Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.KillProc2.27609

Добавлен в вирусную базу Dr.Web: 2025-07-16

Описание добавлено:

Техническая информация

Вредоносные функции
Завершает или пытается завершить
следующие системные процессы:
  • %WINDIR%\explorer.exe
  • <SYSTEM32>\taskhost.exe
  • <SYSTEM32>\dwm.exe
следующие пользовательские процессы:
  • iexplore.exe
  • firefox.exe
Изменения в файловой системе
Создает следующие файлы
  • %WINDIR%y1s2fctrp3
  • %CommonProgramFiles%\microsoft shared\tsomq34 bd1l5ir 7vepaqjm legs qq6w54yfhtqrbwcslg (sarah).mpg.exe
  • %ProgramFiles%\dvd maker\shared\beast [milf] (jade,g6u8n4r).zip.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wpjwijv porn sgu4m7oc .mpg.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\8ok6yf [bangbus] .zip.exe
  • %ProgramFiles%\microsoft office\office14\groove\xml files\space templates\z9z7rwe horse yzw1afy ihthd33 .mpeg.exe
  • %ProgramFiles%\microsoft office\templates\7b6fhxi cum hot (!) jxqgtp .avi.exe
  • %ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\8r3baiec 8ok6yf xakmpl girls (c4w8hqa,c4w8hqa).mpeg.exe
  • %ProgramFiles%\windows journal\templates\z1qxwcd gay hot (!) (c4w8hqa).rar.exe
  • %ProgramFiles%\windows sidebar\shared gadgets\gzn4ud7e 8ok6yf big fishy .rar.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\7nd83wovj ddqayq nom72kl nmibe2 (2hbt8wr,dehod0).rar.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\fac71w2 mzwpstr8n ihthd33 wifey .mpg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\jxaglwti nom72kl nom72kl nrb42wq .zip.exe
  • %CommonProgramFiles(x86)%\microsoft shared\f07qtt sperm ddqayq [milf] balls .mpg.exe
  • %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\upfgetx mnho9y54 porn epyxwn b37oavmx289 .mpeg.exe
  • %ProgramFiles(x86)%\windows sidebar\shared gadgets\beast ihthd33 lady (y8oxsqa).zip.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\horse bd1l5ir [milf] gsva2xn (rdl1tfkz).mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\w6csjja14n1 tsomq34 hot (!) .avi.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\4h1e2a346 horse 7vepaqjm .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\xakmpl [free] boots .zip.exe
  • %ALLUSERSPROFILE%\templates\gay 7vepaqjm lady .mpg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\s2fkave mzwpstr8n [free] shoes (haj1oyikd).rar.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\horse big .zip.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\7b6fhxi apv53deiq9fw .rar.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\ddqayq girls boobs girly .zip.exe
  • %ALLUSERSPROFILE%\templates\mzwpstr8n [free] (cy4xpd).mpeg.exe
  • C:\users\default\appdata\local\microsoft\windows\<INETFILES>\7b6fhxi cum ddqayq [milf] .mpeg.exe
  • C:\users\default\appdata\local\temp\nude mzwpstr8n [free] kfp2yqq js80j73 .mpg.exe
  • C:\users\default\appdata\local\<INETFILES>\black nude h93bklf [free] ae2sd7u4xh .zip.exe
  • C:\users\default\appdata\roaming\microsoft\windows\templates\viaz50 tsomq34 girls boobs wifey (gina).zip.exe
  • C:\users\default\templates\ikdyfwhy mzwpstr8n [free] .avi.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\s2fkave yzw1afy nom72kl [bangbus] sweet .avi.exe
  • %TEMP%\nude horse [milf] boots .avi.exe
  • %LOCALAPPDATA%\<INETFILES>\s2fkave horse yzw1afy epyxwn cock zmc8ujp .avi.exe
  • %LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\h93bklf 7vepaqjm boots (dehod0,hyo87il).avi.exe
  • %LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\gzn4ud7e lpcu5ai3 uncut .rar.exe
  • %LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\w6csjja14n1 mnho9y54 apv53deiq9fw jxqgtp .mpg.exe
  • %APPDATA%\microsoft\templates\mzwpstr8n bd1l5ir [bangbus] sweet .mpeg.exe
  • %APPDATA%\microsoft\windows\templates\zc8giv9 xakmpl vjq39c1gwy shoes .mpg.exe
  • %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\porn nom72kl ejn547rbxhd1 (jade,c4w8hqa).mpg.exe
  • %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\f1i7cm lpcu5ai3 [milf] zn3tvn .zip.exe
  • %HOMEPATH%\templates\sperm apv53deiq9fw latex (haj1oyikd,36mho73).mpg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\xakmpl big ol6p1tua .zip.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\xakmpl vjq39c1gwy eigt45 .rar.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\ikdyfwhy wep6b08 mzwpstr8n nom72kl zmc8ujp .zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\bd1l5ir 7vepaqjm .rar.exe
  • %WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\wep6b08 porn vjq39c1gwy cock .mpeg.exe
  • %WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\s2fkave nom72kl hot (!) .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\zc8giv9 8ok6yf nude uncut (haj1oyikd,sonja).zip.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\mzwpstr8n hot (!) .zip.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\zc8giv9 cum tsomq34 vjq39c1gwy 779mipj .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\8r3baiec cum hot (!) balls .mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\4h1e2a346 h93bklf yzw1afy vjq39c1gwy gsva2xn (dxocjwba,gina).zip.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\f07qtt lpcu5ai3 beast uncut hole girly .avi.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\jxaglwti horse ihthd33 js80j73 .rar.exe
  • %WINDIR%\assembly\temp\z9z7rwe nude mnho9y54 [free] 6tl9zg0uqa .zip.exe
  • %WINDIR%\assembly\tmp\ikdyfwhy tsomq34 [milf] fishy (sarah,sarah).mpeg.exe
  • %WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\8r3baiec ddqayq big ash qq6w54yfhtqrbwcslg .rar.exe
  • %WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\horse [milf] .rar.exe
  • %WINDIR%\pla\templates\fac71w2 horse vjq39c1gwy boobs mg9fvb2xk9 .rar.exe
  • %WINDIR%\security\templates\black ddqayq sperm l9hwcs7vvnphd9 .mpeg.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\4h1e2a346 xakmpl beast uncut zn3tvn .zip.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\nom72kl [milf] js80j73 (cy4xpd,jenna).avi.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\ikdyfwhy horse epyxwn gh5b6gd7wrv .mpg.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\temp\horse [bangbus] sgoibhh .zip.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\bd1l5ir l9hwcs7vvnphd9 kfp2yqq b37oavmx289 (haj1oyikd,g6u8n4r).avi.exe
  • %WINDIR%\syswow64\config\systemprofile\f07qtt 8ok6yf apv53deiq9fw b37oavmx289 .mpg.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\viaz50 mzwpstr8n [milf] lzxyhb7k .mpg.exe
  • %WINDIR%\syswow64\fxstmp\eq7k2xcxt porn horse uncut js80j73 .mpg.exe
  • %WINDIR%\syswow64\ime\shared\asian wep6b08 nude [free] titts hotel (sarah).mpeg.exe
  • %WINDIR%\syswow64\config\systemprofile\w6csjja14n1 nom72kl l9hwcs7vvnphd9 hole .avi.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\8r3baiec mnho9y54 beast bq4kno glans zmc8ujp .rar.exe
  • %WINDIR%\syswow64\fxstmp\wpjwijv h93bklf sgu4m7oc .rar.exe
  • %WINDIR%\syswow64\ime\shared\wpjwijv sperm hot (!) .mpeg.exe
  • %WINDIR%\temp\4h1e2a346 wep6b08 vjq39c1gwy glans lady .mpg.exe
  • %WINDIR%\winsxs\installtemp\s2fkave xakmpl hot (!) 779mipj .avi.exe
  • <Текущая директория>\sqjaed7r1vnw
  • %CommonProgramFiles%\microsoft shared\horse uncut cock (hyo87il,dxocjwba).avi.exe
  • %CommonProgramFiles%\microsoft shared\nom72kl l9hwcs7vvnphd9 hole ae2sd7u4xh (g6u8n4r).rar.exe
  • %ProgramFiles%\dvd maker\shared\sperm uncut lady (sonja,dxocjwba).avi.exe
  • %ProgramFiles%\dvd maker\shared\upfgetx h93bklf sperm sgu4m7oc lzxyhb7k .avi.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\xxx apv53deiq9fw mg9fvb2xk9 .zip.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\h93bklf gay l9hwcs7vvnphd9 zn3tvn .mpeg.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\nom72kl l9hwcs7vvnphd9 (jade).mpeg.exe
  • %ProgramFiles%\microsoft office\office14\groove\xml files\space templates\nom72kl hot (!) (g6u8n4r).mpeg.exe
  • %ProgramFiles%\microsoft office\templates\8r3baiec 8ok6yf mzwpstr8n [bangbus] hole nmibe2 .mpeg.exe
  • %ProgramFiles%\microsoft office\office14\groove\xml files\space templates\upfgetx porn lpcu5ai3 uncut ae2sd7u4xh .rar.exe
  • %ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\f07qtt w6csjja14n1 sperm bq4kno feet ol6p1tua .mpeg.exe
  • %ProgramFiles%\microsoft office\templates\gay apv53deiq9fw .mpeg.exe
  • %ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\f1i7cm wep6b08 xxx epyxwn (cy4xpd).avi.exe
  • %ProgramFiles%\windows journal\templates\upfgetx wep6b08 apv53deiq9fw glans 8pfmdyy (karin).mpg.exe
  • %ProgramFiles%\windows journal\templates\eq7k2xcxt 8ok6yf [bangbus] mg9fvb2xk9 (sonja,2hbt8wr).rar.exe
  • %ProgramFiles%\windows sidebar\shared gadgets\gzn4ud7e xakmpl mnho9y54 l9hwcs7vvnphd9 lady .rar.exe
  • %ProgramFiles%\windows sidebar\shared gadgets\ girls feet .avi.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\sperm [free] (cy4xpd).mpg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\f1i7cm ddqayq xxx girls .zip.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\fac71w2 h93bklf beast bq4kno titts .zip.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\mnho9y54 uncut (jade).mpeg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\eq7k2xcxt porn xxx apv53deiq9fw hairy (haj1oyikd,liz).mpg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\eq7k2xcxt bd1l5ir epyxwn ol6p1tua .rar.exe
  • %CommonProgramFiles(x86)%\microsoft shared\8r3baiec 7nd83wovj lpcu5ai3 uncut cock ash .mpeg.exe
  • %CommonProgramFiles(x86)%\microsoft shared\z9z7rwe horse lpcu5ai3 ihthd33 sgoibhh .mpg.exe
  • %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\upfgetx h93bklf xxx apv53deiq9fw hole .rar.exe
  • %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\black 8ok6yf beast 7vepaqjm (cy4xpd).rar.exe
  • %ProgramFiles(x86)%\windows sidebar\shared gadgets\8r3baiec bd1l5ir horse l9hwcs7vvnphd9 glans .avi.exe
  • %ProgramFiles(x86)%\windows sidebar\shared gadgets\gay nom72kl glans 40+ .zip.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\8r3baiec 8ok6yf mnho9y54 nom72kl .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\upfgetx wep6b08 lpcu5ai3 ihthd33 .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\s2fkave ddqayq gay [milf] titts .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\ apv53deiq9fw glans js80j73 .avi.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\gzn4ud7e horse mzwpstr8n [bangbus] (cy4xpd).avi.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\f07qtt w6csjja14n1 sperm sgu4m7oc glans zmc8ujp .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\sperm ihthd33 .rar.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\z9z7rwe horse gay [bangbus] hole gsva2xn .rar.exe
  • %ALLUSERSPROFILE%\templates\ big fishy .zip.exe
  • %ALLUSERSPROFILE%\templates\f07qtt wep6b08 mnho9y54 sgu4m7oc (liz).mpg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\lpcu5ai3 bq4kno rv0y8n .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\fac71w2 xakmpl gay 7vepaqjm hotel (36mho73,cy4xpd).zip.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\sperm epyxwn feet ae2sd7u4xh .zip.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\8r3baiec w6csjja14n1 bq4kno rv0y8n .zip.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\yzw1afy epyxwn titts 6tl9zg0uqa .rar.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\upfgetx horse lpcu5ai3 sgu4m7oc cock latex .rar.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\z9z7rwe 8ok6yf beast epyxwn titts rv0y8n .zip.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\tsomq34 ihthd33 glans sgoibhh (liz).avi.exe
  • %ALLUSERSPROFILE%\templates\horse uncut titts lzxyhb7k .mpg.exe
  • C:\users\default\appdata\local\microsoft\windows\<INETFILES>\nom72kl hot (!) nrb42wq (sonja,c4w8hqa).mpeg.exe
  • C:\users\default\appdata\local\temp\s2fkave wep6b08 tsomq34 uncut .mpg.exe
  • %ALLUSERSPROFILE%\templates\tsomq34 sgu4m7oc cock fw58kpr41ob1w .avi.exe
  • C:\users\default\appdata\local\microsoft\windows\<INETFILES>\f07qtt 7nd83wovj beast vjq39c1gwy feet .mpeg.exe
  • C:\users\default\appdata\local\<INETFILES>\eq7k2xcxt cum [milf] cock ejn547rbxhd1 (g6u8n4r).mpeg.exe
  • C:\users\default\appdata\local\temp\f07qtt horse big hole lzxyhb7k (dxocjwba).avi.exe
  • C:\users\default\appdata\roaming\microsoft\windows\templates\lpcu5ai3 ihthd33 feet .rar.exe
  • C:\users\default\appdata\local\<INETFILES>\s2fkave nude horse [free] (dxocjwba).rar.exe
  • C:\users\default\templates\s2fkave w6csjja14n1 lpcu5ai3 [bangbus] .avi.exe
  • C:\users\default\appdata\roaming\microsoft\windows\templates\tsomq34 epyxwn 779mipj .zip.exe
  • C:\users\default\templates\f1i7cm horse yzw1afy bq4kno boots .avi.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\ apv53deiq9fw ol6p1tua .zip.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\nom72kl [bangbus] titts .zip.exe
  • %TEMP%\gay girls cock gh5b6gd7wrv (sarah).zip.exe
  • %TEMP%\beast [bangbus] ol6p1tua .mpeg.exe
  • %LOCALAPPDATA%\<INETFILES>\f07qtt porn l9hwcs7vvnphd9 fw58kpr41ob1w .zip.exe
  • %LOCALAPPDATA%\<INETFILES>\xxx apv53deiq9fw titts ae2sd7u4xh .rar.exe
  • %LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\z9z7rwe bd1l5ir gay 7vepaqjm 6tl9zg0uqa .avi.exe
  • %LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\gay big 6tl9zg0uqa .avi.exe
  • %LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\f1i7cm w6csjja14n1 gay apv53deiq9fw sweet (haj1oyikd,g6u8n4r).mpeg.exe
  • %LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\beast [bangbus] .rar.exe
  • %LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\eq7k2xcxt xakmpl nom72kl ihthd33 titts .zip.exe
  • %APPDATA%\microsoft\templates\xxx hot (!) ae2sd7u4xh .mpeg.exe
  • %APPDATA%\microsoft\templates\gay [free] .rar.exe
  • %APPDATA%\microsoft\windows\templates\yzw1afy girls .mpeg.exe
  • %APPDATA%\microsoft\windows\templates\upfgetx horse mnho9y54 uncut feet ejn547rbxhd1 .zip.exe
  • %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\8r3baiec cum sperm apv53deiq9fw hairy .rar.exe
  • %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\mnho9y54 bq4kno glans ash (jade).mpeg.exe
  • %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\upfgetx ddqayq xxx [bangbus] .zip.exe
  • %HOMEPATH%\templates\8r3baiec wep6b08 sperm hot (!) wifey .rar.exe
  • %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\eq7k2xcxt bd1l5ir yzw1afy [milf] glans zmc8ujp (c4w8hqa).avi.exe
  • %HOMEPATH%\templates\fac71w2 8ok6yf sperm l9hwcs7vvnphd9 .avi.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\eq7k2xcxt wep6b08 yzw1afy [free] (y8oxsqa).mpg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\upfgetx porn xxx uncut (liz).mpg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\z9z7rwe nude xxx l9hwcs7vvnphd9 wifey .avi.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\lpcu5ai3 ihthd33 cock ejn547rbxhd1 .mpg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\f1i7cm 7nd83wovj mzwpstr8n sgu4m7oc 6tl9zg0uqa .mpeg.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\upfgetx wep6b08 gay bq4kno titts .mpeg.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\s2fkave ddqayq yzw1afy sgu4m7oc (liz).zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\nom72kl nom72kl cock .mpg.exe
  • %WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\mnho9y54 [free] glans .zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\gzn4ud7e 8ok6yf horse big ash .avi.exe
  • %WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\f1i7cm h93bklf tsomq34 l9hwcs7vvnphd9 .mpg.exe
  • %WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\mzwpstr8n vjq39c1gwy sgoibhh .mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\tsomq34 vjq39c1gwy titts zmc8ujp .avi.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\yzw1afy uncut .mpeg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\tsomq34 uncut cock .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\mnho9y54 girls .mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\black 8ok6yf mnho9y54 [bangbus] eigt45 .mpeg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\mzwpstr8n [free] lzxyhb7k .mpeg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\upfgetx 8ok6yf lpcu5ai3 apv53deiq9fw .rar.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\xxx apv53deiq9fw cock b37oavmx289 .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\f07qtt 8ok6yf xxx girls cock fw58kpr41ob1w (y8oxsqa).mpeg.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\mzwpstr8n ihthd33 latex .zip.exe
  • %WINDIR%\assembly\temp\upfgetx cum sperm girls (cy4xpd).mpg.exe
  • %WINDIR%\assembly\tmp\f07qtt w6csjja14n1 horse bq4kno fw58kpr41ob1w (jenna,y8oxsqa).mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\gay nom72kl 50+ .avi.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\black 8ok6yf tsomq34 epyxwn (g6u8n4r).rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\ sgu4m7oc titts wifey (sarah).avi.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\z9z7rwe nude sperm girls hole .zip.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\mnho9y54 [bangbus] .mpeg.exe
  • %WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\8r3baiec w6csjja14n1 lpcu5ai3 7vepaqjm lady .zip.exe
  • %WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\eq7k2xcxt porn beast uncut (g6u8n4r).zip.exe
  • %WINDIR%\pla\templates\8r3baiec wep6b08 lpcu5ai3 nom72kl shoes .mpg.exe
  • %WINDIR%\security\templates\8r3baiec bd1l5ir uncut (cy4xpd).rar.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\black 8ok6yf nom72kl girls .zip.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\local\temp\lpcu5ai3 7vepaqjm glans fishy (y8oxsqa).mpeg.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\nom72kl bq4kno feet lzxyhb7k .rar.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\f1i7cm w6csjja14n1 lpcu5ai3 uncut sweet .rar.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\temp\nom72kl 7vepaqjm feet (hyo87il,jade).zip.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\f1i7cm wep6b08 beast 7vepaqjm feet young (karin).mpg.exe
  • %WINDIR%\syswow64\config\systemprofile\fac71w2 w6csjja14n1 nom72kl hot (!) cock .rar.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\sperm uncut glans gsva2xn .mpg.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\f1i7cm xakmpl horse nom72kl .mpeg.exe
  • %WINDIR%\assembly\temp\black xakmpl nom72kl girls .mpg.exe
  • %WINDIR%\assembly\tmp\ ihthd33 (g6u8n4r).mpg.exe
  • %WINDIR%\syswow64\fxstmp\xakmpl ihthd33 hotel .mpg.exe
  • %WINDIR%\syswow64\ime\shared\gzn4ud7e h93bklf lpcu5ai3 l9hwcs7vvnphd9 .mpg.exe
  • %WINDIR%\syswow64\config\systemprofile\f1i7cm xakmpl xxx hot (!) .avi.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\f1i7cm xakmpl mzwpstr8n big girly (gina,cy4xpd).avi.exe
  • %WINDIR%\syswow64\fxstmp\f07qtt nude gay vjq39c1gwy qq6w54yfhtqrbwcslg .mpg.exe
  • %WINDIR%\microsoft.net\framework\v4.0.30319\temporary asp.net files\ l9hwcs7vvnphd9 sgoibhh .mpg.exe
  • %WINDIR%\microsoft.net\framework64\v4.0.30319\temporary asp.net files\z9z7rwe horse lpcu5ai3 [free] qx2j1b5 .zip.exe
  • %WINDIR%\syswow64\ime\shared\yzw1afy [free] (jade).avi.exe
  • %WINDIR%\pla\templates\eq7k2xcxt nude nom72kl ihthd33 6tl9zg0uqa .mpeg.exe
  • %WINDIR%\security\templates\gzn4ud7e wep6b08 horse [milf] hole 779mipj .avi.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\local\microsoft\windows\<INETFILES>\8r3baiec nude yzw1afy hot (!) sweet .avi.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\local\temp\z9z7rwe bd1l5ir lpcu5ai3 sgu4m7oc lzxyhb7k .rar.exe
  • %WINDIR%\serviceprofiles\localservice\appdata\roaming\microsoft\windows\templates\gzn4ud7e 7nd83wovj epyxwn glans fishy .rar.exe
  • %WINDIR%\temp\gzn4ud7e ddqayq uncut (sarah).mpg.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\microsoft\windows\<INETFILES>\8r3baiec wep6b08 mzwpstr8n bq4kno .mpg.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\local\temp\fac71w2 7nd83wovj gay [free] glans .rar.exe
  • %WINDIR%\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\templates\8r3baiec wep6b08 nom72kl [milf] 779mipj .rar.exe
  • %WINDIR%\syswow64\config\systemprofile\upfgetx xakmpl mnho9y54 ihthd33 titts balls (karin).rar.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\z9z7rwe 8ok6yf beast epyxwn titts 779mipj (liz).avi.exe
  • %WINDIR%\syswow64\fxstmp\7nd83wovj gay bq4kno (liz).avi.exe
  • %WINDIR%\syswow64\ime\shared\mnho9y54 apv53deiq9fw rv0y8n .mpeg.exe
  • %WINDIR%\syswow64\config\systemprofile\mnho9y54 girls 50+ .avi.exe
  • %WINDIR%\syswow64\config\systemprofile\appdata\local\microsoft\windows\<INETFILES>\beast [free] fishy .mpg.exe
  • %WINDIR%\syswow64\ime\shared\yzw1afy [bangbus] hotel .zip.exe
  • %WINDIR%\temp\mzwpstr8n [milf] ol6p1tua .rar.exe
  • %WINDIR%\winsxs\installtemp\viaz50 yzw1afy vjq39c1gwy .zip.exe
  • %WINDIR%\winsxs\installtemp\8ok6yf gay ihthd33 .rar.exe
  • %CommonProgramFiles%\microsoft shared\asian sperm cum l9hwcs7vvnphd9 js80j73 .zip.exe
  • %CommonProgramFiles%\microsoft shared\zc8giv9 lpcu5ai3 mzwpstr8n [milf] ae2sd7u4xh (c4w8hqa,liz).mpg.exe
  • %ProgramFiles%\dvd maker\shared\z9z7rwe mnho9y54 ihthd33 young (cy4xpd,jade).mpeg.exe
  • %ProgramFiles%\dvd maker\shared\xakmpl l9hwcs7vvnphd9 titts 6tl9zg0uqa .mpg.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\wpjwijv xakmpl l9hwcs7vvnphd9 titts (hyo87il,haj1oyikd).rar.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\z9z7rwe yzw1afy 7nd83wovj 7vepaqjm 8bgkvshe1 .mpg.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\xxx xxx 7vepaqjm js80j73 .mpg.exe
  • %ProgramFiles%\microsoft office\office14\groove\xml files\space templates\ddqayq epyxwn 8pfmdyy .avi.exe
  • %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\cum uncut kfp2yqq .zip.exe
  • %ProgramFiles%\microsoft office\templates\0287zh mnho9y54 bq4kno (dehod0,sonja).avi.exe
  • %ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\upfgetx horse 7vepaqjm mg9fvb2xk9 .mpeg.exe
  • %ProgramFiles%\microsoft office\office14\groove\xml files\space templates\nude lpcu5ai3 vjq39c1gwy 8pfmdyy .rar.exe
  • %ProgramFiles%\microsoft office\templates\8r3baiec mnho9y54 w6csjja14n1 sgu4m7oc .avi.exe
  • %ProgramFiles%\windows journal\templates\yzw1afy wep6b08 uncut wifey .mpeg.exe
  • %ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\s2fkave nom72kl uncut .zip.exe
  • %ProgramFiles%\windows journal\templates\jxaglwti xakmpl mzwpstr8n sgu4m7oc .zip.exe
  • %ProgramFiles%\windows sidebar\shared gadgets\4h1e2a346 cum beast girls shoes .mpeg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\7nd83wovj nom72kl (liz).avi.exe
  • %ProgramFiles%\windows sidebar\shared gadgets\wpjwijv nude ihthd33 .avi.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\ddqayq big (dehod0,jenna).mpg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\black w6csjja14n1 bq4kno js80j73 (karin,sonja).rar.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files\horse wep6b08 nom72kl .mpg.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\wep6b08 sperm vjq39c1gwy kfp2yqq (sonja,rdl1tfkz).rar.exe
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\my-sharepoint-files-select\asian yzw1afy bd1l5ir [milf] gsva2xn .mpg.exe
  • %CommonProgramFiles(x86)%\microsoft shared\upfgetx w6csjja14n1 [free] (cy4xpd,cy4xpd).zip.exe
  • %CommonProgramFiles(x86)%\microsoft shared\nude [bangbus] legs gh5b6gd7wrv (36mho73).mpeg.exe
  • %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\0287zh nude horse girls .zip.exe
  • %ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\4h1e2a346 mzwpstr8n gay nom72kl fw58kpr41ob1w .rar.exe
  • %ProgramFiles(x86)%\windows sidebar\shared gadgets\asian h93bklf beast l9hwcs7vvnphd9 ash (dxocjwba).rar.exe
  • %ProgramFiles(x86)%\windows sidebar\shared gadgets\tsomq34 h93bklf nom72kl js80j73 (sonja,c4w8hqa).rar.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\nude big wifey .mpg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\mzwpstr8n yzw1afy [milf] latex .avi.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\porn uncut jxqgtp (sandy,2hbt8wr).avi.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\nude nom72kl .rar.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\jxaglwti 8ok6yf [free] .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\lpcu5ai3 vjq39c1gwy .zip.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\4h1e2a346 w6csjja14n1 ihthd33 50+ .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\8r3baiec cum tsomq34 epyxwn .zip.exe
  • %ALLUSERSPROFILE%\templates\0287zh xxx sgu4m7oc .avi.exe
  • %ALLUSERSPROFILE%\templates\cum ddqayq big glans .mpg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\upfgetx mzwpstr8n beast big rv0y8n .zip.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\upfgetx tsomq34 ddqayq uncut kfp2yqq .mpg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\gay girls ejn547rbxhd1 .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\rac\temp\zc8giv9 w6csjja14n1 cum [bangbus] qx2j1b5 .mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\xakmpl ihthd33 fw58kpr41ob1w .mpg.exe
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\z1qxwcd nude vjq39c1gwy ash .zip.exe
  • %ALLUSERSPROFILE%\templates\zc8giv9 nude big rv0y8n (dxocjwba).mpeg.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sharepoint\8r3baiec wep6b08 tsomq34 bq4kno fw58kpr41ob1w .avi.exe
  • C:\users\default\appdata\local\microsoft\windows\<INETFILES>\porn vjq39c1gwy (2hbt8wr).mpeg.exe
  • C:\users\default\appdata\local\temp\tsomq34 girls young .avi.exe
  • %ALLUSERSPROFILE%\microsoft\windows\templates\wep6b08 xakmpl sgu4m7oc jxqgtp latex (g6u8n4r,liz).mpeg.exe
  • C:\users\default\appdata\local\<INETFILES>\nude girls js80j73 (y8oxsqa,cy4xpd).rar.exe
  • C:\users\default\appdata\roaming\microsoft\windows\templates\zc8giv9 bd1l5ir bd1l5ir big 40+ .mpg.exe
  • %ALLUSERSPROFILE%\templates\ bq4kno boobs .mpeg.exe
  • C:\users\default\appdata\local\microsoft\windows\<INETFILES>\4h1e2a346 tsomq34 7vepaqjm balls .rar.exe
  • C:\users\default\templates\black ddqayq 8ok6yf hot (!) .mpeg.exe
  • C:\users\default\appdata\local\temp\f1i7cm 7vepaqjm feet qx2j1b5 .avi.exe
  • C:\users\default\appdata\local\<INETFILES>\gzn4ud7e lpcu5ai3 hot (!) glans ejn547rbxhd1 .rar.exe
  • C:\users\default\appdata\roaming\microsoft\windows\templates\black l9hwcs7vvnphd9 hole (liz,2hbt8wr).mpg.exe
  • C:\users\default\templates\nude xxx ihthd33 6tl9zg0uqa .zip.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\4h1e2a346 mnho9y54 bd1l5ir [bangbus] boobs .mpg.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\ikdyfwhy lpcu5ai3 ddqayq l9hwcs7vvnphd9 .avi.exe
  • %TEMP%\fac71w2 beast [milf] mg9fvb2xk9 .avi.exe
  • %TEMP%\beast girls sm (jade,dehod0).mpeg.exe
  • %LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\black horse ihthd33 (dehod0,2hbt8wr).avi.exe
  • %LOCALAPPDATA%\<INETFILES>\0287zh bd1l5ir yzw1afy uncut sgoibhh .mpg.exe
  • %LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\fac71w2 xxx uncut nrb42wq (hyo87il,sonja).mpeg.exe
  • %LOCALAPPDATA%low\mozilla\temp-{070abd97-84e1-4f5f-9c02-f1d76dd9fce4}\yzw1afy ddqayq hot (!) latex (36mho73).zip.exe
  • %LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\8ok6yf horse epyxwn rv0y8n .rar.exe
  • %LOCALAPPDATA%low\mozilla\temp-{1fae114c-c2b0-4da1-b23a-8e5ad0c3d722}\nom72kl sperm girls boots .mpg.exe
  • %LOCALAPPDATA%low\mozilla\temp-{3571406e-c08c-4c74-b145-8857b365f6e7}\nom72kl ddqayq uncut boobs hotel (c4w8hqa,y8oxsqa).rar.exe
  • %APPDATA%\microsoft\templates\zc8giv9 tsomq34 uncut .zip.exe
  • %APPDATA%\microsoft\windows\templates\z9z7rwe porn nom72kl uncut fishy .zip.exe
  • %APPDATA%\microsoft\windows\templates\s2fkave sperm girls mg9fvb2xk9 .avi.exe
  • %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\zc8giv9 cum beast uncut hotel .mpg.exe
  • %APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\storage\temporary\0287zh bd1l5ir [bangbus] jxqgtp .avi.exe
  • %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\wpjwijv 7nd83wovj mzwpstr8n bq4kno lady (y8oxsqa,haj1oyikd).avi.exe
  • %APPDATA%\thunderbird\profiles\chdgbv82.default-release\storage\temporary\eq7k2xcxt porn horse uncut qq6w54yfhtqrbwcslg .zip.exe
  • %HOMEPATH%\templates\0287zh tsomq34 lpcu5ai3 bq4kno boobs .mpg.exe
  • %HOMEPATH%\templates\lpcu5ai3 bd1l5ir l9hwcs7vvnphd9 js80j73 .rar.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\zc8giv9 nom72kl big girly .zip.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\4h1e2a346 gay ihthd33 ash girly .mpeg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor\z9z7rwe porn sgu4m7oc .mpeg.exe
  • %WINDIR%\assembly\gac_32\microsoft.grouppolicy.admtmpleditor.resources\cum [bangbus] feet hotel .zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\asian ddqayq l9hwcs7vvnphd9 eigt45 .avi.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\s2fkave horse uncut legs .mpg.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor\fac71w2 beast uncut kfp2yqq (karin,hyo87il).zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.grouppolicy.admtmpleditor.resources\mzwpstr8n beast [free] sgoibhh .mpg.exe
  • %WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\horse xxx apv53deiq9fw .zip.exe
  • %WINDIR%\assembly\gac_64\microsoft.sharepoint.businessdata.administration.client\lpcu5ai3 mnho9y54 nom72kl boots .mpeg.exe
  • %WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\yzw1afy beast [milf] (gina,rdl1tfkz).zip.exe
  • %WINDIR%\assembly\gac_msil\microsoft.sharepoint.businessdata.administration.client.intl\7nd83wovj nom72kl l9hwcs7vvnphd9 rv0y8n .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\mzwpstr8n beast vjq39c1gwy .zip.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\ikdyfwhy cum l9hwcs7vvnphd9 .zip.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\eq7k2xcxt h93bklf 8ok6yf [milf] 40+ .rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_32\temp\zap9e41.tmp\wpjwijv cum vjq39c1gwy qx2j1b5 .avi.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\z9z7rwe horse [milf] .zip.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\s2fkave h93bklf xakmpl big (sarah,liz).mpeg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\beast lpcu5ai3 epyxwn ash qx2j1b5 .mpeg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\wep6b08 vjq39c1gwy .mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\eq7k2xcxt h93bklf [milf] cock mg9fvb2xk9 (jade,sarah).mpg.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zap6b8e.tmp\s2fkave cum nom72kl legs latex .avi.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape291.tmp\asian lpcu5ai3 w6csjja14n1 [milf] cock latex (y8oxsqa,2hbt8wr).rar.exe
  • %WINDIR%\assembly\nativeimages_v2.0.50727_64\temp\zape56e.tmp\bd1l5ir nom72kl jxqgtp eigt45 .mpeg.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\7nd83wovj wep6b08 big 6tl9zg0uqa (liz,2hbt8wr).rar.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_32\temp\nude bq4kno mg9fvb2xk9 (sarah,2hbt8wr).mpeg.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\zc8giv9 7nd83wovj ihthd33 ejn547rbxhd1 .rar.exe
  • %WINDIR%\assembly\nativeimages_v4.0.30319_64\temp\black 8ok6yf uncut glans latex .mpg.exe
  • %WINDIR%\assembly\temp\z1qxwcd cum nom72kl [free] .rar.exe
  • %WINDIR%\assembly\temp\z1qxwcd sperm nom72kl .rar.exe
  • %WINDIR%\assembly\tmp\black cum bd1l5ir bq4kno 6tl9zg0uqa (cy4xpd,g6u8n4r).avi.exe
  • %WINDIR%\assembly\tmp\horse horse sgu4m7oc ejn547rbxhd1 (karin,2hbt8wr).zip.exe
Другое
Ищет следующие окна
  • ClassName: 'Progman' WindowName: ''
  • ClassName: 'Proxy Desktop' WindowName: ''
Перезапускает анализируемый образец
Запускает на исполнение
  • '%WINDIR%\explorer.exe'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке