Trojan.KillProc2.25322

Technical Information

Malicious functions

Terminates or attempts to terminate

the following system processes:

%WINDIR%\explorer.exe
<SYSTEM32>\taskhost.exe
<SYSTEM32>\dwm.exe

the following user processes:

iexplore.exe
firefox.exe

Modifies file system

Creates the following files

%WINDIR%y1s2fctrp3
%CommonProgramFiles%\microsoft shared\f07qtt 7nd83wovj bq4kno titts .zip.exe
%ProgramFiles%\dvd maker\shared\sperm l9hwcs7vvnphd9 ol6p1tua (dehod0,jade).mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\horse big 50+ (rdl1tfkz,g6u8n4r).mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\fac71w2 ddqayq sperm apv53deiq9fw hole b37oavmx289 .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\fac71w2 xakmpl beast sgu4m7oc .zip.exe
%ProgramFiles%\microsoft office\templates\gzn4ud7e porn horse nom72kl .rar.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\black bd1l5ir beast uncut 6tl9zg0uqa (sonja,y8oxsqa).mpg.exe
%ProgramFiles%\windows journal\templates\upfgetx xakmpl lpcu5ai3 nom72kl titts b37oavmx289 (sarah).rar.exe
%ProgramFiles%\windows sidebar\shared gadgets\yzw1afy girls hole fishy .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\yzw1afy uncut feet lzxyhb7k .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\beast uncut glans rv0y8n (y8oxsqa).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\tsomq34 [free] titts (hyo87il,cy4xpd).zip.exe
%CommonProgramFiles(x86)%\microsoft shared\z9z7rwe ddqayq yzw1afy [milf] cock nrb42wq (karin).zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\gzn4ud7e xakmpl tsomq34 nom72kl titts .zip.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\yzw1afy nom72kl .zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\f1i7cm 8ok6yf horse girls gh5b6gd7wrv .mpg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\ girls .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\tsomq34 big (sarah).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\nom72kl [milf] glans young .zip.exe
%ALLUSERSPROFILE%\templates\z9z7rwe wep6b08 mnho9y54 epyxwn ae2sd7u4xh .zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\mnho9y54 big glans (haj1oyikd,2hbt8wr).zip.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\gzn4ud7e h93bklf horse apv53deiq9fw cock 6tl9zg0uqa .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\fac71w2 porn yzw1afy [bangbus] b37oavmx289 (dehod0,c4w8hqa).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\z9z7rwe porn yzw1afy uncut (karin).mpg.exe
%ALLUSERSPROFILE%\templates\fac71w2 porn yzw1afy ihthd33 .mpeg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\s2fkave h93bklf mzwpstr8n big feet .mpeg.exe
C:\users\default\appdata\local\temp\gzn4ud7e bd1l5ir horse epyxwn ejn547rbxhd1 .avi.exe
C:\users\default\appdata\local\<INETFILES>\s2fkave ddqayq mzwpstr8n nom72kl (c4w8hqa).rar.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\z9z7rwe wep6b08 mzwpstr8n [bangbus] .mpeg.exe
C:\users\default\templates\horse sgu4m7oc gsva2xn .mpeg.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\fac71w2 porn mnho9y54 uncut .mpg.exe
%TEMP%\s2fkave h93bklf lpcu5ai3 sgu4m7oc .avi.exe
%LOCALAPPDATA%\<INETFILES>\eq7k2xcxt wep6b08 nom72kl uncut cock girly .zip.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\fac71w2 h93bklf horse epyxwn hole 40+ .zip.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\beast nom72kl cock (hyo87il,cy4xpd).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\f1i7cm h93bklf nom72kl [free] .zip.exe
%APPDATA%\microsoft\templates\8r3baiec wep6b08 lpcu5ai3 [bangbus] titts .rar.exe
%APPDATA%\microsoft\windows\templates\eq7k2xcxt 7nd83wovj horse bq4kno (cy4xpd).mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\tsomq34 nom72kl balls .avi.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\z9z7rwe horse tsomq34 epyxwn .mpeg.exe
%HOMEPATH%\templates\tsomq34 nom72kl feet gh5b6gd7wrv .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\fac71w2 nude lpcu5ai3 uncut 8pfmdyy .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\nom72kl [milf] balls .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\f07qtt nude tsomq34 vjq39c1gwy hole .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\black nude mzwpstr8n sgu4m7oc js80j73 (gina,2hbt8wr).mpg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\fac71w2 cum yzw1afy hot (!) sweet .rar.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\s2fkave h93bklf horse epyxwn latex .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\lpcu5ai3 uncut .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\gzn4ud7e h93bklf xxx 7vepaqjm boots .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\s2fkave w6csjja14n1 nom72kl qq6w54yfhtqrbwcslg (sandy,cy4xpd).rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\eq7k2xcxt nude lpcu5ai3 l9hwcs7vvnphd9 feet ejn547rbxhd1 (jade).avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\s2fkave ddqayq [free] hole wifey .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\mzwpstr8n uncut cock .mpg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\f07qtt wep6b08 beast big .avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\s2fkave 7nd83wovj horse girls .avi.exe
%WINDIR%\assembly\temp\f07qtt 7nd83wovj sperm sgu4m7oc .mpeg.exe
%WINDIR%\assembly\tmp\gzn4ud7e 7nd83wovj lpcu5ai3 7vepaqjm (dxocjwba).mpg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\f07qtt xakmpl tsomq34 girls feet 6tl9zg0uqa (cy4xpd).mpeg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\upfgetx xakmpl lpcu5ai3 nom72kl hole .mpg.exe
%WINDIR%\pla\templates\f07qtt xakmpl lpcu5ai3 uncut (y8oxsqa).rar.exe
%WINDIR%\security\templates\nom72kl girls titts lzxyhb7k .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\f1i7cm cum mnho9y54 nom72kl feet lady .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\8r3baiec h93bklf horse [bangbus] feet girly .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\yzw1afy 7vepaqjm ash .rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\horse nom72kl titts (36mho73,g6u8n4r).zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\f1i7cm h93bklf beast l9hwcs7vvnphd9 feet (sonja,dxocjwba).avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\f07qtt xakmpl [free] (sarah).zip.exe
%WINDIR%\syswow64\config\systemprofile\f1i7cm bd1l5ir yzw1afy girls (2hbt8wr).rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f07qtt 8ok6yf mnho9y54 sgu4m7oc girly .zip.exe
%WINDIR%\syswow64\fxstmp\ddqayq tsomq34 hot (!) qq6w54yfhtqrbwcslg .zip.exe
%WINDIR%\syswow64\ime\shared\mnho9y54 sgu4m7oc hole nrb42wq .rar.exe
%WINDIR%\syswow64\config\systemprofile\upfgetx h93bklf tsomq34 apv53deiq9fw .zip.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\eq7k2xcxt cum epyxwn eigt45 .rar.exe
%WINDIR%\syswow64\fxstmp\f1i7cm 8ok6yf beast [bangbus] gsva2xn .mpg.exe
%WINDIR%\syswow64\ime\shared\nom72kl [free] hairy .avi.exe
%WINDIR%\temp\lpcu5ai3 bq4kno glans lzxyhb7k .zip.exe
%WINDIR%\winsxs\installtemp\sperm nom72kl girly .rar.exe
<Current directory>\sqjaed7r1vnw
%CommonProgramFiles%\microsoft shared\xxx girls (sarah).mpeg.exe
%CommonProgramFiles%\microsoft shared\w6csjja14n1 h93bklf bq4kno (2hbt8wr,2hbt8wr).mpeg.exe
%ProgramFiles%\dvd maker\shared\8r3baiec mnho9y54 horse apv53deiq9fw titts (rdl1tfkz,2hbt8wr).zip.exe
%ProgramFiles%\dvd maker\shared\asian 8ok6yf xakmpl sgu4m7oc hole ejn547rbxhd1 (c4w8hqa,2hbt8wr).mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\h93bklf 7vepaqjm cock .rar.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\gzn4ud7e tsomq34 gay 7vepaqjm lzxyhb7k .zip.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\h93bklf l9hwcs7vvnphd9 glans 8pfmdyy .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\horse wep6b08 nom72kl boots (jenna,g6u8n4r).zip.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\s2fkave gay girls lady .zip.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\8r3baiec yzw1afy [milf] (haj1oyikd,36mho73).rar.exe
%ProgramFiles%\microsoft office\templates\fac71w2 xakmpl cum l9hwcs7vvnphd9 wifey .avi.exe
%ProgramFiles%\microsoft office\templates\f1i7cm porn bd1l5ir 7vepaqjm jxqgtp qx2j1b5 .rar.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\cum beast ihthd33 hole boots .avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\mzwpstr8n nude uncut girly (liz,sandy).avi.exe
%ProgramFiles%\windows journal\templates\horse xakmpl vjq39c1gwy hole .zip.exe
%ProgramFiles%\windows journal\templates\h93bklf hot (!) legs 8pfmdyy (36mho73,jade).mpeg.exe
%ProgramFiles%\windows sidebar\shared gadgets\eq7k2xcxt tsomq34 [milf] cock (y8oxsqa).mpg.exe
%ProgramFiles%\windows sidebar\shared gadgets\wep6b08 sperm apv53deiq9fw (sandy).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\gay tsomq34 epyxwn .zip.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\ikdyfwhy bd1l5ir 7vepaqjm 8pfmdyy .mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\yzw1afy hot (!) boobs lzxyhb7k (c4w8hqa,dehod0).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\cum uncut hairy .mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\gay vjq39c1gwy (sandy,dehod0).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\asian porn girls .avi.exe
%CommonProgramFiles(x86)%\microsoft shared\f07qtt mzwpstr8n lpcu5ai3 hot (!) (karin,sonja).zip.exe
%CommonProgramFiles(x86)%\microsoft shared\8r3baiec horse 7vepaqjm boobs ol6p1tua (dxocjwba,y8oxsqa).zip.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\f1i7cm ddqayq vjq39c1gwy .rar.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\yzw1afy yzw1afy l9hwcs7vvnphd9 young (36mho73).mpg.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\tsomq34 ihthd33 .avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\jxaglwti ddqayq [bangbus] legs 50+ .rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\z9z7rwe yzw1afy [free] ae2sd7u4xh .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\xxx girls ol6p1tua (jade,sarah).mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\viaz50 tsomq34 sgu4m7oc ol6p1tua .zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\xxx hot (!) (jenna,jenna).zip.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\viaz50 nude vjq39c1gwy .zip.exe
%ALLUSERSPROFILE%\templates\wpjwijv yzw1afy ihthd33 8pfmdyy (karin).rar.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\z1qxwcd wep6b08 xxx [free] sgoibhh .zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\zc8giv9 xakmpl hot (!) mg9fvb2xk9 .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt 8ok6yf xakmpl girls fishy .mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\w6csjja14n1 wep6b08 hot (!) 8pfmdyy .mpg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\7nd83wovj vjq39c1gwy .avi.exe
%ALLUSERSPROFILE%\templates\f1i7cm mnho9y54 bq4kno gsva2xn .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\porn 7nd83wovj nom72kl .avi.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\yzw1afy mzwpstr8n girls nmibe2 .rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\ vjq39c1gwy .mpg.exe
%ALLUSERSPROFILE%\templates\f07qtt sperm gay girls fishy .rar.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\ [free] .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\fac71w2 wep6b08 nom72kl boots (sonja).rar.exe
C:\users\default\appdata\local\temp\upfgetx mzwpstr8n h93bklf sgu4m7oc rv0y8n .mpg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt wep6b08 nom72kl apv53deiq9fw cock .mpg.exe
C:\users\default\appdata\local\<INETFILES>\jxaglwti h93bklf mnho9y54 uncut cock lzxyhb7k .mpg.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\4h1e2a346 yzw1afy 7nd83wovj 7vepaqjm .zip.exe
%ALLUSERSPROFILE%\templates\ikdyfwhy porn bd1l5ir uncut ash 6tl9zg0uqa .rar.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\xakmpl nom72kl .mpeg.exe
C:\users\default\templates\z1qxwcd mnho9y54 nom72kl (sonja).avi.exe
C:\users\default\appdata\local\temp\cum ihthd33 ash 40+ (sarah,y8oxsqa).avi.exe
C:\users\default\appdata\local\<INETFILES>\horse hot (!) hole .zip.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\zc8giv9 7nd83wovj apv53deiq9fw balls .mpeg.exe
C:\users\default\templates\viaz50 porn horse [free] hotel .mpeg.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\7nd83wovj girls (c4w8hqa,gina).mpg.exe
%TEMP%\black horse ddqayq apv53deiq9fw .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\porn bq4kno gh5b6gd7wrv (g6u8n4r).avi.exe
%TEMP%\ 7vepaqjm titts qx2j1b5 .avi.exe
%LOCALAPPDATA%\<INETFILES>\8ok6yf h93bklf epyxwn .mpg.exe
%LOCALAPPDATA%\<INETFILES>\gzn4ud7e nude gay apv53deiq9fw gh5b6gd7wrv (rdl1tfkz).mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\0287zh 8ok6yf w6csjja14n1 big ejn547rbxhd1 .rar.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\0287zh horse gay vjq39c1gwy ejn547rbxhd1 (sandy,sarah).mpeg.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\0287zh porn bq4kno (sarah,hyo87il).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\fac71w2 w6csjja14n1 yzw1afy nom72kl ol6p1tua .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\eq7k2xcxt gay bq4kno (g6u8n4r).zip.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\nude nom72kl hole 8pfmdyy .mpg.exe
%APPDATA%\microsoft\templates\f07qtt nom72kl cum epyxwn .mpeg.exe
%APPDATA%\microsoft\templates\w6csjja14n1 [bangbus] balls (sarah).mpeg.exe
%APPDATA%\microsoft\windows\templates\8r3baiec w6csjja14n1 7vepaqjm .mpeg.exe
%APPDATA%\microsoft\windows\templates\ddqayq uncut .zip.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\gzn4ud7e 8ok6yf epyxwn (dehod0,dehod0).mpg.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\z1qxwcd horse sgu4m7oc .avi.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\black 7nd83wovj wep6b08 girls (y8oxsqa,sonja).rar.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\viaz50 porn [free] hole sweet .mpeg.exe
%HOMEPATH%\templates\w6csjja14n1 horse [milf] (2hbt8wr,sonja).avi.exe
%HOMEPATH%\templates\ikdyfwhy xakmpl cum uncut qq6w54yfhtqrbwcslg (cy4xpd,dxocjwba).rar.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\ddqayq hot (!) ash (cy4xpd,g6u8n4r).mpeg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\jxaglwti h93bklf l9hwcs7vvnphd9 ejn547rbxhd1 .mpeg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\z1qxwcd gay ihthd33 .avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\f07qtt horse xxx vjq39c1gwy kfp2yqq .avi.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\lpcu5ai3 wep6b08 uncut .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\z9z7rwe xxx epyxwn ash .mpg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\mnho9y54 sgu4m7oc jxqgtp .rar.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\s2fkave mzwpstr8n bd1l5ir [milf] lzxyhb7k (gina).zip.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\viaz50 xakmpl xakmpl girls nrb42wq (rdl1tfkz,hyo87il).zip.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\gay nude nom72kl feet 8pfmdyy (rdl1tfkz).avi.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\z9z7rwe xakmpl apv53deiq9fw qx2j1b5 .zip.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\asian horse xakmpl [bangbus] (36mho73,dxocjwba).mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\upfgetx horse cum [free] (rdl1tfkz,hyo87il).mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\z1qxwcd nom72kl bd1l5ir ihthd33 cock .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\eq7k2xcxt xxx h93bklf vjq39c1gwy fishy .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\ 7nd83wovj vjq39c1gwy .rar.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\z9z7rwe horse hot (!) cock .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zc8giv9 xxx 8ok6yf uncut ae2sd7u4xh (jade).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\sperm horse uncut sweet .zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\z9z7rwe sperm ihthd33 .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\asian gay uncut ejn547rbxhd1 .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\ [milf] (sarah,dehod0).zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\f1i7cm cum apv53deiq9fw zn3tvn .mpg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\fac71w2 wep6b08 uncut .zip.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\xakmpl [free] legs ash .mpg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\h93bklf hot (!) jxqgtp .mpeg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\f07qtt wep6b08 sgu4m7oc glans .mpg.exe
%WINDIR%\assembly\temp\xxx mzwpstr8n [milf] .mpeg.exe
%WINDIR%\assembly\temp\upfgetx yzw1afy 8ok6yf big eigt45 .mpeg.exe
%WINDIR%\assembly\tmp\eq7k2xcxt xakmpl w6csjja14n1 epyxwn .rar.exe
%WINDIR%\assembly\tmp\f07qtt tsomq34 l9hwcs7vvnphd9 wifey (2hbt8wr).rar.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\z1qxwcd porn l9hwcs7vvnphd9 shoes .avi.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\yzw1afy sgu4m7oc jxqgtp 50+ (sonja).mpg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\z1qxwcd horse ihthd33 (gina,haj1oyikd).zip.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\jxaglwti mzwpstr8n 7vepaqjm 50+ .zip.exe
%WINDIR%\pla\templates\jxaglwti sperm hot (!) hotel .mpg.exe
%WINDIR%\pla\templates\7b6fhxi tsomq34 [bangbus] boots .mpg.exe
%WINDIR%\security\templates\0287zh ddqayq hot (!) .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\jxaglwti mzwpstr8n beast hot (!) .avi.exe
%WINDIR%\security\templates\z9z7rwe bd1l5ir xakmpl vjq39c1gwy cock nmibe2 (karin).zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\f1i7cm 8ok6yf 8ok6yf uncut hole .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\jxaglwti tsomq34 l9hwcs7vvnphd9 titts (2hbt8wr).mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\mnho9y54 horse nom72kl zn3tvn (liz).rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\z9z7rwe mnho9y54 vjq39c1gwy mg9fvb2xk9 .mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\8r3baiec porn yzw1afy nom72kl glans 6tl9zg0uqa .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\s2fkave nude 8ok6yf [bangbus] nmibe2 .zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\f07qtt porn vjq39c1gwy 6tl9zg0uqa (sonja).mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\8r3baiec mnho9y54 uncut .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\8ok6yf horse big qx2j1b5 .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\zc8giv9 wep6b08 nom72kl (sandy).mpg.exe
%WINDIR%\syswow64\config\systemprofile\upfgetx horse mzwpstr8n girls .avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\z9z7rwe nom72kl bq4kno hole b37oavmx289 .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f07qtt mzwpstr8n girls .avi.exe
%WINDIR%\syswow64\config\systemprofile\zc8giv9 horse 8ok6yf epyxwn legs zmc8ujp .rar.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\asian mzwpstr8n big (y8oxsqa,karin).mpeg.exe
%WINDIR%\syswow64\fxstmp\asian bd1l5ir [free] hole boots .zip.exe
%WINDIR%\syswow64\fxstmp\f1i7cm xakmpl h93bklf girls hairy .rar.exe
%WINDIR%\syswow64\ime\shared\asian 8ok6yf uncut .mpg.exe
%WINDIR%\syswow64\ime\shared\mnho9y54 [milf] glans sm .mpeg.exe
%WINDIR%\syswow64\config\systemprofile\viaz50 lpcu5ai3 h93bklf l9hwcs7vvnphd9 (sonja).zip.exe
%WINDIR%\syswow64\config\systemprofile\upfgetx ddqayq yzw1afy apv53deiq9fw zn3tvn .mpeg.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\4h1e2a346 cum bq4kno .zip.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\8ok6yf ddqayq [bangbus] hole 779mipj .avi.exe
%WINDIR%\syswow64\fxstmp\jxaglwti sperm horse ihthd33 (jenna,y8oxsqa).zip.exe
%WINDIR%\syswow64\fxstmp\f07qtt wep6b08 bd1l5ir nom72kl ash .mpg.exe
%WINDIR%\syswow64\ime\shared\7b6fhxi cum bq4kno .rar.exe
%WINDIR%\syswow64\ime\shared\h93bklf girls kfp2yqq qq6w54yfhtqrbwcslg (rdl1tfkz).mpg.exe
%WINDIR%\temp\zc8giv9 tsomq34 sgu4m7oc fw58kpr41ob1w (karin).mpeg.exe
%WINDIR%\temp\black mzwpstr8n horse girls shoes .mpg.exe
%WINDIR%\winsxs\installtemp\jxaglwti xakmpl uncut kfp2yqq eigt45 .zip.exe
%WINDIR%\winsxs\installtemp\yzw1afy ihthd33 js80j73 (c4w8hqa,hyo87il).zip.exe
%CommonProgramFiles%\microsoft shared\fac71w2 wep6b08 gay hot (!) hole ol6p1tua (y8oxsqa).zip.exe
%CommonProgramFiles%\microsoft shared\z9z7rwe horse gay epyxwn .zip.exe
%ProgramFiles%\dvd maker\shared\black cum hot (!) hole .rar.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\s2fkave porn gay big titts b37oavmx289 (2hbt8wr).mpg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\nom72kl hot (!) js80j73 .mpg.exe
%ProgramFiles%\dvd maker\shared\fac71w2 nude gay nom72kl .avi.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\tsomq34 epyxwn ol6p1tua .mpg.exe
%ProgramFiles%\microsoft office\templates\sperm big feet .avi.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\z9z7rwe h93bklf gay big hole fishy (dxocjwba).avi.exe
%ProgramFiles%\windows journal\templates\upfgetx w6csjja14n1 nom72kl vjq39c1gwy cock mg9fvb2xk9 (c4w8hqa).mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\beast sgu4m7oc b37oavmx289 .mpeg.exe
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\xxx bq4kno fw58kpr41ob1w .mpg.exe
%ProgramFiles%\windows sidebar\shared gadgets\mnho9y54 ihthd33 779mipj .avi.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\mnho9y54 7vepaqjm titts gh5b6gd7wrv .zip.exe
%ProgramFiles%\microsoft office\office14\groove\xml files\space templates\nom72kl vjq39c1gwy nrb42wq .mpeg.exe
%ProgramFiles%\microsoft office\templates\gay [free] glans lzxyhb7k (g6u8n4r).rar.exe
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\s2fkave 7nd83wovj tsomq34 girls js80j73 .rar.exe
%ProgramFiles%\windows journal\templates\gzn4ud7e bd1l5ir lpcu5ai3 7vepaqjm girly (haj1oyikd,jade).rar.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\sperm sgu4m7oc b37oavmx289 .mpeg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\mzwpstr8n l9hwcs7vvnphd9 hole ol6p1tua (c4w8hqa).mpg.exe
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\mnho9y54 [free] cock .zip.exe
%CommonProgramFiles(x86)%\microsoft shared\gay uncut 50+ .avi.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\gzn4ud7e wep6b08 sperm girls glans .zip.exe
%CommonProgramFiles(x86)%\microsoft shared\yzw1afy uncut shoes .rar.exe
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\xxx sgu4m7oc glans .zip.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\gay big ejn547rbxhd1 (36mho73,sarah).rar.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\s2fkave w6csjja14n1 mnho9y54 bq4kno young .avi.exe
%ProgramFiles(x86)%\windows sidebar\shared gadgets\beast epyxwn (g6u8n4r).rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\z9z7rwe 8ok6yf tsomq34 sgu4m7oc boots (hyo87il,g6u8n4r).rar.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\eq7k2xcxt wep6b08 gay big feet sweet .mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\z9z7rwe 7nd83wovj gay nom72kl feet balls (2hbt8wr).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt cum yzw1afy [milf] hole zmc8ujp (sarah).mpeg.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\beast bq4kno .avi.exe
%ALLUSERSPROFILE%\templates\s2fkave nude horse nom72kl (jade).zip.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\lpcu5ai3 nom72kl .zip.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\tsomq34 vjq39c1gwy glans (sonja,cy4xpd).rar.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\f07qtt 8ok6yf tsomq34 7vepaqjm .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\mnho9y54 ihthd33 hole hairy (liz).avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\upfgetx ddqayq lpcu5ai3 7vepaqjm sweet .rar.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\sperm [free] eigt45 .zip.exe
%ALLUSERSPROFILE%\templates\s2fkave bd1l5ir mzwpstr8n epyxwn titts hotel .rar.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\f07qtt 7nd83wovj lpcu5ai3 uncut cock rv0y8n .rar.exe
C:\users\default\appdata\local\temp\fac71w2 8ok6yf tsomq34 apv53deiq9fw fishy (haj1oyikd,2hbt8wr).rar.exe
C:\users\default\appdata\local\<INETFILES>\gzn4ud7e 8ok6yf mnho9y54 bq4kno sweet .mpeg.exe
%ALLUSERSPROFILE%\templates\upfgetx xakmpl [milf] lzxyhb7k .avi.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\8r3baiec w6csjja14n1 horse vjq39c1gwy 779mipj .mpeg.exe
C:\users\default\templates\tsomq34 ihthd33 hole (36mho73,sarah).rar.exe
%ALLUSERSPROFILE%\microsoft\rac\temp\gzn4ud7e cum gay uncut hole sweet .zip.exe
%ALLUSERSPROFILE%\microsoft\search\data\temp\z9z7rwe xakmpl tsomq34 l9hwcs7vvnphd9 feet .avi.exe
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\f07qtt wep6b08 mnho9y54 [milf] feet fishy (dxocjwba).mpeg.exe
%ALLUSERSPROFILE%\microsoft\windows\templates\beast vjq39c1gwy (karin).mpg.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\upfgetx wep6b08 xxx [free] glans rv0y8n .avi.exe
%TEMP%\yzw1afy uncut cock .avi.exe
%LOCALAPPDATA%\<INETFILES>\z9z7rwe cum lpcu5ai3 girls boots .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\fac71w2 xakmpl sperm hot (!) glans .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\lpcu5ai3 nom72kl (c4w8hqa).zip.exe
%ALLUSERSPROFILE%\templates\z9z7rwe w6csjja14n1 nom72kl zmc8ujp .zip.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\gzn4ud7e ddqayq nom72kl apv53deiq9fw (dxocjwba).mpeg.exe
C:\users\default\appdata\local\microsoft\windows\<INETFILES>\s2fkave bd1l5ir horse 7vepaqjm (2hbt8wr).mpeg.exe
C:\users\default\appdata\local\temp\z9z7rwe 8ok6yf lpcu5ai3 ihthd33 eigt45 (hyo87il,liz).avi.exe
%APPDATA%\microsoft\templates\gzn4ud7e xakmpl horse big 6tl9zg0uqa .zip.exe
C:\users\default\appdata\local\<INETFILES>\f1i7cm ddqayq lpcu5ai3 [free] .avi.exe
%APPDATA%\microsoft\windows\templates\z9z7rwe ddqayq beast girls 8bgkvshe1 .zip.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\s2fkave horse xxx girls titts ejn547rbxhd1 .mpeg.exe
C:\users\default\appdata\roaming\microsoft\windows\templates\f07qtt 8ok6yf l9hwcs7vvnphd9 cock .zip.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\s2fkave ddqayq horse sgu4m7oc glans 8pfmdyy .rar.exe
C:\users\default\templates\yzw1afy epyxwn .mpg.exe
%HOMEPATH%\templates\upfgetx xakmpl beast hot (!) sm .mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\f07qtt ddqayq mzwpstr8n [bangbus] (y8oxsqa).mpg.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\fac71w2 wep6b08 yzw1afy sgu4m7oc hole zn3tvn (dxocjwba).zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\f1i7cm ddqayq nom72kl epyxwn qq6w54yfhtqrbwcslg .zip.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\ bq4kno (y8oxsqa).mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\z9z7rwe wep6b08 horse uncut .avi.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\upfgetx nude beast uncut 8bgkvshe1 (sonja,g6u8n4r).mpeg.exe
%TEMP%\beast sgu4m7oc (liz).mpg.exe
%WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\yzw1afy apv53deiq9fw (jade).avi.exe
%LOCALAPPDATA%\<INETFILES>\tsomq34 [free] titts boots .mpg.exe
%LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\fac71w2 horse xxx epyxwn (dxocjwba).rar.exe
%LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\yzw1afy epyxwn feet hotel .avi.exe
%LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\eq7k2xcxt horse nom72kl hot (!) feet nrb42wq (g6u8n4r).rar.exe
%APPDATA%\microsoft\templates\mzwpstr8n apv53deiq9fw hole 8pfmdyy .mpeg.exe
%APPDATA%\microsoft\windows\templates\mzwpstr8n l9hwcs7vvnphd9 .avi.exe
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\beast big gh5b6gd7wrv .mpeg.exe
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\gzn4ud7e 7nd83wovj nom72kl vjq39c1gwy (dxocjwba).avi.exe
%HOMEPATH%\templates\eq7k2xcxt xakmpl yzw1afy apv53deiq9fw cock .avi.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\mzwpstr8n girls .zip.exe
%WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\s2fkave horse sperm 7vepaqjm cock hotel .mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\fac71w2 horse beast girls sm .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\mnho9y54 l9hwcs7vvnphd9 feet zmc8ujp (2hbt8wr).mpeg.exe
%WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\s2fkave horse lpcu5ai3 hot (!) titts hairy (dxocjwba).zip.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\8r3baiec h93bklf xxx bq4kno hole sgoibhh .avi.exe
%WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\black horse lpcu5ai3 sgu4m7oc 8pfmdyy .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\s2fkave bd1l5ir gay uncut (2hbt8wr).mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\lpcu5ai3 girls .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\z9z7rwe nude nom72kl big titts 50+ .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\upfgetx xakmpl beast bq4kno feet qx2j1b5 (jade).zip.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\gzn4ud7e w6csjja14n1 mnho9y54 apv53deiq9fw (karin).mpg.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\black cum mzwpstr8n uncut glans .mpeg.exe
%WINDIR%\assembly\temp\eq7k2xcxt horse lpcu5ai3 girls (2hbt8wr).zip.exe
%WINDIR%\assembly\tmp\f07qtt wep6b08 lpcu5ai3 big titts eigt45 .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\f1i7cm w6csjja14n1 tsomq34 vjq39c1gwy young .avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\horse [bangbus] ejn547rbxhd1 .mpg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\z9z7rwe porn yzw1afy ihthd33 (karin).avi.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\xxx uncut latex .mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\fac71w2 bd1l5ir horse 7vepaqjm feet lady (sarah).mpeg.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\8r3baiec w6csjja14n1 big .avi.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\f07qtt w6csjja14n1 mzwpstr8n apv53deiq9fw cock zn3tvn .rar.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\f1i7cm horse nom72kl l9hwcs7vvnphd9 hole .mpg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\sperm bq4kno boots .mpeg.exe
%WINDIR%\pla\templates\xxx vjq39c1gwy .avi.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\beast 7vepaqjm feet (hyo87il,karin).avi.exe
%WINDIR%\assembly\temp\s2fkave porn yzw1afy epyxwn qx2j1b5 (haj1oyikd,y8oxsqa).mpg.exe
%WINDIR%\assembly\tmp\gzn4ud7e 7nd83wovj sperm [free] nrb42wq .mpg.exe
%WINDIR%\security\templates\eq7k2xcxt xakmpl epyxwn sm .mpg.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\nom72kl [milf] gsva2xn .avi.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\s2fkave 7nd83wovj horse [free] 6tl9zg0uqa .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\8r3baiec bd1l5ir yzw1afy apv53deiq9fw cock ae2sd7u4xh (2hbt8wr).avi.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\lpcu5ai3 epyxwn titts zn3tvn (sarah).zip.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\s2fkave ddqayq sperm [free] nmibe2 .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\eq7k2xcxt xakmpl horse uncut .zip.exe
%WINDIR%\syswow64\config\systemprofile\gay big titts 8bgkvshe1 .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\nom72kl [bangbus] (c4w8hqa).mpeg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\ 7vepaqjm (c4w8hqa).avi.exe
%WINDIR%\syswow64\ime\shared\fac71w2 ddqayq gay [free] titts girly (jade).avi.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\8r3baiec bd1l5ir horse sgu4m7oc zn3tvn .rar.exe
%WINDIR%\pla\templates\lpcu5ai3 uncut glans .rar.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\ nom72kl ol6p1tua .zip.exe
%WINDIR%\serviceprofiles\localservice\appdata\local\temp\mzwpstr8n apv53deiq9fw (cy4xpd).mpg.exe
%WINDIR%\syswow64\config\systemprofile\z9z7rwe 8ok6yf mzwpstr8n [free] titts 8bgkvshe1 .mpeg.exe
%WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\z9z7rwe xakmpl mzwpstr8n l9hwcs7vvnphd9 779mipj .zip.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\sperm hot (!) 779mipj .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\lpcu5ai3 [bangbus] .mpeg.exe
%WINDIR%\serviceprofiles\networkservice\appdata\local\temp\beast [bangbus] glans lady (sarah).rar.exe
%WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\beast 7vepaqjm hole .rar.exe
%WINDIR%\syswow64\fxstmp\mnho9y54 hot (!) b37oavmx289 (rdl1tfkz,y8oxsqa).zip.exe
%WINDIR%\syswow64\ime\shared\horse apv53deiq9fw .avi.exe
%WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f1i7cm xakmpl yzw1afy sgu4m7oc cock mg9fvb2xk9 .rar.exe
%WINDIR%\temp\nom72kl 7vepaqjm titts .rar.exe

Miscellaneous

Searches for the following windows

ClassName: 'Progman' WindowName: ''
ClassName: 'Proxy Desktop' WindowName: ''

Restarts the analyzed sample

Executes the following

'%WINDIR%\explorer.exe'

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial