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\nom72kl [free] cock zmc8ujp (dxocjwba,sarah).zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\f07qtt horse nom72kl (karin).mpg.exe
%ALLUSERSPROFILE%\templates\f07qtt w6csjja14n1 gay vjq39c1gwy 50+ .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\zc8giv9 horse ihthd33 .rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\gay uncut 40+ .rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\4h1e2a346 xakmpl uncut (2hbt8wr,jenna).zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\beast ihthd33 latex .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\7b6fhxi horse nude [bangbus] hotel .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\eq7k2xcxt w6csjja14n1 beast [milf] zn3tvn .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\7nd83wovj nom72kl 779mipj .mpeg.exe
%ALLUSERSPROFILE%\templates\z9z7rwe porn nom72kl 7vepaqjm hairy .mpg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\z9z7rwe w6csjja14n1 tsomq34 sgu4m7oc (cy4xpd).mpg.exe
%ALLUSERSPROFILE%\templates\porn big fishy .mpeg.exe
C:\users\default\appdata\local\temp\ uncut glans zmc8ujp .avi.exe
C:\users\default\appdata\local\<INETFILES>\f07qtt 7nd83wovj lpcu5ai3 hot (!) lady .mpeg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\beast mzwpstr8n girls 8pfmdyy .avi.exe
C:\users\default\appdata\local\temp\porn big js80j73 .zip.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\xxx uncut feet shoes (dxocjwba).mpg.exe
C:\users\default\appdata\local\<INETFILES>\4h1e2a346 tsomq34 uncut eigt45 .mpeg.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\cum [bangbus] legs .avi.exe
C:\users\default\templates\eq7k2xcxt lpcu5ai3 uncut .mpeg.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\asian beast nude apv53deiq9fw .mpeg.exe
%TEMP%\z1qxwcd horse epyxwn wifey .zip.exe
%LOCALAPPDATA%\<INETFILES>\h93bklf xakmpl [free] (cy4xpd).avi.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\7b6fhxi xakmpl bq4kno mg9fvb2xk9 .zip.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\porn girls hole eigt45 (liz).rar.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\xxx 7vepaqjm .mpg.exe
%TEMP%\ big sm (dehod0,2hbt8wr).zip.exe
%LOCALAPPDATA%\<INETFILES>\f1i7cm cum gay hot (!) feet young .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\zc8giv9 yzw1afy [bangbus] 40+ .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\xxx ihthd33 shoes .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\8r3baiec porn gay uncut hairy (sonja,c4w8hqa).avi.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\f1i7cm porn mnho9y54 7vepaqjm .zip.exe
%APPDATA%\microsoft\windows\templates\ikdyfwhy horse girls ol6p1tua (cy4xpd).rar.exe
%APPDATA%\microsoft\templates\xxx [free] (g6u8n4r).mpeg.exe
%APPDATA%\microsoft\windows\templates\z9z7rwe porn [milf] girly .mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\f07qtt xakmpl tsomq34 [milf] b37oavmx289 .mpeg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\lpcu5ai3 [bangbus] qx2j1b5 .zip.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\horse [milf] kfp2yqq .mpg.exe
%HOMEPATH%\templates\4h1e2a346 tsomq34 big boobs qq6w54yfhtqrbwcslg .mpeg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\black cum horse big qq6w54yfhtqrbwcslg .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\porn w6csjja14n1 l9hwcs7vvnphd9 titts (c4w8hqa).mpg.exe
%HOMEPATH%\templates\f1i7cm horse yzw1afy bq4kno hole rv0y8n .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\nom72kl l9hwcs7vvnphd9 feet boots (cy4xpd).avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\zc8giv9 beast mnho9y54 ihthd33 ash hairy .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\fac71w2 ddqayq xxx apv53deiq9fw hole wifey .rar.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\s2fkave h93bklf xxx [bangbus] glans fishy .rar.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\sperm w6csjja14n1 nom72kl lzxyhb7k (hyo87il).zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\gay l9hwcs7vvnphd9 (karin).mpg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\upfgetx tsomq34 [bangbus] qq6w54yfhtqrbwcslg (sonja).rar.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\f1i7cm 7nd83wovj mnho9y54 bq4kno feet boots .zip.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\wpjwijv h93bklf nude girls glans hairy .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\black nude [free] ol6p1tua .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\lpcu5ai3 7vepaqjm legs .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\sperm 8ok6yf big boobs (dehod0).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\ikdyfwhy mzwpstr8n l9hwcs7vvnphd9 balls (dxocjwba,haj1oyikd).avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\viaz50 xakmpl l9hwcs7vvnphd9 .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\nom72kl vjq39c1gwy boobs sgoibhh .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\black 7nd83wovj sperm ihthd33 (2hbt8wr).mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\7b6fhxi 8ok6yf 8ok6yf uncut titts (haj1oyikd,jade).avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\eq7k2xcxt 8ok6yf horse apv53deiq9fw feet shoes (sarah).rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\upfgetx sperm l9hwcs7vvnphd9 40+ .mpeg.exe
%WINDIR%\assembly\temp\w6csjja14n1 wep6b08 sgu4m7oc ash qq6w54yfhtqrbwcslg .avi.exe
%WINDIR%\assembly\tmp\gay yzw1afy vjq39c1gwy .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\s2fkave w6csjja14n1 sperm l9hwcs7vvnphd9 .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\mnho9y54 [bangbus] glans fishy .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\f1i7cm ddqayq xxx l9hwcs7vvnphd9 feet sweet .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\mzwpstr8n uncut sm (jenna,liz).avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\0287zh mnho9y54 uncut (g6u8n4r).avi.exe
%WINDIR%\assembly\temp\eq7k2xcxt w6csjja14n1 xxx big feet .mpeg.exe
%WINDIR%\assembly\tmp\s2fkave h93bklf 7vepaqjm .rar.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\ddqayq lpcu5ai3 [free] jxqgtp ash .mpeg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\nom72kl w6csjja14n1 l9hwcs7vvnphd9 jxqgtp .zip.exe
%WINDIR%\pla\templates\f07qtt horse xxx l9hwcs7vvnphd9 hole ejn547rbxhd1 .mpeg.exe
%WINDIR%\security\templates\f1i7cm nude w6csjja14n1 sgu4m7oc 40+ (sandy).mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\tsomq34 [free] (y8oxsqa).mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\gay mzwpstr8n ihthd33 ash nrb42wq .mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\xxx hot (!) lzxyhb7k (sarah,dehod0).mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\bd1l5ir l9hwcs7vvnphd9 (haj1oyikd).rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\viaz50 nom72kl l9hwcs7vvnphd9 gh5b6gd7wrv .rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\fac71w2 tsomq34 apv53deiq9fw .zip.exe
%WINDIR%\syswow64\config\systemprofile\asian cum uncut boobs .rar.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\gzn4ud7e w6csjja14n1 mnho9y54 l9hwcs7vvnphd9 (jade).mpg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\nom72kl [free] cock 50+ .zip.exe
%WINDIR%\pla\templates\f07qtt nude nom72kl l9hwcs7vvnphd9 hole .zip.exe
%WINDIR%\security\templates\z9z7rwe 7nd83wovj yzw1afy epyxwn hole ol6p1tua (cy4xpd).mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\ big sm .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\yzw1afy uncut .zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\beast ihthd33 cock (dehod0,g6u8n4r).avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\beast bq4kno .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\z9z7rwe porn lpcu5ai3 epyxwn titts .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\beast l9hwcs7vvnphd9 cock 40+ .mpg.exe
%WINDIR%\syswow64\config\systemprofile\eq7k2xcxt nude horse vjq39c1gwy glans .rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f07qtt bd1l5ir xxx apv53deiq9fw feet .zip.exe
%WINDIR%\syswow64\fxstmp\wpjwijv yzw1afy xakmpl [free] nmibe2 .zip.exe
%WINDIR%\syswow64\ime\shared\sperm big boobs .zip.exe
%WINDIR%\syswow64\config\systemprofile\ikdyfwhy h93bklf ihthd33 titts .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\wpjwijv w6csjja14n1 bq4kno zmc8ujp (haj1oyikd,dxocjwba).mpg.exe
%WINDIR%\syswow64\fxstmp\eq7k2xcxt xxx ihthd33 js80j73 (gina).zip.exe
%WINDIR%\syswow64\ime\shared\viaz50 xakmpl h93bklf bq4kno shoes .mpg.exe
%WINDIR%\syswow64\fxstmp\f07qtt 8ok6yf lpcu5ai3 7vepaqjm .mpeg.exe
%WINDIR%\syswow64\ime\shared\gzn4ud7e w6csjja14n1 nom72kl [free] boots .mpg.exe
%WINDIR%\temp\bd1l5ir ihthd33 hotel (dehod0).rar.exe
%WINDIR%\syswow64\config\systemprofile\nom72kl hot (!) titts (sonja,g6u8n4r).avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\yzw1afy ihthd33 hole 6tl9zg0uqa (dxocjwba).mpeg.exe
%WINDIR%\syswow64\fxstmp\gzn4ud7e 7nd83wovj yzw1afy l9hwcs7vvnphd9 (g6u8n4r).rar.exe
%WINDIR%\syswow64\ime\shared\horse [bangbus] ash .rar.exe
%WINDIR%\temp\z9z7rwe wep6b08 mzwpstr8n vjq39c1gwy rv0y8n (haj1oyikd,cy4xpd).mpg.exe
%WINDIR%\winsxs\installtemp\cum beast hot (!) latex (36mho73,cy4xpd).rar.exe
%WINDIR%\winsxs\installtemp\mzwpstr8n lpcu5ai3 nom72kl (2hbt8wr).rar.exe
%CommonProgramFiles%\microsoft shared\mzwpstr8n tsomq34 sgu4m7oc hole gsva2xn .mpeg.exe
%CommonProgramFiles%\microsoft shared\h93bklf sperm epyxwn gsva2xn .rar.exe
%ProgramFiles%\dvd maker\shared\beast mnho9y54 girls cock ash .mpeg.exe
%ProgramFiles%\dvd maker\shared\fac71w2 nom72kl hot (!) eigt45 .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\yzw1afy mzwpstr8n vjq39c1gwy .avi.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\gay horse vjq39c1gwy ash .zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\sperm sperm big (jenna,sonja).zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\zc8giv9 bd1l5ir xakmpl girls fishy (c4w8hqa,liz).avi.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\z1qxwcd h93bklf epyxwn boobs (g6u8n4r,jenna).rar.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\wep6b08 h93bklf l9hwcs7vvnphd9 jxqgtp .zip.exe
%ProgramFiles%\microsoft office\templates\viaz50 gay vjq39c1gwy 779mipj .avi.exe
%ProgramFiles%\microsoft office\templates\bd1l5ir [milf] legs 40+ .mpeg.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\f1i7cm lpcu5ai3 7nd83wovj uncut 50+ (liz).avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\xxx nom72kl (rdl1tfkz).zip.exe
%ProgramFiles%\windows journal\templates\z1qxwcd nude porn uncut titts girly .mpg.exe
%ProgramFiles%\windows journal\templates\8r3baiec 8ok6yf l9hwcs7vvnphd9 js80j73 .avi.exe
%ProgramFiles%\windows sidebar\shared gadgets\wep6b08 uncut (sonja,c4w8hqa).zip.exe
%ProgramFiles%\windows sidebar\shared gadgets\horse mzwpstr8n epyxwn .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\tsomq34 big titts (haj1oyikd,rdl1tfkz).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\f1i7cm horse sperm [milf] hole ejn547rbxhd1 .mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\porn [milf] jxqgtp zmc8ujp .rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\eq7k2xcxt wep6b08 gay epyxwn .mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\gay h93bklf vjq39c1gwy kfp2yqq .mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\ddqayq 8ok6yf l9hwcs7vvnphd9 rv0y8n .rar.exe
%CommonProgramFiles(x86)%\microsoft shared\gzn4ud7e horse big ash .mpg.exe
%CommonProgramFiles(x86)%\microsoft shared\tsomq34 big nrb42wq .zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\gzn4ud7e 7nd83wovj hot (!) titts .zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\f07qtt horse 7nd83wovj uncut lady .mpg.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\7nd83wovj h93bklf vjq39c1gwy 779mipj (c4w8hqa,2hbt8wr).mpeg.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\tsomq34 bq4kno (sarah).mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\upfgetx horse 8ok6yf [milf] .mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\4h1e2a346 sperm sperm bq4kno .mpg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\wpjwijv xxx uncut (sonja,36mho73).rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\gzn4ud7e ddqayq ddqayq ihthd33 jxqgtp young .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\wpjwijv horse uncut glans girly (liz).mpg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\black ddqayq w6csjja14n1 big (haj1oyikd,sandy).zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\zc8giv9 gay 7nd83wovj epyxwn 50+ (hyo87il).rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt porn sgu4m7oc glans .mpeg.exe
%ALLUSERSPROFILE%\templates\ikdyfwhy gay girls girly (cy4xpd).rar.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\mzwpstr8n [milf] rv0y8n (36mho73).avi.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\fac71w2 h93bklf nom72kl latex .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\8ok6yf mzwpstr8n apv53deiq9fw qq6w54yfhtqrbwcslg (hyo87il,y8oxsqa).mpeg.exe
%ALLUSERSPROFILE%\templates\f07qtt mzwpstr8n xxx vjq39c1gwy 40+ .zip.exe
%ALLUSERSPROFILE%\templates\f07qtt horse wep6b08 [free] fishy .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\7b6fhxi ddqayq h93bklf big wifey .mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\jxaglwti beast 7nd83wovj apv53deiq9fw (liz,y8oxsqa).rar.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\mzwpstr8n gay [bangbus] .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\mnho9y54 wep6b08 apv53deiq9fw glans (karin).mpeg.exe
C:\users\default\appdata\local\temp\gzn4ud7e cum yzw1afy epyxwn jxqgtp (sandy).zip.exe
C:\users\default\appdata\local\<INETFILES>\z1qxwcd xxx ddqayq big .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\jxaglwti ddqayq bq4kno (sarah).avi.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\nude nom72kl (sonja,c4w8hqa).mpg.exe
C:\users\default\templates\viaz50 ddqayq h93bklf nom72kl (36mho73).avi.exe
%ALLUSERSPROFILE%\templates\mzwpstr8n mzwpstr8n [bangbus] zmc8ujp .rar.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\sperm vjq39c1gwy shoes .mpg.exe
C:\users\default\appdata\local\temp\ddqayq epyxwn 6tl9zg0uqa (haj1oyikd).avi.exe
C:\users\default\appdata\local\<INETFILES>\viaz50 gay horse bq4kno fw58kpr41ob1w .mpeg.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\yzw1afy hot (!) .mpg.exe
C:\users\default\templates\8r3baiec horse 7nd83wovj vjq39c1gwy .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\7b6fhxi horse cum nom72kl hole qq6w54yfhtqrbwcslg (jade,gina).zip.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\porn 7vepaqjm .rar.exe
%TEMP%\0287zh ddqayq big young .mpg.exe
%TEMP%\s2fkave beast h93bklf hot (!) latex (dehod0,sarah).avi.exe
%LOCALAPPDATA%\<INETFILES>\h93bklf 7vepaqjm .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\gzn4ud7e 8ok6yf girls .zip.exe
%LOCALAPPDATA%\<INETFILES>\ddqayq sperm uncut .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\viaz50 big nrb42wq (jade).rar.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\yzw1afy 7vepaqjm hole boots (liz).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\f1i7cm beast nude hot (!) b37oavmx289 .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\4h1e2a346 mzwpstr8n big feet (sonja,sonja).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\7nd83wovj 8ok6yf uncut jxqgtp rv0y8n .mpg.exe
%APPDATA%\microsoft\templates\7nd83wovj beast epyxwn .rar.exe
%APPDATA%\microsoft\windows\templates\0287zh tsomq34 vjq39c1gwy .mpeg.exe
%APPDATA%\microsoft\templates\wpjwijv xakmpl girls 779mipj .mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\w6csjja14n1 nude 7vepaqjm (liz).mpeg.exe
%APPDATA%\microsoft\windows\templates\4h1e2a346 bd1l5ir [milf] feet (2hbt8wr).mpeg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\tsomq34 [milf] jxqgtp sm .rar.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\7b6fhxi gay [bangbus] (2hbt8wr).mpeg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\0287zh beast gay hot (!) .rar.exe
%HOMEPATH%\templates\h93bklf hot (!) .rar.exe
%HOMEPATH%\templates\z1qxwcd horse ihthd33 qq6w54yfhtqrbwcslg .avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\ikdyfwhy horse w6csjja14n1 uncut young .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\eq7k2xcxt horse yzw1afy big glans (karin,c4w8hqa).zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\mnho9y54 xakmpl epyxwn .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\nude apv53deiq9fw fishy .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\nom72kl ddqayq uncut hole ae2sd7u4xh (gina).mpg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\8r3baiec 8ok6yf sgu4m7oc glans 50+ (cy4xpd).zip.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\jxaglwti horse uncut balls .mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\f1i7cm xakmpl ihthd33 kfp2yqq nrb42wq .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\mnho9y54 8ok6yf epyxwn .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\horse uncut boobs .mpg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\fac71w2 nude 7vepaqjm ae2sd7u4xh .mpeg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\8r3baiec vjq39c1gwy hairy (jade).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\fac71w2 tsomq34 uncut jxqgtp 6tl9zg0uqa .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\w6csjja14n1 hot (!) gh5b6gd7wrv .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\ddqayq sgu4m7oc titts mg9fvb2xk9 .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\viaz50 xxx sgu4m7oc jxqgtp 779mipj .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\nude apv53deiq9fw boobs (sonja).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\0287zh beast apv53deiq9fw cock .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\7nd83wovj hot (!) boobs (jenna).zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\bd1l5ir uncut nrb42wq .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\porn vjq39c1gwy 779mipj (dehod0).rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\fac71w2 lpcu5ai3 epyxwn fishy .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\wep6b08 7vepaqjm boobs wifey .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\xakmpl sgu4m7oc gh5b6gd7wrv .mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\viaz50 gay ddqayq epyxwn eigt45 (sonja,sarah).avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\porn bq4kno gh5b6gd7wrv .rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\7nd83wovj [milf] .mpg.exe
%WINDIR%\assembly\temp\7nd83wovj l9hwcs7vvnphd9 jxqgtp (liz,gina).mpeg.exe
%WINDIR%\assembly\tmp\8r3baiec tsomq34 h93bklf apv53deiq9fw ae2sd7u4xh .zip.exe
%WINDIR%\assembly\temp\xakmpl nom72kl .avi.exe
%WINDIR%\assembly\tmp\s2fkave gay w6csjja14n1 [free] (dehod0).zip.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\f1i7cm h93bklf horse ihthd33 (sonja,rdl1tfkz).zip.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\f1i7cm mzwpstr8n xxx sgu4m7oc (sonja).mpeg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\7b6fhxi gay gay bq4kno girly .mpg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\8r3baiec cum [free] glans (cy4xpd,rdl1tfkz).avi.exe
%WINDIR%\pla\templates\cum hot (!) .rar.exe
%WINDIR%\pla\templates\f07qtt gay nom72kl legs lady .zip.exe
%WINDIR%\security\templates\ikdyfwhy mnho9y54 ihthd33 .rar.exe
%WINDIR%\security\templates\eq7k2xcxt mzwpstr8n nom72kl big .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\bd1l5ir ihthd33 .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\8r3baiec h93bklf mzwpstr8n vjq39c1gwy nmibe2 .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\bd1l5ir [milf] hole .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\z1qxwcd h93bklf 8ok6yf epyxwn jxqgtp .zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\4h1e2a346 beast h93bklf sgu4m7oc (dxocjwba).rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\lpcu5ai3 [free] nrb42wq (karin,36mho73).mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\upfgetx xxx hot (!) boobs .zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\s2fkave wep6b08 h93bklf [milf] b37oavmx289 (c4w8hqa,sonja).mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\ddqayq uncut hotel .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\8ok6yf bd1l5ir nom72kl 779mipj .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\lpcu5ai3 nude uncut feet sgoibhh .mpeg.exe
%WINDIR%\syswow64\config\systemprofile\0287zh ddqayq hot (!) fishy .avi.exe
%WINDIR%\syswow64\config\systemprofile\nom72kl sgu4m7oc hole .mpg.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\ sperm big .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\ bd1l5ir l9hwcs7vvnphd9 .rar.exe

Miscellaneous

Searches for the following windows

ClassName: 'Progman' WindowName: ''
ClassName: 'Proxy Desktop' WindowName: ''

Restarts the analyzed sample

Executes the following

'%WINDIR%\explorer.exe'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial