JavaScript support is required for our site to be fully operational in your browser.
Trojan.KillProc2.27609
Added to the Dr.Web virus database:
2025-07-16
Virus description added:
2025-07-17
Technical Information
Malicious functions
Terminates or attempts to terminate
the following system processes:
%WINDIR%\explorer.exe
<SYSTEM32>\taskhost.exe
<SYSTEM32>\dwm.exe
the following user processes:
Modifies file system
Creates the following files
%WINDIR%y1s2fctrp3
%CommonProgramFiles%\microsoft shared\tsomq34 bd1l5ir 7vepaqjm legs qq6w54yfhtqrbwcslg (sarah).mpg.exe
%ProgramFiles%\dvd maker\shared\beast [milf] (jade,g6u8n4r).zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wpjwijv porn sgu4m7oc .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\8ok6yf [bangbus] .zip.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\z9z7rwe horse yzw1afy ihthd33 .mpeg.exe
%ProgramFiles%\microsoft office\templates\7b6fhxi cum hot (!) jxqgtp .avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\8r3baiec 8ok6yf xakmpl girls (c4w8hqa,c4w8hqa).mpeg.exe
%ProgramFiles%\windows journal\templates\z1qxwcd gay hot (!) (c4w8hqa).rar.exe
%ProgramFiles%\windows sidebar\shared gadgets\gzn4ud7e 8ok6yf big fishy .rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\7nd83wovj ddqayq nom72kl nmibe2 (2hbt8wr,dehod0).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\fac71w2 mzwpstr8n ihthd33 wifey .mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\jxaglwti nom72kl nom72kl nrb42wq .zip.exe
%CommonProgramFiles(x86)%\microsoft shared\f07qtt sperm ddqayq [milf] balls .mpg.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\upfgetx mnho9y54 porn epyxwn b37oavmx289 .mpeg.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\beast ihthd33 lady (y8oxsqa).zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\horse bd1l5ir [milf] gsva2xn (rdl1tfkz).mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\w6csjja14n1 tsomq34 hot (!) .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\4h1e2a346 horse 7vepaqjm .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\xakmpl [free] boots .zip.exe
%ALLUSERSPROFILE%\templates\gay 7vepaqjm lady .mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\s2fkave mzwpstr8n [free] shoes (haj1oyikd).rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\horse big .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\7b6fhxi apv53deiq9fw .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\ddqayq girls boobs girly .zip.exe
%ALLUSERSPROFILE%\templates\mzwpstr8n [free] (cy4xpd).mpeg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\7b6fhxi cum ddqayq [milf] .mpeg.exe
C:\users\default\appdata\local\temp\nude mzwpstr8n [free] kfp2yqq js80j73 .mpg.exe
C:\users\default\appdata\local\<INETFILES>\black nude h93bklf [free] ae2sd7u4xh .zip.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\viaz50 tsomq34 girls boobs wifey (gina).zip.exe
C:\users\default\templates\ikdyfwhy mzwpstr8n [free] .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\s2fkave yzw1afy nom72kl [bangbus] sweet .avi.exe
%TEMP%\nude horse [milf] boots .avi.exe
%LOCALAPPDATA%\<INETFILES>\s2fkave horse yzw1afy epyxwn cock zmc8ujp .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\h93bklf 7vepaqjm boots (dehod0,hyo87il).avi.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\gzn4ud7e lpcu5ai3 uncut .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\w6csjja14n1 mnho9y54 apv53deiq9fw jxqgtp .mpg.exe
%APPDATA%\microsoft\templates\mzwpstr8n bd1l5ir [bangbus] sweet .mpeg.exe
%APPDATA%\microsoft\windows\templates\zc8giv9 xakmpl vjq39c1gwy shoes .mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\porn nom72kl ejn547rbxhd1 (jade,c4w8hqa).mpg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\f1i7cm lpcu5ai3 [milf] zn3tvn .zip.exe
%HOMEPATH%\templates\sperm apv53deiq9fw latex (haj1oyikd,36mho73).mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\xakmpl big ol6p1tua .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\xakmpl vjq39c1gwy eigt45 .rar.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\ikdyfwhy wep6b08 mzwpstr8n nom72kl zmc8ujp .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\bd1l5ir 7vepaqjm .rar.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\wep6b08 porn vjq39c1gwy cock .mpeg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\s2fkave nom72kl hot (!) .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\zc8giv9 8ok6yf nude uncut (haj1oyikd,sonja).zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\mzwpstr8n hot (!) .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\zc8giv9 cum tsomq34 vjq39c1gwy 779mipj .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\8r3baiec cum hot (!) balls .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\4h1e2a346 h93bklf yzw1afy vjq39c1gwy gsva2xn (dxocjwba,gina).zip.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\f07qtt lpcu5ai3 beast uncut hole girly .avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\jxaglwti horse ihthd33 js80j73 .rar.exe
%WINDIR%\assembly\temp\z9z7rwe nude mnho9y54 [free] 6tl9zg0uqa .zip.exe
%WINDIR%\assembly\tmp\ikdyfwhy tsomq34 [milf] fishy (sarah,sarah).mpeg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\8r3baiec ddqayq big ash qq6w54yfhtqrbwcslg .rar.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\horse [milf] .rar.exe
%WINDIR%\pla\templates\fac71w2 horse vjq39c1gwy boobs mg9fvb2xk9 .rar.exe
%WINDIR%\security\templates\black ddqayq sperm l9hwcs7vvnphd9 .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\4h1e2a346 xakmpl beast uncut zn3tvn .zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\nom72kl [milf] js80j73 (cy4xpd,jenna).avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\ikdyfwhy horse epyxwn gh5b6gd7wrv .mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\horse [bangbus] sgoibhh .zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\bd1l5ir l9hwcs7vvnphd9 kfp2yqq b37oavmx289 (haj1oyikd,g6u8n4r).avi.exe
%WINDIR%\syswow64\config\systemprofile\f07qtt 8ok6yf apv53deiq9fw b37oavmx289 .mpg.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\viaz50 mzwpstr8n [milf] lzxyhb7k .mpg.exe
%WINDIR%\syswow64\fxstmp\eq7k2xcxt porn horse uncut js80j73 .mpg.exe
%WINDIR%\syswow64\ime\shared\asian wep6b08 nude [free] titts hotel (sarah).mpeg.exe
%WINDIR%\syswow64\config\systemprofile\w6csjja14n1 nom72kl l9hwcs7vvnphd9 hole .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\8r3baiec mnho9y54 beast bq4kno glans zmc8ujp .rar.exe
%WINDIR%\syswow64\fxstmp\wpjwijv h93bklf sgu4m7oc .rar.exe
%WINDIR%\syswow64\ime\shared\wpjwijv sperm hot (!) .mpeg.exe
%WINDIR%\temp\4h1e2a346 wep6b08 vjq39c1gwy glans lady .mpg.exe
%WINDIR%\winsxs\installtemp\s2fkave xakmpl hot (!) 779mipj .avi.exe
<Current directory>\sqjaed7r1vnw
%CommonProgramFiles%\microsoft shared\horse uncut cock (hyo87il,dxocjwba).avi.exe
%CommonProgramFiles%\microsoft shared\nom72kl l9hwcs7vvnphd9 hole ae2sd7u4xh (g6u8n4r).rar.exe
%ProgramFiles%\dvd maker\shared\sperm uncut lady (sonja,dxocjwba).avi.exe
%ProgramFiles%\dvd maker\shared\upfgetx h93bklf sperm sgu4m7oc lzxyhb7k .avi.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\xxx apv53deiq9fw mg9fvb2xk9 .zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\h93bklf gay l9hwcs7vvnphd9 zn3tvn .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\nom72kl l9hwcs7vvnphd9 (jade).mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\nom72kl hot (!) (g6u8n4r).mpeg.exe
%ProgramFiles%\microsoft office\templates\8r3baiec 8ok6yf mzwpstr8n [bangbus] hole nmibe2 .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\upfgetx porn lpcu5ai3 uncut ae2sd7u4xh .rar.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\f07qtt w6csjja14n1 sperm bq4kno feet ol6p1tua .mpeg.exe
%ProgramFiles%\microsoft office\templates\gay apv53deiq9fw .mpeg.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\f1i7cm wep6b08 xxx epyxwn (cy4xpd).avi.exe
%ProgramFiles%\windows journal\templates\upfgetx wep6b08 apv53deiq9fw glans 8pfmdyy (karin).mpg.exe
%ProgramFiles%\windows journal\templates\eq7k2xcxt 8ok6yf [bangbus] mg9fvb2xk9 (sonja,2hbt8wr).rar.exe
%ProgramFiles%\windows sidebar\shared gadgets\gzn4ud7e xakmpl mnho9y54 l9hwcs7vvnphd9 lady .rar.exe
%ProgramFiles%\windows sidebar\shared gadgets\ girls feet .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\sperm [free] (cy4xpd).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\f1i7cm ddqayq xxx girls .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\fac71w2 h93bklf beast bq4kno titts .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\mnho9y54 uncut (jade).mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\eq7k2xcxt porn xxx apv53deiq9fw hairy (haj1oyikd,liz).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\eq7k2xcxt bd1l5ir epyxwn ol6p1tua .rar.exe
%CommonProgramFiles(x86)%\microsoft shared\8r3baiec 7nd83wovj lpcu5ai3 uncut cock ash .mpeg.exe
%CommonProgramFiles(x86)%\microsoft shared\z9z7rwe horse lpcu5ai3 ihthd33 sgoibhh .mpg.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\upfgetx h93bklf xxx apv53deiq9fw hole .rar.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\black 8ok6yf beast 7vepaqjm (cy4xpd).rar.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\8r3baiec bd1l5ir horse l9hwcs7vvnphd9 glans .avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\gay nom72kl glans 40+ .zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\8r3baiec 8ok6yf mnho9y54 nom72kl .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\upfgetx wep6b08 lpcu5ai3 ihthd33 .mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\s2fkave ddqayq gay [milf] titts .mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\ apv53deiq9fw glans js80j73 .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\gzn4ud7e horse mzwpstr8n [bangbus] (cy4xpd).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt w6csjja14n1 sperm sgu4m7oc glans zmc8ujp .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\sperm ihthd33 .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\z9z7rwe horse gay [bangbus] hole gsva2xn .rar.exe
%ALLUSERSPROFILE%\templates\ big fishy .zip.exe
%ALLUSERSPROFILE%\templates\f07qtt wep6b08 mnho9y54 sgu4m7oc (liz).mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\lpcu5ai3 bq4kno rv0y8n .mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\fac71w2 xakmpl gay 7vepaqjm hotel (36mho73,cy4xpd).zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\sperm epyxwn feet ae2sd7u4xh .zip.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\8r3baiec w6csjja14n1 bq4kno rv0y8n .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\yzw1afy epyxwn titts 6tl9zg0uqa .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\upfgetx horse lpcu5ai3 sgu4m7oc cock latex .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\z9z7rwe 8ok6yf beast epyxwn titts rv0y8n .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\tsomq34 ihthd33 glans sgoibhh (liz).avi.exe
%ALLUSERSPROFILE%\templates\horse uncut titts lzxyhb7k .mpg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\nom72kl hot (!) nrb42wq (sonja,c4w8hqa).mpeg.exe
C:\users\default\appdata\local\temp\s2fkave wep6b08 tsomq34 uncut .mpg.exe
%ALLUSERSPROFILE%\templates\tsomq34 sgu4m7oc cock fw58kpr41ob1w .avi.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\f07qtt 7nd83wovj beast vjq39c1gwy feet .mpeg.exe
C:\users\default\appdata\local\<INETFILES>\eq7k2xcxt cum [milf] cock ejn547rbxhd1 (g6u8n4r).mpeg.exe
C:\users\default\appdata\local\temp\f07qtt horse big hole lzxyhb7k (dxocjwba).avi.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\lpcu5ai3 ihthd33 feet .rar.exe
C:\users\default\appdata\local\<INETFILES>\s2fkave nude horse [free] (dxocjwba).rar.exe
C:\users\default\templates\s2fkave w6csjja14n1 lpcu5ai3 [bangbus] .avi.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\tsomq34 epyxwn 779mipj .zip.exe
C:\users\default\templates\f1i7cm horse yzw1afy bq4kno boots .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\ apv53deiq9fw ol6p1tua .zip.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\nom72kl [bangbus] titts .zip.exe
%TEMP%\gay girls cock gh5b6gd7wrv (sarah).zip.exe
%TEMP%\beast [bangbus] ol6p1tua .mpeg.exe
%LOCALAPPDATA%\<INETFILES>\f07qtt porn l9hwcs7vvnphd9 fw58kpr41ob1w .zip.exe
%LOCALAPPDATA%\<INETFILES>\xxx apv53deiq9fw titts ae2sd7u4xh .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\z9z7rwe bd1l5ir gay 7vepaqjm 6tl9zg0uqa .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\gay big 6tl9zg0uqa .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\f1i7cm w6csjja14n1 gay apv53deiq9fw sweet (haj1oyikd,g6u8n4r).mpeg.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\beast [bangbus] .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\eq7k2xcxt xakmpl nom72kl ihthd33 titts .zip.exe
%APPDATA%\microsoft\templates\xxx hot (!) ae2sd7u4xh .mpeg.exe
%APPDATA%\microsoft\templates\gay [free] .rar.exe
%APPDATA%\microsoft\windows\templates\yzw1afy girls .mpeg.exe
%APPDATA%\microsoft\windows\templates\upfgetx horse mnho9y54 uncut feet ejn547rbxhd1 .zip.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\8r3baiec cum sperm apv53deiq9fw hairy .rar.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\mnho9y54 bq4kno glans ash (jade).mpeg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\upfgetx ddqayq xxx [bangbus] .zip.exe
%HOMEPATH%\templates\8r3baiec wep6b08 sperm hot (!) wifey .rar.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\eq7k2xcxt bd1l5ir yzw1afy [milf] glans zmc8ujp (c4w8hqa).avi.exe
%HOMEPATH%\templates\fac71w2 8ok6yf sperm l9hwcs7vvnphd9 .avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\eq7k2xcxt wep6b08 yzw1afy [free] (y8oxsqa).mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\upfgetx porn xxx uncut (liz).mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\z9z7rwe nude xxx l9hwcs7vvnphd9 wifey .avi.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\lpcu5ai3 ihthd33 cock ejn547rbxhd1 .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\f1i7cm 7nd83wovj mzwpstr8n sgu4m7oc 6tl9zg0uqa .mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\upfgetx wep6b08 gay bq4kno titts .mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\s2fkave ddqayq yzw1afy sgu4m7oc (liz).zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\nom72kl nom72kl cock .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\mnho9y54 [free] glans .zip.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\gzn4ud7e 8ok6yf horse big ash .avi.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\f1i7cm h93bklf tsomq34 l9hwcs7vvnphd9 .mpg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\mzwpstr8n vjq39c1gwy sgoibhh .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\tsomq34 vjq39c1gwy titts zmc8ujp .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\yzw1afy uncut .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\tsomq34 uncut cock .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\mnho9y54 girls .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\black 8ok6yf mnho9y54 [bangbus] eigt45 .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\mzwpstr8n [free] lzxyhb7k .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\upfgetx 8ok6yf lpcu5ai3 apv53deiq9fw .rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\xxx apv53deiq9fw cock b37oavmx289 .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\f07qtt 8ok6yf xxx girls cock fw58kpr41ob1w (y8oxsqa).mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\mzwpstr8n ihthd33 latex .zip.exe
%WINDIR%\assembly\temp\upfgetx cum sperm girls (cy4xpd).mpg.exe
%WINDIR%\assembly\tmp\f07qtt w6csjja14n1 horse bq4kno fw58kpr41ob1w (jenna,y8oxsqa).mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\gay nom72kl 50+ .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\black 8ok6yf tsomq34 epyxwn (g6u8n4r).rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\ sgu4m7oc titts wifey (sarah).avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\z9z7rwe nude sperm girls hole .zip.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\mnho9y54 [bangbus] .mpeg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\8r3baiec w6csjja14n1 lpcu5ai3 7vepaqjm lady .zip.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\eq7k2xcxt porn beast uncut (g6u8n4r).zip.exe
%WINDIR%\pla\templates\8r3baiec wep6b08 lpcu5ai3 nom72kl shoes .mpg.exe
%WINDIR%\security\templates\8r3baiec bd1l5ir uncut (cy4xpd).rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\black 8ok6yf nom72kl girls .zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\lpcu5ai3 7vepaqjm glans fishy (y8oxsqa).mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\nom72kl bq4kno feet lzxyhb7k .rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\f1i7cm w6csjja14n1 lpcu5ai3 uncut sweet .rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\nom72kl 7vepaqjm feet (hyo87il,jade).zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\f1i7cm wep6b08 beast 7vepaqjm feet young (karin).mpg.exe
%WINDIR%\syswow64\config\systemprofile\fac71w2 w6csjja14n1 nom72kl hot (!) cock .rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\sperm uncut glans gsva2xn .mpg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\f1i7cm xakmpl horse nom72kl .mpeg.exe
%WINDIR%\assembly\temp\black xakmpl nom72kl girls .mpg.exe
%WINDIR%\assembly\tmp\ ihthd33 (g6u8n4r).mpg.exe
%WINDIR%\syswow64\fxstmp\xakmpl ihthd33 hotel .mpg.exe
%WINDIR%\syswow64\ime\shared\gzn4ud7e h93bklf lpcu5ai3 l9hwcs7vvnphd9 .mpg.exe
%WINDIR%\syswow64\config\systemprofile\f1i7cm xakmpl xxx hot (!) .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f1i7cm xakmpl mzwpstr8n big girly (gina,cy4xpd).avi.exe
%WINDIR%\syswow64\fxstmp\f07qtt nude gay vjq39c1gwy qq6w54yfhtqrbwcslg .mpg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\ l9hwcs7vvnphd9 sgoibhh .mpg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\z9z7rwe horse lpcu5ai3 [free] qx2j1b5 .zip.exe
%WINDIR%\syswow64\ime\shared\yzw1afy [free] (jade).avi.exe
%WINDIR%\pla\templates\eq7k2xcxt nude nom72kl ihthd33 6tl9zg0uqa .mpeg.exe
%WINDIR%\security\templates\gzn4ud7e wep6b08 horse [milf] hole 779mipj .avi.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\8r3baiec nude yzw1afy hot (!) sweet .avi.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\z9z7rwe bd1l5ir lpcu5ai3 sgu4m7oc lzxyhb7k .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\gzn4ud7e 7nd83wovj epyxwn glans fishy .rar.exe
%WINDIR%\temp\gzn4ud7e ddqayq uncut (sarah).mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\8r3baiec wep6b08 mzwpstr8n bq4kno .mpg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\fac71w2 7nd83wovj gay [free] glans .rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\8r3baiec wep6b08 nom72kl [milf] 779mipj .rar.exe
%WINDIR%\syswow64\config\systemprofile\upfgetx xakmpl mnho9y54 ihthd33 titts balls (karin).rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\z9z7rwe 8ok6yf beast epyxwn titts 779mipj (liz).avi.exe
%WINDIR%\syswow64\fxstmp\7nd83wovj gay bq4kno (liz).avi.exe
%WINDIR%\syswow64\ime\shared\mnho9y54 apv53deiq9fw rv0y8n .mpeg.exe
%WINDIR%\syswow64\config\systemprofile\mnho9y54 girls 50+ .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\beast [free] fishy .mpg.exe
%WINDIR%\syswow64\ime\shared\yzw1afy [bangbus] hotel .zip.exe
%WINDIR%\temp\mzwpstr8n [milf] ol6p1tua .rar.exe
%WINDIR%\winsxs\installtemp\viaz50 yzw1afy vjq39c1gwy .zip.exe
%WINDIR%\winsxs\installtemp\8ok6yf gay ihthd33 .rar.exe
%CommonProgramFiles%\microsoft shared\asian sperm cum l9hwcs7vvnphd9 js80j73 .zip.exe
%CommonProgramFiles%\microsoft shared\zc8giv9 lpcu5ai3 mzwpstr8n [milf] ae2sd7u4xh (c4w8hqa,liz).mpg.exe
%ProgramFiles%\dvd maker\shared\z9z7rwe mnho9y54 ihthd33 young (cy4xpd,jade).mpeg.exe
%ProgramFiles%\dvd maker\shared\xakmpl l9hwcs7vvnphd9 titts 6tl9zg0uqa .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wpjwijv xakmpl l9hwcs7vvnphd9 titts (hyo87il,haj1oyikd).rar.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\z9z7rwe yzw1afy 7nd83wovj 7vepaqjm 8bgkvshe1 .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\xxx xxx 7vepaqjm js80j73 .mpg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\ddqayq epyxwn 8pfmdyy .avi.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\cum uncut kfp2yqq .zip.exe
%ProgramFiles%\microsoft office\templates\0287zh mnho9y54 bq4kno (dehod0,sonja).avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\upfgetx horse 7vepaqjm mg9fvb2xk9 .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\nude lpcu5ai3 vjq39c1gwy 8pfmdyy .rar.exe
%ProgramFiles%\microsoft office\templates\8r3baiec mnho9y54 w6csjja14n1 sgu4m7oc .avi.exe
%ProgramFiles%\windows journal\templates\yzw1afy wep6b08 uncut wifey .mpeg.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\s2fkave nom72kl uncut .zip.exe
%ProgramFiles%\windows journal\templates\jxaglwti xakmpl mzwpstr8n sgu4m7oc .zip.exe
%ProgramFiles%\windows sidebar\shared gadgets\4h1e2a346 cum beast girls shoes .mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\7nd83wovj nom72kl (liz).avi.exe
%ProgramFiles%\windows sidebar\shared gadgets\wpjwijv nude ihthd33 .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\ddqayq big (dehod0,jenna).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\black w6csjja14n1 bq4kno js80j73 (karin,sonja).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\horse wep6b08 nom72kl .mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\wep6b08 sperm vjq39c1gwy kfp2yqq (sonja,rdl1tfkz).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\asian yzw1afy bd1l5ir [milf] gsva2xn .mpg.exe
%CommonProgramFiles(x86)%\microsoft shared\upfgetx w6csjja14n1 [free] (cy4xpd,cy4xpd).zip.exe
%CommonProgramFiles(x86)%\microsoft shared\nude [bangbus] legs gh5b6gd7wrv (36mho73).mpeg.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\0287zh nude horse girls .zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\4h1e2a346 mzwpstr8n gay nom72kl fw58kpr41ob1w .rar.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\asian h93bklf beast l9hwcs7vvnphd9 ash (dxocjwba).rar.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\tsomq34 h93bklf nom72kl js80j73 (sonja,c4w8hqa).rar.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\nude big wifey .mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\mzwpstr8n yzw1afy [milf] latex .avi.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\porn uncut jxqgtp (sandy,2hbt8wr).avi.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\nude nom72kl .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\jxaglwti 8ok6yf [free] .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\lpcu5ai3 vjq39c1gwy .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\4h1e2a346 w6csjja14n1 ihthd33 50+ .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\8r3baiec cum tsomq34 epyxwn .zip.exe
%ALLUSERSPROFILE%\templates\0287zh xxx sgu4m7oc .avi.exe
%ALLUSERSPROFILE%\templates\cum ddqayq big glans .mpg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\upfgetx mzwpstr8n beast big rv0y8n .zip.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\upfgetx tsomq34 ddqayq uncut kfp2yqq .mpg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\gay girls ejn547rbxhd1 .mpeg.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\zc8giv9 w6csjja14n1 cum [bangbus] qx2j1b5 .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\xakmpl ihthd33 fw58kpr41ob1w .mpg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\z1qxwcd nude vjq39c1gwy ash .zip.exe
%ALLUSERSPROFILE%\templates\zc8giv9 nude big rv0y8n (dxocjwba).mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\8r3baiec wep6b08 tsomq34 bq4kno fw58kpr41ob1w .avi.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\porn vjq39c1gwy (2hbt8wr).mpeg.exe
C:\users\default\appdata\local\temp\tsomq34 girls young .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\wep6b08 xakmpl sgu4m7oc jxqgtp latex (g6u8n4r,liz).mpeg.exe
C:\users\default\appdata\local\<INETFILES>\nude girls js80j73 (y8oxsqa,cy4xpd).rar.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\zc8giv9 bd1l5ir bd1l5ir big 40+ .mpg.exe
%ALLUSERSPROFILE%\templates\ bq4kno boobs .mpeg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\4h1e2a346 tsomq34 7vepaqjm balls .rar.exe
C:\users\default\templates\black ddqayq 8ok6yf hot (!) .mpeg.exe
C:\users\default\appdata\local\temp\f1i7cm 7vepaqjm feet qx2j1b5 .avi.exe
C:\users\default\appdata\local\<INETFILES>\gzn4ud7e lpcu5ai3 hot (!) glans ejn547rbxhd1 .rar.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\black l9hwcs7vvnphd9 hole (liz,2hbt8wr).mpg.exe
C:\users\default\templates\nude xxx ihthd33 6tl9zg0uqa .zip.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\4h1e2a346 mnho9y54 bd1l5ir [bangbus] boobs .mpg.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\ikdyfwhy lpcu5ai3 ddqayq l9hwcs7vvnphd9 .avi.exe
%TEMP%\fac71w2 beast [milf] mg9fvb2xk9 .avi.exe
%TEMP%\beast girls sm (jade,dehod0).mpeg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\black horse ihthd33 (dehod0,2hbt8wr).avi.exe
%LOCALAPPDATA%\<INETFILES>\0287zh bd1l5ir yzw1afy uncut sgoibhh .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\fac71w2 xxx uncut nrb42wq (hyo87il,sonja).mpeg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\yzw1afy ddqayq hot (!) latex (36mho73).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\8ok6yf horse epyxwn rv0y8n .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\nom72kl sperm girls boots .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\nom72kl ddqayq uncut boobs hotel (c4w8hqa,y8oxsqa).rar.exe
%APPDATA%\microsoft\templates\zc8giv9 tsomq34 uncut .zip.exe
%APPDATA%\microsoft\windows\templates\z9z7rwe porn nom72kl uncut fishy .zip.exe
%APPDATA%\microsoft\windows\templates\s2fkave sperm girls mg9fvb2xk9 .avi.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\zc8giv9 cum beast uncut hotel .mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\0287zh bd1l5ir [bangbus] jxqgtp .avi.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\wpjwijv 7nd83wovj mzwpstr8n bq4kno lady (y8oxsqa,haj1oyikd).avi.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\eq7k2xcxt porn horse uncut qq6w54yfhtqrbwcslg .zip.exe
%HOMEPATH%\templates\0287zh tsomq34 lpcu5ai3 bq4kno boobs .mpg.exe
%HOMEPATH%\templates\lpcu5ai3 bd1l5ir l9hwcs7vvnphd9 js80j73 .rar.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\zc8giv9 nom72kl big girly .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\4h1e2a346 gay ihthd33 ash girly .mpeg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\z9z7rwe porn sgu4m7oc .mpeg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\cum [bangbus] feet hotel .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\asian ddqayq l9hwcs7vvnphd9 eigt45 .avi.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\s2fkave horse uncut legs .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\fac71w2 beast uncut kfp2yqq (karin,hyo87il).zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\mzwpstr8n beast [free] sgoibhh .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\horse xxx apv53deiq9fw .zip.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\lpcu5ai3 mnho9y54 nom72kl boots .mpeg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\yzw1afy beast [milf] (gina,rdl1tfkz).zip.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\7nd83wovj nom72kl l9hwcs7vvnphd9 rv0y8n .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\mzwpstr8n beast vjq39c1gwy .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\ikdyfwhy cum l9hwcs7vvnphd9 .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\eq7k2xcxt h93bklf 8ok6yf [milf] 40+ .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\wpjwijv cum vjq39c1gwy qx2j1b5 .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\z9z7rwe horse [milf] .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\s2fkave h93bklf xakmpl big (sarah,liz).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\beast lpcu5ai3 epyxwn ash qx2j1b5 .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\wep6b08 vjq39c1gwy .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\eq7k2xcxt h93bklf [milf] cock mg9fvb2xk9 (jade,sarah).mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\s2fkave cum nom72kl legs latex .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\asian lpcu5ai3 w6csjja14n1 [milf] cock latex (y8oxsqa,2hbt8wr).rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\bd1l5ir nom72kl jxqgtp eigt45 .mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\7nd83wovj wep6b08 big 6tl9zg0uqa (liz,2hbt8wr).rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\nude bq4kno mg9fvb2xk9 (sarah,2hbt8wr).mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\zc8giv9 7nd83wovj ihthd33 ejn547rbxhd1 .rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\black 8ok6yf uncut glans latex .mpg.exe
%WINDIR%\assembly\temp\z1qxwcd cum nom72kl [free] .rar.exe
%WINDIR%\assembly\temp\z1qxwcd sperm nom72kl .rar.exe
%WINDIR%\assembly\tmp\black cum bd1l5ir bq4kno 6tl9zg0uqa (cy4xpd,g6u8n4r).avi.exe
%WINDIR%\assembly\tmp\horse horse sgu4m7oc ejn547rbxhd1 (karin,2hbt8wr).zip.exe
Miscellaneous
Searches for the following windows
ClassName: 'Progman' WindowName: ''
ClassName: 'Proxy Desktop' WindowName: ''
Restarts the analyzed sample
Executes the following
Curing recommendations
Windows
macOS
Linux
Android
If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space .
If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.
If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
Switch off your device and turn it on as normal.
Find out more about Dr.Web for Android
このウェブサイトを継続して訪問する場合、訪問者に関する統計データを収集するためのCookieファイルおよび他のテクノロジーを弊社が利用することに同意したものとします。詳細
OK