Защити созданное

Другие наши ресурсы

  • free.drweb.kz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.kz — сетевая лечащая утилита Dr.Web CureNet!
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поддержка
Круглосуточная поддержка | Правила обращения

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Rmnet.162

Добавлен в вирусную базу Dr.Web: 2026-05-16

Описание добавлено:

Technical Information

To ensure autorun and distribution
Modifies master boot record (MBR).
Malicious functions
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Task Manager (Taskmgr)
adds antivirus exclusion:
  • '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "Add-MpPreference -ExclusionPath "%TEMP%\tmplblkymth.exe""
  • '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "Add-MpPreference -ExclusionProcess "tmplblkymth.exe""
Executes the following
  • '<SYSTEM32>\taskkill.exe' /f /im taskmgr.exe
Launches a large number of processes
Patches code
in NTDLL dll
  • desktoplayer.exe process, ntdll.dll module
Reads files which store third party applications passwords
  • %HOMEPATH%\desktop\troll_message_1.html
  • %HOMEPATH%\desktop\troll_message_2.html
  • %HOMEPATH%\desktop\troll_message_3.html
  • %HOMEPATH%\desktop\troll_message_4.html
  • %HOMEPATH%\desktop\troll_message_5.html
  • %HOMEPATH%\desktop\troll_message_6.html
  • %HOMEPATH%\desktop\troll_message_7.html
  • %HOMEPATH%\desktop\troll_message_8.html
  • %HOMEPATH%\desktop\troll_message_9.html
  • %HOMEPATH%\desktop\troll_message_10.html
  • %HOMEPATH%\desktop\troll_message_11.html
  • %HOMEPATH%\desktop\troll_message_12.html
Modifies file system
Creates the following files
  • %TEMP%\_mei14762\vcruntime140.dll
  • %TEMP%\_mei14762\_bz2.pyd
  • %TEMP%\_mei14762\_decimal.pyd
  • %TEMP%\_mei14762\_hashlib.pyd
  • %TEMP%\_mei14762\_lzma.pyd
  • %TEMP%\_mei14762\_socket.pyd
  • %TEMP%\_mei14762\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei14762\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei14762\base_library.zip
  • %TEMP%\_mei14762\libcrypto-1_1.dll
  • %TEMP%\_mei14762\python310.dll
  • %TEMP%\_mei14762\select.pyd
  • %TEMP%\_mei14762\ucrtbase.dll
  • %TEMP%\_mei14762\unicodedata.pyd
  • %TEMP%\dwvb8j8c
  • %TEMP%\tmpa_cc1r02.exe
  • %TEMP%\_mei21162\vcruntime140.dll
  • %TEMP%\_mei21162\_bz2.pyd
  • %TEMP%\_mei21162\_ctypes.pyd
  • %TEMP%\_mei21162\_decimal.pyd
  • %TEMP%\_mei21162\_hashlib.pyd
  • %TEMP%\_mei21162\_lzma.pyd
  • %TEMP%\_mei21162\_socket.pyd
  • %TEMP%\_mei21162\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei21162\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei21162\base_library.zip
  • %TEMP%\_mei21162\libcrypto-1_1.dll
  • %TEMP%\_mei21162\libffi-7.dll
  • %TEMP%\_mei21162\python310.dll
  • %TEMP%\_mei21162\select.pyd
  • %TEMP%\_mei21162\ucrtbase.dll
  • %TEMP%\_mei21162\unicodedata.pyd
  • %TEMP%\tmp11so44j9.exe
  • %TEMP%\_mei24242\vcruntime140.dll
  • %TEMP%\_mei24242\_bz2.pyd
  • %TEMP%\_mei24242\_decimal.pyd
  • %TEMP%\_mei24242\_hashlib.pyd
  • %TEMP%\_mei24242\_lzma.pyd
  • %TEMP%\_mei24242\_socket.pyd
  • %TEMP%\_mei24242\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei24242\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei24242\base_library.zip
  • %TEMP%\hy_uoo37
  • %TEMP%\block.vbs
  • %TEMP%\_mei24242\libcrypto-1_1.dll
  • %TEMP%\_mei24242\python310.dll
  • %TEMP%\_mei24242\select.pyd
  • %TEMP%\_mei24242\ucrtbase.dll
  • %TEMP%\_mei24242\unicodedata.pyd
  • %TEMP%\logw9kau
  • %TEMP%\tmpmak5feak.exe
  • %TEMP%\tmpxwfd5e7_.exe
  • %TEMP%\_mei55882\vcruntime140.dll
  • %TEMP%\_mei55882\_bz2.pyd
  • %TEMP%\_mei55882\_decimal.pyd
  • %TEMP%\_mei55882\_hashlib.pyd
  • %TEMP%\_mei55882\_lzma.pyd
  • %TEMP%\_mei55882\_socket.pyd
  • %TEMP%\_mei55882\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei55882\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei55882\base_library.zip
  • %TEMP%\_mei55882\libcrypto-1_1.dll
  • %TEMP%\_mei55882\python310.dll
  • %TEMP%\_mei55882\select.pyd
  • %TEMP%\_mei55882\ucrtbase.dll
  • %TEMP%\_mei55882\unicodedata.pyd
  • %TEMP%\07k7u9ng
  • %TEMP%\tmp7xjg2exk.exe
  • %TEMP%\tmp84unprr0.exe
  • %TEMP%\_mei16842\vcruntime140.dll
  • %TEMP%\_mei16842\_bz2.pyd
  • %TEMP%\_mei16842\_decimal.pyd
  • %TEMP%\_mei16842\_hashlib.pyd
  • %TEMP%\_mei16842\_lzma.pyd
  • %TEMP%\_mei16842\_socket.pyd
  • %TEMP%\_mei16842\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei16842\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei16842\base_library.zip
  • %TEMP%\_mei16842\libcrypto-1_1.dll
  • %TEMP%\_mei16842\python310.dll
  • %TEMP%\_mei16842\select.pyd
  • %TEMP%\_mei16842\ucrtbase.dll
  • %TEMP%\_mei16842\unicodedata.pyd
  • %TEMP%\cha11vj6
  • %TEMP%\tmptdocfwe2.exe
  • %TEMP%\tmp6c9ursf6.exe
  • %TEMP%\_mei54722\vcruntime140.dll
  • %TEMP%\_mei54722\_bz2.pyd
  • %TEMP%\_mei54722\_decimal.pyd
  • %TEMP%\_mei54722\_hashlib.pyd
  • %TEMP%\_mei54722\_lzma.pyd
  • %TEMP%\_mei54722\_socket.pyd
  • %TEMP%\_mei54722\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei54722\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei54722\base_library.zip
  • %TEMP%\_mei54722\libcrypto-1_1.dll
  • %TEMP%\tmp6c9ursf6srv.exe
  • %TEMP%\_mei54722\python310.dll
  • %ProgramFiles(x86)%\microsoft\desktoplayer.exe
  • %TEMP%\_mei54722\select.pyd
  • %TEMP%\_mei54722\ucrtbase.dll
  • %TEMP%\_mei54722\unicodedata.pyd
  • %TEMP%\5bpt2exz
  • %TEMP%\tmpxpnh1fb0.exe
  • %TEMP%\tmpd35en5y0.exe
  • %TEMP%\_mei61042\vcruntime140.dll
  • %TEMP%\_mei61042\_bz2.pyd
  • %TEMP%\_mei61042\_decimal.pyd
  • %TEMP%\_mei61042\_hashlib.pyd
  • %TEMP%\_mei61042\_lzma.pyd
  • %TEMP%\_mei61042\_socket.pyd
  • %TEMP%\_mei61042\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei61042\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei61042\base_library.zip
  • %TEMP%\_mei61042\libcrypto-1_1.dll
  • %TEMP%\_mei61042\python310.dll
  • %TEMP%\_mei61042\select.pyd
  • %TEMP%\_mei61042\ucrtbase.dll
  • %TEMP%\_mei61042\unicodedata.pyd
  • %TEMP%\g2ow5_kt
  • %TEMP%\tmplblkymth.exe
  • %TEMP%\tmpv9jpoel1.exe
  • %TEMP%\_mei11882\pil\_avif.cp310-win_amd64.pyd
  • %TEMP%\_mei14962\vcruntime140.dll
  • %TEMP%\_mei14962\_bz2.pyd
  • %TEMP%\_mei14962\_hashlib.pyd
  • %TEMP%\_mei14962\_lzma.pyd
  • %TEMP%\_mei14962\_socket.pyd
  • %TEMP%\_mei14962\base_library.zip
  • %TEMP%\_mei14962\libcrypto-1_1.dll
  • %TEMP%\_mei14962\python38.dll
  • %TEMP%\_mei11882\pil\_imaging.cp310-win_amd64.pyd
  • %TEMP%\_mei14962\select.pyd
  • %TEMP%\_mei14962\unicodedata.pyd
  • %TEMP%\_mei11882\pil\_imagingcms.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pil\_imagingmath.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pil\_imagingtk.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pil\_webp.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pythonwin\mfc140u.dll
  • %TEMP%\_mei11882\pythonwin\win32ui.pyd
  • %TEMP%\_mei11882\sdl2.dll
  • %TEMP%\_mei11882\sdl2_image.dll
  • %TEMP%\_mei11882\sdl2_mixer.dll
  • %TEMP%\_mei11882\sdl2_ttf.dll
  • %TEMP%\_mei11882\vcruntime140.dll
  • %TEMP%\_mei11882\vcruntime140_1.dll
  • %TEMP%\_mei11882\_asyncio.pyd
  • %TEMP%\_mei11882\_bz2.pyd
  • %TEMP%\_mei11882\_ctypes.pyd
  • %TEMP%\_mei11882\_decimal.pyd
  • %TEMP%\_mei11882\_elementtree.pyd
  • %TEMP%\_mei11882\_hashlib.pyd
  • %TEMP%\_mei11882\_lzma.pyd
  • %TEMP%\_mei11882\_multiprocessing.pyd
  • %TEMP%\_mei11882\_overlapped.pyd
  • %TEMP%\_mei11882\_queue.pyd
  • %TEMP%\_mei11882\_socket.pyd
  • %TEMP%\_mei11882\_ssl.pyd
  • %TEMP%\_mei11882\_uuid.pyd
  • %TEMP%\_mei11882\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei11882\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-multibyte-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-private-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei11882\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei11882\base_library.zip
  • %TEMP%\_mei11882\freetype.dll
  • %TEMP%\_mei11882\libcrypto-1_1.dll
  • %TEMP%\_mei11882\libffi-7.dll
  • %TEMP%\_mei11882\libjpeg-9.dll
  • %TEMP%\_mei11882\libmodplug-1.dll
  • %TEMP%\_mei11882\libogg-0.dll
  • %TEMP%\_mei11882\libopenblas64__v0.3.21-gcc_10_3_0.dll
  • %TEMP%\_mei11882\libopus-0.dll
  • %TEMP%\_mei11882\libopusfile-0.dll
  • %TEMP%\_mei11882\libpng16-16.dll
  • %TEMP%\_mei11882\libssl-1_1.dll
  • %TEMP%\_mei11882\libtiff-5.dll
  • %TEMP%\_mei11882\libwebp-7.dll
  • %TEMP%\_mei11882\numpy\.libs\libopenblas64__v0.3.21-gcc_10_3_0.dll
  • %HOMEPATH%\desktop\fuck_you_1.txt
  • %HOMEPATH%\desktop\fuck_you_2.txt
  • %HOMEPATH%\desktop\fuck_you_3.txt
  • %HOMEPATH%\desktop\fuck_you_4.txt
  • %HOMEPATH%\desktop\fuck_you_5.txt
  • %HOMEPATH%\desktop\fuck_you_6.txt
  • %HOMEPATH%\desktop\fuck_you_7.txt
  • %HOMEPATH%\desktop\fuck_you_8.txt
  • %HOMEPATH%\desktop\fuck_you_9.txt
  • %HOMEPATH%\desktop\fuck_you_10.txt
  • %TEMP%\_mei11882\numpy\core\_multiarray_tests.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\core\_multiarray_umath.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\fft\_pocketfft_internal.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\linalg\_umath_linalg.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\linalg\lapack_lite.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_bounded_integers.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_common.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_generator.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_mt19937.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_pcg64.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_philox.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\_sfc64.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\bit_generator.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\numpy\random\mtrand.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\portmidi.dll
  • %TEMP%\_mei11882\psutil\_psutil_windows.pyd
  • %TEMP%\_mei11882\pyexpat.pyd
  • %TEMP%\_mei11882\pygame\sdl2.dll
  • %TEMP%\_mei11882\pygame\sdl2_image.dll
  • %TEMP%\_mei11882\pygame\sdl2_mixer.dll
  • %TEMP%\_mei11882\pygame\sdl2_ttf.dll
  • %TEMP%\_mei11882\pygame\_freetype.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\base.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\bufferproxy.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\color.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\constants.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\display.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\draw.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\event.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\font.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\freesansbold.ttf
  • %TEMP%\_mei11882\pygame\freetype.dll
  • %TEMP%\_mei11882\pygame\image.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\imageext.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\joystick.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\key.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\libjpeg-9.dll
  • %TEMP%\_mei11882\pygame\libogg-0.dll
  • %TEMP%\_mei11882\pygame\libopus-0.dll
  • %TEMP%\_mei11882\pygame\libpng16-16.dll
  • %TEMP%\_mei11882\pygame\mask.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\math.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\mixer.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\mixer_music.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\mouse.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\pixelarray.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\pixelcopy.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\pygame_icon.bmp
  • %TEMP%\_mei11882\pygame\rect.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\rwobject.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\scrap.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\surface.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\surflock.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\time.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\transform.cp310-win_amd64.pyd
  • %TEMP%\_mei11882\pygame\zlib1.dll
  • %TEMP%\_mei11882\python3.dll
  • %TEMP%\_mei11882\python310.dll
  • %TEMP%\_mei11882\pywin32_system32\pythoncom310.dll
  • %TEMP%\_mei11882\pywin32_system32\pywintypes310.dll
  • %TEMP%\_mei11882\select.pyd
  • %TEMP%\_mei11882\ucrtbase.dll
  • %TEMP%\_mei11882\unicodedata.pyd
  • %TEMP%\_mei11882\win32\_win32sysloader.pyd
  • %TEMP%\_mei11882\win32\win32api.pyd
  • %TEMP%\_mei11882\win32\win32pdh.pyd
  • %TEMP%\_mei11882\win32\win32process.pyd
  • %TEMP%\_mei11882\win32\win32trace.pyd
  • %TEMP%\_mei11882\win32com\shell\shell.pyd
  • %TEMP%\_mei11882\zlib1.dll
  • %HOMEPATH%\desktop\troll_message_1.html
  • %HOMEPATH%\desktop\troll_message_2.html
  • %HOMEPATH%\desktop\troll_message_3.html
  • %HOMEPATH%\desktop\troll_message_4.html
  • %HOMEPATH%\desktop\troll_message_5.html
  • %HOMEPATH%\desktop\troll_message_6.html
  • %HOMEPATH%\desktop\troll_message_7.html
  • %HOMEPATH%\desktop\troll_message_8.html
  • %HOMEPATH%\desktop\troll_message_9.html
  • %HOMEPATH%\desktop\troll_message_10.html
  • %HOMEPATH%\desktop\troll_message_11.html
  • %HOMEPATH%\desktop\troll_message_12.html
  • %HOMEPATH%\desktop\troll_message_13.html
  • %HOMEPATH%\desktop\troll_message_14.html
  • %HOMEPATH%\desktop\troll_message_15.html
  • %HOMEPATH%\desktop\troll_message_16.html
  • %HOMEPATH%\desktop\troll_message_17.html
  • %HOMEPATH%\desktop\troll_message_18.html
  • %HOMEPATH%\desktop\troll_message_19.html
  • %HOMEPATH%\desktop\troll_message_20.html
  • %HOMEPATH%\desktop\troll_message_21.html
  • %HOMEPATH%\desktop\troll_message_22.html
  • %HOMEPATH%\desktop\troll_message_23.html
  • %HOMEPATH%\desktop\troll_message_24.html
  • %HOMEPATH%\desktop\troll_message_25.html
  • %HOMEPATH%\desktop\troll_message_26.html
  • %HOMEPATH%\desktop\troll_message_27.html
  • %HOMEPATH%\desktop\troll_message_28.html
  • %HOMEPATH%\desktop\troll_message_29.html
  • %HOMEPATH%\desktop\troll_message_30.html
  • %HOMEPATH%\desktop\troll_message_31.html
  • %HOMEPATH%\desktop\troll_message_32.html
  • %HOMEPATH%\desktop\troll_message_33.html
  • %HOMEPATH%\desktop\troll_message_34.html
  • %HOMEPATH%\desktop\troll_message_35.html
  • %HOMEPATH%\desktop\troll_message_36.html
  • %HOMEPATH%\desktop\troll_message_37.html
  • %HOMEPATH%\desktop\troll_message_38.html
  • %HOMEPATH%\desktop\troll_message_39.html
  • %HOMEPATH%\desktop\troll_message_40.html
  • %HOMEPATH%\desktop\troll_message_41.html
  • %HOMEPATH%\desktop\troll_message_42.html
  • %HOMEPATH%\desktop\troll_message_43.html
  • %HOMEPATH%\desktop\troll_message_44.html
  • %HOMEPATH%\desktop\troll_message_45.html
  • %HOMEPATH%\desktop\troll_message_46.html
  • %HOMEPATH%\desktop\troll_message_47.html
  • %HOMEPATH%\desktop\troll_message_48.html
  • %HOMEPATH%\desktop\troll_message_49.html
  • %HOMEPATH%\desktop\troll_message_50.html
  • %HOMEPATH%\desktop\troll_message_51.html
  • %HOMEPATH%\desktop\troll_message_52.html
  • %HOMEPATH%\desktop\troll_message_53.html
  • %HOMEPATH%\desktop\troll_message_54.html
  • %HOMEPATH%\desktop\troll_message_55.html
  • %HOMEPATH%\desktop\troll_message_56.html
  • %HOMEPATH%\desktop\troll_message_57.html
  • %HOMEPATH%\desktop\troll_message_58.html
  • %HOMEPATH%\desktop\troll_message_59.html
  • %HOMEPATH%\desktop\troll_message_60.html
  • %HOMEPATH%\desktop\troll_message_61.html
  • %HOMEPATH%\desktop\troll_message_62.html
  • %HOMEPATH%\desktop\troll_message_63.html
  • %HOMEPATH%\desktop\troll_message_64.html
  • %HOMEPATH%\desktop\troll_message_65.html
  • %HOMEPATH%\desktop\troll_message_66.html
  • %HOMEPATH%\desktop\troll_message_67.html
  • %HOMEPATH%\desktop\troll_message_68.html
  • %HOMEPATH%\desktop\troll_message_69.html
  • %HOMEPATH%\desktop\troll_message_70.html
  • %HOMEPATH%\desktop\troll_message_71.html
  • %HOMEPATH%\desktop\troll_message_72.html
  • %HOMEPATH%\desktop\troll_message_73.html
  • %HOMEPATH%\desktop\troll_message_74.html
  • %HOMEPATH%\desktop\troll_message_75.html
  • %HOMEPATH%\desktop\troll_message_76.html
  • %HOMEPATH%\desktop\troll_message_77.html
  • %HOMEPATH%\desktop\troll_message_78.html
  • %HOMEPATH%\desktop\troll_message_79.html
  • %HOMEPATH%\desktop\troll_message_80.html
  • %HOMEPATH%\desktop\troll_message_81.html
  • %HOMEPATH%\desktop\troll_message_82.html
  • %HOMEPATH%\desktop\troll_message_83.html
  • %HOMEPATH%\desktop\troll_message_84.html
  • %HOMEPATH%\desktop\troll_message_85.html
  • %HOMEPATH%\desktop\troll_message_86.html
  • %HOMEPATH%\desktop\troll_message_87.html
  • %HOMEPATH%\desktop\troll_message_88.html
  • %HOMEPATH%\desktop\troll_message_89.html
  • %HOMEPATH%\desktop\troll_message_90.html
  • %HOMEPATH%\desktop\troll_message_91.html
  • %HOMEPATH%\desktop\troll_message_92.html
  • %HOMEPATH%\desktop\troll_message_93.html
  • %HOMEPATH%\desktop\troll_message_94.html
  • %HOMEPATH%\desktop\troll_message_95.html
  • %HOMEPATH%\desktop\troll_message_96.html
  • %HOMEPATH%\desktop\troll_message_97.html
  • %HOMEPATH%\desktop\troll_message_98.html
  • %HOMEPATH%\desktop\troll_message_99.html
  • %HOMEPATH%\desktop\troll_message_100.html
  • %HOMEPATH%\desktop\troll_message_101.html
  • %HOMEPATH%\desktop\troll_message_102.html
  • %HOMEPATH%\desktop\troll_message_103.html
  • %HOMEPATH%\desktop\troll_message_104.html
  • %HOMEPATH%\desktop\troll_message_105.html
  • %HOMEPATH%\desktop\troll_message_106.html
  • %HOMEPATH%\desktop\troll_message_107.html
  • %HOMEPATH%\desktop\troll_message_108.html
  • %HOMEPATH%\desktop\troll_message_109.html
  • %HOMEPATH%\desktop\troll_message_110.html
  • %HOMEPATH%\desktop\troll_message_111.html
  • %HOMEPATH%\desktop\troll_message_112.html
  • %HOMEPATH%\desktop\troll_message_113.html
  • %HOMEPATH%\desktop\troll_message_114.html
  • %HOMEPATH%\desktop\troll_message_115.html
  • %HOMEPATH%\desktop\troll_message_116.html
  • %HOMEPATH%\desktop\troll_message_117.html
  • %HOMEPATH%\desktop\troll_message_118.html
  • %HOMEPATH%\desktop\troll_message_119.html
  • %HOMEPATH%\desktop\troll_message_120.html
  • %HOMEPATH%\desktop\troll_message_121.html
  • %HOMEPATH%\desktop\troll_message_122.html
  • %HOMEPATH%\desktop\troll_message_123.html
  • %HOMEPATH%\desktop\troll_message_124.html
  • %HOMEPATH%\desktop\troll_message_125.html
  • %HOMEPATH%\desktop\troll_message_126.html
  • %HOMEPATH%\desktop\troll_message_127.html
  • %HOMEPATH%\desktop\troll_message_128.html
  • %HOMEPATH%\desktop\troll_message_129.html
  • %HOMEPATH%\desktop\troll_message_130.html
  • %HOMEPATH%\desktop\troll_message_131.html
  • %HOMEPATH%\desktop\troll_message_132.html
  • %HOMEPATH%\desktop\troll_message_133.html
  • %HOMEPATH%\desktop\troll_message_134.html
  • %HOMEPATH%\desktop\troll_message_135.html
  • %HOMEPATH%\desktop\troll_message_136.html
  • %HOMEPATH%\desktop\troll_message_137.html
  • %HOMEPATH%\desktop\troll_message_138.html
  • %HOMEPATH%\desktop\troll_message_139.html
  • %HOMEPATH%\desktop\troll_message_140.html
  • %HOMEPATH%\desktop\troll_message_141.html
  • %HOMEPATH%\desktop\troll_message_142.html
  • %HOMEPATH%\desktop\troll_message_143.html
  • %HOMEPATH%\desktop\troll_message_144.html
  • %HOMEPATH%\desktop\troll_message_145.html
  • %HOMEPATH%\desktop\troll_message_146.html
  • %HOMEPATH%\desktop\troll_message_147.html
  • %HOMEPATH%\desktop\troll_message_148.html
  • %HOMEPATH%\desktop\troll_message_149.html
  • %HOMEPATH%\desktop\troll_message_150.html
  • %HOMEPATH%\desktop\troll_message_151.html
  • %HOMEPATH%\desktop\troll_message_152.html
  • %HOMEPATH%\desktop\troll_message_153.html
  • %HOMEPATH%\desktop\troll_message_154.html
  • %HOMEPATH%\desktop\troll_message_155.html
  • %HOMEPATH%\desktop\troll_message_156.html
  • %HOMEPATH%\desktop\troll_message_157.html
  • %HOMEPATH%\desktop\troll_message_158.html
  • %HOMEPATH%\desktop\troll_message_159.html
  • %HOMEPATH%\desktop\troll_message_160.html
  • %HOMEPATH%\desktop\troll_message_161.html
  • %HOMEPATH%\desktop\troll_message_162.html
  • %HOMEPATH%\desktop\troll_message_163.html
  • %HOMEPATH%\desktop\troll_message_164.html
  • %HOMEPATH%\desktop\troll_message_165.html
  • %HOMEPATH%\desktop\troll_message_166.html
  • %HOMEPATH%\desktop\troll_message_167.html
  • %HOMEPATH%\desktop\troll_message_168.html
  • %HOMEPATH%\desktop\troll_message_169.html
  • %HOMEPATH%\desktop\troll_message_170.html
  • %HOMEPATH%\desktop\troll_message_171.html
  • %HOMEPATH%\desktop\troll_message_172.html
  • %HOMEPATH%\desktop\troll_message_173.html
  • %HOMEPATH%\desktop\troll_message_174.html
  • %HOMEPATH%\desktop\troll_message_175.html
  • %HOMEPATH%\desktop\troll_message_176.html
  • %HOMEPATH%\desktop\troll_message_177.html
  • %HOMEPATH%\desktop\troll_message_178.html
  • %HOMEPATH%\desktop\troll_message_179.html
  • %HOMEPATH%\desktop\troll_message_180.html
  • %HOMEPATH%\desktop\troll_message_181.html
  • %HOMEPATH%\desktop\troll_message_182.html
  • %HOMEPATH%\desktop\troll_message_183.html
  • %HOMEPATH%\desktop\troll_message_184.html
  • %HOMEPATH%\desktop\troll_message_185.html
  • %HOMEPATH%\desktop\troll_message_186.html
  • %HOMEPATH%\desktop\troll_message_187.html
  • %HOMEPATH%\desktop\troll_message_188.html
  • %HOMEPATH%\desktop\troll_message_189.html
  • %HOMEPATH%\desktop\troll_message_190.html
  • %HOMEPATH%\desktop\troll_message_191.html
  • %HOMEPATH%\desktop\troll_message_192.html
  • %HOMEPATH%\desktop\troll_message_193.html
  • %HOMEPATH%\desktop\troll_message_194.html
  • %HOMEPATH%\desktop\troll_message_195.html
  • %HOMEPATH%\desktop\troll_message_196.html
  • %HOMEPATH%\desktop\troll_message_197.html
  • %HOMEPATH%\desktop\troll_message_198.html
  • %HOMEPATH%\desktop\troll_message_199.html
  • %HOMEPATH%\desktop\troll_message_200.html
  • %HOMEPATH%\desktop\troll_message_201.html
  • %HOMEPATH%\desktop\troll_message_202.html
  • %HOMEPATH%\desktop\troll_message_203.html
  • %HOMEPATH%\desktop\troll_message_204.html
  • %HOMEPATH%\desktop\troll_message_205.html
  • %HOMEPATH%\desktop\troll_message_206.html
  • %HOMEPATH%\desktop\troll_message_207.html
  • %HOMEPATH%\desktop\troll_message_208.html
  • %HOMEPATH%\desktop\troll_message_209.html
  • %HOMEPATH%\desktop\troll_message_210.html
  • %HOMEPATH%\desktop\troll_message_211.html
  • %HOMEPATH%\desktop\troll_message_212.html
  • %HOMEPATH%\desktop\troll_message_213.html
  • %HOMEPATH%\desktop\troll_message_214.html
  • %HOMEPATH%\desktop\troll_message_215.html
  • %HOMEPATH%\desktop\troll_message_216.html
  • %HOMEPATH%\desktop\troll_message_217.html
  • %HOMEPATH%\desktop\troll_message_218.html
  • %HOMEPATH%\desktop\troll_message_219.html
  • %HOMEPATH%\desktop\troll_message_220.html
  • %HOMEPATH%\desktop\troll_message_221.html
  • %HOMEPATH%\desktop\troll_message_222.html
  • %HOMEPATH%\desktop\troll_message_223.html
  • %HOMEPATH%\desktop\troll_message_224.html
  • %HOMEPATH%\desktop\troll_message_225.html
  • %HOMEPATH%\desktop\troll_message_226.html
  • %HOMEPATH%\desktop\troll_message_227.html
  • %HOMEPATH%\desktop\troll_message_228.html
  • %HOMEPATH%\desktop\troll_message_229.html
  • %HOMEPATH%\desktop\troll_message_230.html
  • %HOMEPATH%\desktop\troll_message_231.html
  • %HOMEPATH%\desktop\troll_message_232.html
  • %HOMEPATH%\desktop\troll_message_233.html
  • %HOMEPATH%\desktop\troll_message_234.html
  • %HOMEPATH%\desktop\troll_message_235.html
  • %HOMEPATH%\desktop\troll_message_236.html
  • %HOMEPATH%\desktop\troll_message_237.html
  • %HOMEPATH%\desktop\troll_message_238.html
  • %HOMEPATH%\desktop\troll_message_239.html
  • %HOMEPATH%\desktop\troll_message_240.html
  • %HOMEPATH%\desktop\troll_message_241.html
  • %HOMEPATH%\desktop\troll_message_242.html
  • %HOMEPATH%\desktop\troll_message_243.html
  • %HOMEPATH%\desktop\troll_message_244.html
  • %HOMEPATH%\desktop\troll_message_245.html
  • %HOMEPATH%\desktop\troll_message_246.html
  • %HOMEPATH%\desktop\troll_message_247.html
  • %HOMEPATH%\desktop\troll_message_248.html
  • %HOMEPATH%\desktop\troll_message_249.html
  • %HOMEPATH%\desktop\troll_message_250.html
  • %HOMEPATH%\desktop\troll_message_251.html
  • %HOMEPATH%\desktop\troll_message_252.html
  • %HOMEPATH%\desktop\troll_message_253.html
  • %HOMEPATH%\desktop\troll_message_254.html
  • %HOMEPATH%\desktop\troll_message_255.html
  • %HOMEPATH%\desktop\troll_message_256.html
  • %HOMEPATH%\desktop\troll_message_257.html
  • %HOMEPATH%\desktop\troll_message_258.html
  • %HOMEPATH%\desktop\troll_message_259.html
  • %HOMEPATH%\desktop\troll_message_260.html
  • %HOMEPATH%\desktop\troll_message_261.html
  • %HOMEPATH%\desktop\troll_message_262.html
  • %HOMEPATH%\desktop\troll_message_263.html
  • %HOMEPATH%\desktop\troll_message_264.html
  • %HOMEPATH%\desktop\troll_message_265.html
  • %HOMEPATH%\desktop\troll_message_266.html
  • %HOMEPATH%\desktop\troll_message_267.html
  • %HOMEPATH%\desktop\troll_message_268.html
  • %HOMEPATH%\desktop\troll_message_269.html
  • %HOMEPATH%\desktop\troll_message_270.html
  • %HOMEPATH%\desktop\troll_message_271.html
  • %HOMEPATH%\desktop\troll_message_272.html
  • %HOMEPATH%\desktop\troll_message_273.html
  • %HOMEPATH%\desktop\troll_message_274.html
  • %HOMEPATH%\desktop\troll_message_275.html
  • %HOMEPATH%\desktop\troll_message_276.html
  • %HOMEPATH%\desktop\troll_message_277.html
  • %HOMEPATH%\desktop\troll_message_278.html
  • %HOMEPATH%\desktop\troll_message_279.html
  • %HOMEPATH%\desktop\troll_message_280.html
  • %HOMEPATH%\desktop\troll_message_281.html
  • %HOMEPATH%\desktop\troll_message_282.html
  • %HOMEPATH%\desktop\troll_message_283.html
  • %HOMEPATH%\desktop\troll_message_284.html
  • %HOMEPATH%\desktop\troll_message_285.html
  • %HOMEPATH%\desktop\troll_message_286.html
  • %HOMEPATH%\desktop\troll_message_287.html
  • %HOMEPATH%\desktop\troll_message_288.html
  • %HOMEPATH%\desktop\troll_message_289.html
  • %HOMEPATH%\desktop\troll_message_290.html
  • %HOMEPATH%\desktop\troll_message_291.html
  • %HOMEPATH%\desktop\troll_message_292.html
  • %HOMEPATH%\desktop\troll_message_293.html
  • %HOMEPATH%\desktop\troll_message_294.html
  • %HOMEPATH%\desktop\troll_message_295.html
  • %HOMEPATH%\desktop\troll_message_296.html
  • %HOMEPATH%\desktop\troll_message_297.html
  • %HOMEPATH%\desktop\troll_message_298.html
  • %HOMEPATH%\desktop\troll_message_299.html
  • %HOMEPATH%\desktop\troll_message_300.html
  • %HOMEPATH%\desktop\troll_message_301.html
  • %HOMEPATH%\desktop\troll_message_302.html
  • %HOMEPATH%\desktop\troll_message_303.html
  • %HOMEPATH%\desktop\troll_message_304.html
  • %HOMEPATH%\desktop\troll_message_305.html
  • %HOMEPATH%\desktop\troll_message_306.html
  • %HOMEPATH%\desktop\troll_message_307.html
  • %HOMEPATH%\desktop\troll_message_308.html
  • %HOMEPATH%\desktop\troll_message_309.html
  • %HOMEPATH%\desktop\troll_message_310.html
  • %HOMEPATH%\desktop\troll_message_311.html
  • %HOMEPATH%\desktop\troll_message_312.html
  • %HOMEPATH%\desktop\troll_message_313.html
  • %HOMEPATH%\desktop\troll_message_314.html
  • %HOMEPATH%\desktop\troll_message_315.html
  • %HOMEPATH%\desktop\troll_message_316.html
  • %HOMEPATH%\desktop\troll_message_317.html
  • %HOMEPATH%\desktop\troll_message_318.html
  • %HOMEPATH%\desktop\troll_message_319.html
  • %HOMEPATH%\desktop\troll_message_320.html
  • %HOMEPATH%\desktop\troll_message_321.html
  • %HOMEPATH%\desktop\troll_message_322.html
  • %HOMEPATH%\desktop\troll_message_323.html
  • %HOMEPATH%\desktop\troll_message_324.html
  • %HOMEPATH%\desktop\troll_message_325.html
  • %HOMEPATH%\desktop\troll_message_326.html
  • %HOMEPATH%\desktop\troll_message_327.html
  • %HOMEPATH%\desktop\troll_message_328.html
  • %HOMEPATH%\desktop\troll_message_329.html
  • %HOMEPATH%\desktop\troll_message_330.html
  • %HOMEPATH%\desktop\troll_message_331.html
  • %HOMEPATH%\desktop\troll_message_332.html
  • %HOMEPATH%\desktop\troll_message_333.html
  • %HOMEPATH%\desktop\troll_message_334.html
  • %HOMEPATH%\desktop\troll_message_335.html
  • %HOMEPATH%\desktop\troll_message_336.html
  • %HOMEPATH%\desktop\troll_message_337.html
  • %HOMEPATH%\desktop\troll_message_338.html
  • %HOMEPATH%\desktop\troll_message_339.html
  • %HOMEPATH%\desktop\troll_message_340.html
  • %HOMEPATH%\desktop\troll_message_341.html
  • %HOMEPATH%\desktop\troll_message_342.html
  • %HOMEPATH%\desktop\troll_message_343.html
  • %HOMEPATH%\desktop\troll_message_344.html
  • %HOMEPATH%\desktop\troll_message_345.html
  • %HOMEPATH%\desktop\troll_message_346.html
  • %HOMEPATH%\desktop\troll_message_347.html
  • %HOMEPATH%\desktop\troll_message_348.html
  • %HOMEPATH%\desktop\troll_message_349.html
  • %HOMEPATH%\desktop\troll_message_350.html
  • %HOMEPATH%\desktop\troll_message_351.html
  • %HOMEPATH%\desktop\troll_message_352.html
  • %HOMEPATH%\desktop\troll_message_353.html
  • %HOMEPATH%\desktop\troll_message_354.html
  • %HOMEPATH%\desktop\troll_message_355.html
  • %HOMEPATH%\desktop\troll_message_356.html
  • %HOMEPATH%\desktop\troll_message_357.html
  • %HOMEPATH%\desktop\troll_message_358.html
  • %HOMEPATH%\desktop\troll_message_359.html
  • %HOMEPATH%\desktop\troll_message_360.html
  • %HOMEPATH%\desktop\troll_message_361.html
  • %HOMEPATH%\desktop\troll_message_362.html
  • %HOMEPATH%\desktop\troll_message_363.html
  • %HOMEPATH%\desktop\troll_message_364.html
  • %HOMEPATH%\desktop\troll_message_365.html
  • %HOMEPATH%\desktop\troll_message_366.html
  • %HOMEPATH%\desktop\troll_message_367.html
  • %HOMEPATH%\desktop\troll_message_368.html
  • %HOMEPATH%\desktop\troll_message_369.html
  • %HOMEPATH%\desktop\troll_message_370.html
  • %HOMEPATH%\desktop\troll_message_371.html
  • %HOMEPATH%\desktop\troll_message_372.html
  • %HOMEPATH%\desktop\troll_message_373.html
  • %HOMEPATH%\desktop\troll_message_374.html
  • %HOMEPATH%\desktop\troll_message_375.html
  • %HOMEPATH%\desktop\troll_message_376.html
  • %HOMEPATH%\desktop\troll_message_377.html
  • %HOMEPATH%\desktop\troll_message_378.html
  • %HOMEPATH%\desktop\troll_message_379.html
  • %HOMEPATH%\desktop\troll_message_380.html
  • %HOMEPATH%\desktop\troll_message_381.html
  • %HOMEPATH%\desktop\troll_message_382.html
  • %HOMEPATH%\desktop\troll_message_383.html
  • %HOMEPATH%\desktop\troll_message_384.html
  • %HOMEPATH%\desktop\troll_message_385.html
  • %HOMEPATH%\desktop\troll_message_386.html
  • %HOMEPATH%\desktop\troll_message_387.html
  • %HOMEPATH%\desktop\troll_message_388.html
  • %HOMEPATH%\desktop\troll_message_389.html
  • %HOMEPATH%\desktop\troll_message_390.html
  • %HOMEPATH%\desktop\troll_message_391.html
  • %HOMEPATH%\desktop\troll_message_392.html
  • %HOMEPATH%\desktop\troll_message_393.html
  • %HOMEPATH%\desktop\troll_message_394.html
  • %HOMEPATH%\desktop\troll_message_395.html
  • %HOMEPATH%\desktop\troll_message_396.html
  • %HOMEPATH%\desktop\troll_message_397.html
  • %HOMEPATH%\desktop\troll_message_398.html
  • %HOMEPATH%\desktop\troll_message_399.html
  • %HOMEPATH%\desktop\troll_message_400.html
  • %HOMEPATH%\desktop\troll_message_401.html
  • %HOMEPATH%\desktop\troll_message_402.html
  • %HOMEPATH%\desktop\troll_message_403.html
  • %HOMEPATH%\desktop\troll_message_404.html
  • %HOMEPATH%\desktop\troll_message_405.html
  • %HOMEPATH%\desktop\troll_message_406.html
  • %HOMEPATH%\desktop\troll_message_407.html
  • %HOMEPATH%\desktop\troll_message_408.html
  • %HOMEPATH%\desktop\troll_message_409.html
  • %HOMEPATH%\desktop\troll_message_410.html
  • %HOMEPATH%\desktop\troll_message_411.html
  • %HOMEPATH%\desktop\troll_message_412.html
  • %HOMEPATH%\desktop\troll_message_413.html
  • %HOMEPATH%\desktop\troll_message_414.html
  • %HOMEPATH%\desktop\troll_message_415.html
  • %HOMEPATH%\desktop\troll_message_416.html
  • %HOMEPATH%\desktop\troll_message_417.html
  • %HOMEPATH%\desktop\troll_message_418.html
  • %HOMEPATH%\desktop\troll_message_419.html
  • %HOMEPATH%\desktop\troll_message_420.html
  • %HOMEPATH%\desktop\troll_message_421.html
  • %HOMEPATH%\desktop\troll_message_422.html
  • %HOMEPATH%\desktop\troll_message_423.html
  • %HOMEPATH%\desktop\troll_message_424.html
  • %HOMEPATH%\desktop\troll_message_425.html
  • %HOMEPATH%\desktop\troll_message_426.html
  • %HOMEPATH%\desktop\troll_message_427.html
  • %HOMEPATH%\desktop\troll_message_428.html
  • %HOMEPATH%\desktop\troll_message_429.html
  • %HOMEPATH%\desktop\troll_message_430.html
  • %HOMEPATH%\desktop\troll_message_431.html
  • %HOMEPATH%\desktop\troll_message_432.html
  • %HOMEPATH%\desktop\troll_message_433.html
  • %HOMEPATH%\desktop\troll_message_434.html
  • %HOMEPATH%\desktop\troll_message_435.html
  • %HOMEPATH%\desktop\troll_message_436.html
  • %HOMEPATH%\desktop\troll_message_437.html
  • %HOMEPATH%\desktop\troll_message_438.html
  • %HOMEPATH%\desktop\troll_message_439.html
  • %HOMEPATH%\desktop\troll_message_440.html
  • %HOMEPATH%\desktop\troll_message_441.html
  • %HOMEPATH%\desktop\troll_message_442.html
  • %HOMEPATH%\desktop\troll_message_443.html
  • %HOMEPATH%\desktop\troll_message_444.html
  • %HOMEPATH%\desktop\troll_message_445.html
  • %HOMEPATH%\desktop\troll_message_446.html
  • %HOMEPATH%\desktop\troll_message_447.html
  • %HOMEPATH%\desktop\troll_message_448.html
  • %HOMEPATH%\desktop\troll_message_449.html
  • %HOMEPATH%\desktop\troll_message_450.html
  • %HOMEPATH%\desktop\troll_message_451.html
  • %HOMEPATH%\desktop\troll_message_452.html
  • %HOMEPATH%\desktop\troll_message_453.html
  • %HOMEPATH%\desktop\troll_message_454.html
  • %HOMEPATH%\desktop\troll_message_455.html
  • %HOMEPATH%\desktop\troll_message_456.html
  • %HOMEPATH%\desktop\troll_message_457.html
  • %HOMEPATH%\desktop\troll_message_458.html
  • %HOMEPATH%\desktop\troll_message_459.html
  • %HOMEPATH%\desktop\troll_message_460.html
  • %HOMEPATH%\desktop\troll_message_461.html
  • %HOMEPATH%\desktop\troll_message_462.html
  • %HOMEPATH%\desktop\troll_message_463.html
  • %HOMEPATH%\desktop\troll_message_464.html
  • %HOMEPATH%\desktop\troll_message_465.html
  • %HOMEPATH%\desktop\troll_message_466.html
  • %HOMEPATH%\desktop\troll_message_467.html
  • %HOMEPATH%\desktop\troll_message_468.html
  • %HOMEPATH%\desktop\troll_message_469.html
  • %HOMEPATH%\desktop\troll_message_470.html
  • %HOMEPATH%\desktop\troll_message_471.html
  • %HOMEPATH%\desktop\troll_message_472.html
  • %HOMEPATH%\desktop\troll_message_473.html
  • %HOMEPATH%\desktop\troll_message_474.html
  • %HOMEPATH%\desktop\troll_message_475.html
  • %HOMEPATH%\desktop\troll_message_476.html
  • %HOMEPATH%\desktop\troll_message_477.html
  • %HOMEPATH%\desktop\troll_message_478.html
  • %HOMEPATH%\desktop\troll_message_479.html
  • %HOMEPATH%\desktop\troll_message_480.html
  • %HOMEPATH%\desktop\troll_message_481.html
  • %HOMEPATH%\desktop\troll_message_482.html
  • %HOMEPATH%\desktop\troll_message_483.html
  • %HOMEPATH%\desktop\troll_message_484.html
  • %HOMEPATH%\desktop\troll_message_485.html
  • %HOMEPATH%\desktop\troll_message_486.html
  • %HOMEPATH%\desktop\troll_message_487.html
  • %HOMEPATH%\desktop\troll_message_488.html
  • %HOMEPATH%\desktop\troll_message_489.html
  • %HOMEPATH%\desktop\troll_message_490.html
  • %HOMEPATH%\desktop\troll_message_491.html
  • %HOMEPATH%\desktop\troll_message_492.html
  • %HOMEPATH%\desktop\troll_message_493.html
  • %HOMEPATH%\desktop\troll_message_494.html
  • %HOMEPATH%\desktop\troll_message_495.html
  • %HOMEPATH%\desktop\troll_message_496.html
  • %HOMEPATH%\desktop\troll_message_497.html
  • %HOMEPATH%\desktop\troll_message_498.html
  • %HOMEPATH%\desktop\troll_message_499.html
  • %HOMEPATH%\desktop\troll_message_500.html
  • %HOMEPATH%\desktop\troll_message_501.html
  • %HOMEPATH%\desktop\troll_message_502.html
  • %HOMEPATH%\desktop\troll_message_503.html
  • %HOMEPATH%\desktop\troll_message_504.html
  • %HOMEPATH%\desktop\troll_message_505.html
  • %HOMEPATH%\desktop\troll_message_506.html
  • %HOMEPATH%\desktop\troll_message_507.html
  • %HOMEPATH%\desktop\troll_message_508.html
  • %HOMEPATH%\desktop\troll_message_509.html
  • %HOMEPATH%\desktop\troll_message_510.html
  • %HOMEPATH%\desktop\troll_message_511.html
  • %HOMEPATH%\desktop\troll_message_512.html
  • %HOMEPATH%\desktop\troll_message_513.html
  • %HOMEPATH%\desktop\troll_message_514.html
  • %HOMEPATH%\desktop\troll_message_515.html
  • %HOMEPATH%\desktop\troll_message_516.html
  • %HOMEPATH%\desktop\troll_message_517.html
  • %HOMEPATH%\desktop\troll_message_518.html
  • %HOMEPATH%\desktop\troll_message_519.html
  • %HOMEPATH%\desktop\troll_message_520.html
  • %HOMEPATH%\desktop\troll_message_521.html
  • %HOMEPATH%\desktop\troll_message_522.html
  • %HOMEPATH%\desktop\troll_message_523.html
  • %HOMEPATH%\desktop\troll_message_524.html
  • %HOMEPATH%\desktop\troll_message_525.html
  • %HOMEPATH%\desktop\troll_message_526.html
  • %HOMEPATH%\desktop\troll_message_527.html
  • %HOMEPATH%\desktop\troll_message_528.html
  • %HOMEPATH%\desktop\troll_message_529.html
  • %HOMEPATH%\desktop\troll_message_530.html
  • %HOMEPATH%\desktop\troll_message_531.html
  • %HOMEPATH%\desktop\troll_message_532.html
  • %HOMEPATH%\desktop\troll_message_533.html
  • %HOMEPATH%\desktop\troll_message_534.html
  • %HOMEPATH%\desktop\troll_message_535.html
  • %HOMEPATH%\desktop\troll_message_536.html
  • %HOMEPATH%\desktop\troll_message_537.html
  • %HOMEPATH%\desktop\troll_message_538.html
  • %HOMEPATH%\desktop\troll_message_539.html
  • %HOMEPATH%\desktop\troll_message_540.html
  • %HOMEPATH%\desktop\troll_message_541.html
  • %HOMEPATH%\desktop\troll_message_542.html
  • %HOMEPATH%\desktop\troll_message_543.html
  • %HOMEPATH%\desktop\troll_message_544.html
  • %HOMEPATH%\desktop\troll_message_545.html
  • %HOMEPATH%\desktop\troll_message_546.html
  • %HOMEPATH%\desktop\troll_message_547.html
  • %HOMEPATH%\desktop\troll_message_548.html
  • %HOMEPATH%\desktop\troll_message_549.html
  • %HOMEPATH%\desktop\troll_message_550.html
  • %HOMEPATH%\desktop\troll_message_551.html
  • %HOMEPATH%\desktop\troll_message_552.html
  • %HOMEPATH%\desktop\troll_message_553.html
  • %HOMEPATH%\desktop\troll_message_554.html
  • %HOMEPATH%\desktop\troll_message_555.html
  • %HOMEPATH%\desktop\troll_message_556.html
  • %HOMEPATH%\desktop\troll_message_557.html
  • %HOMEPATH%\desktop\troll_message_558.html
  • %HOMEPATH%\desktop\troll_message_559.html
  • %HOMEPATH%\desktop\troll_message_560.html
  • %HOMEPATH%\desktop\troll_message_561.html
  • %HOMEPATH%\desktop\troll_message_562.html
  • %HOMEPATH%\desktop\troll_message_563.html
  • %HOMEPATH%\desktop\troll_message_564.html
  • %HOMEPATH%\desktop\troll_message_565.html
  • %HOMEPATH%\desktop\troll_message_566.html
  • %HOMEPATH%\desktop\troll_message_567.html
  • %HOMEPATH%\desktop\troll_message_568.html
  • %HOMEPATH%\desktop\troll_message_569.html
  • %HOMEPATH%\desktop\troll_message_570.html
  • %HOMEPATH%\desktop\troll_message_571.html
  • %HOMEPATH%\desktop\troll_message_572.html
  • %HOMEPATH%\desktop\troll_message_573.html
  • %HOMEPATH%\desktop\troll_message_574.html
  • %HOMEPATH%\desktop\troll_message_575.html
  • %HOMEPATH%\desktop\troll_message_576.html
  • %HOMEPATH%\desktop\troll_message_577.html
  • %HOMEPATH%\desktop\troll_message_578.html
  • %HOMEPATH%\desktop\troll_message_579.html
  • %HOMEPATH%\desktop\troll_message_580.html
  • %HOMEPATH%\desktop\troll_message_581.html
  • %HOMEPATH%\desktop\troll_message_582.html
  • %HOMEPATH%\desktop\troll_message_583.html
  • %HOMEPATH%\desktop\troll_message_584.html
  • %HOMEPATH%\desktop\troll_message_585.html
  • %HOMEPATH%\desktop\troll_message_586.html
  • %HOMEPATH%\desktop\troll_message_587.html
  • %HOMEPATH%\desktop\troll_message_588.html
  • %HOMEPATH%\desktop\troll_message_589.html
  • %HOMEPATH%\desktop\troll_message_590.html
  • %HOMEPATH%\desktop\troll_message_591.html
  • %HOMEPATH%\desktop\troll_message_592.html
  • %TEMP%\hzf0gdv_
  • %HOMEPATH%\desktop\troll_message_593.html
  • %HOMEPATH%\desktop\troll_message_594.html
  • %HOMEPATH%\desktop\troll_message_595.html
  • %HOMEPATH%\desktop\troll_message_596.html
  • %HOMEPATH%\desktop\troll_message_597.html
  • %HOMEPATH%\desktop\troll_message_598.html
  • %HOMEPATH%\desktop\troll_message_599.html
  • %HOMEPATH%\desktop\troll_message_600.html
  • %HOMEPATH%\desktop\troll_message_601.html
  • %HOMEPATH%\desktop\troll_message_602.html
  • %HOMEPATH%\desktop\troll_message_603.html
  • %HOMEPATH%\desktop\troll_message_604.html
  • %HOMEPATH%\desktop\troll_message_605.html
  • %HOMEPATH%\desktop\troll_message_606.html
  • %HOMEPATH%\desktop\troll_message_607.html
  • %HOMEPATH%\desktop\troll_message_608.html
  • %HOMEPATH%\desktop\troll_message_609.html
  • %HOMEPATH%\desktop\troll_message_610.html
  • %HOMEPATH%\desktop\troll_message_611.html
  • %HOMEPATH%\desktop\troll_message_612.html
  • %HOMEPATH%\desktop\troll_message_613.html
  • %HOMEPATH%\desktop\troll_message_614.html
  • %HOMEPATH%\desktop\troll_message_615.html
  • %HOMEPATH%\desktop\troll_message_616.html
  • %HOMEPATH%\desktop\troll_message_617.html
  • %HOMEPATH%\desktop\troll_message_618.html
  • %HOMEPATH%\desktop\troll_message_619.html
  • %HOMEPATH%\desktop\troll_message_620.html
  • %HOMEPATH%\desktop\troll_message_621.html
  • %HOMEPATH%\desktop\troll_message_622.html
  • %HOMEPATH%\desktop\troll_message_623.html
  • %HOMEPATH%\desktop\troll_message_624.html
  • %HOMEPATH%\desktop\troll_message_625.html
  • %HOMEPATH%\desktop\troll_message_626.html
  • %HOMEPATH%\desktop\troll_message_627.html
  • %HOMEPATH%\desktop\troll_message_628.html
  • %HOMEPATH%\desktop\troll_message_629.html
  • %HOMEPATH%\desktop\troll_message_630.html
  • %HOMEPATH%\desktop\troll_message_631.html
  • %HOMEPATH%\desktop\troll_message_632.html
  • %HOMEPATH%\desktop\troll_message_633.html
  • %HOMEPATH%\desktop\troll_message_634.html
  • %HOMEPATH%\desktop\troll_message_635.html
  • %HOMEPATH%\desktop\troll_message_636.html
  • %HOMEPATH%\desktop\troll_message_637.html
  • %HOMEPATH%\desktop\troll_message_638.html
  • %HOMEPATH%\desktop\troll_message_639.html
  • %HOMEPATH%\desktop\troll_message_640.html
  • %HOMEPATH%\desktop\troll_message_641.html
  • %HOMEPATH%\desktop\troll_message_642.html
  • %HOMEPATH%\desktop\troll_message_643.html
  • %HOMEPATH%\desktop\troll_message_644.html
  • %HOMEPATH%\desktop\troll_message_645.html
  • %HOMEPATH%\desktop\troll_message_646.html
  • %HOMEPATH%\desktop\troll_message_647.html
  • %HOMEPATH%\desktop\troll_message_648.html
  • %HOMEPATH%\desktop\troll_message_649.html
  • %HOMEPATH%\desktop\troll_message_650.html
  • %HOMEPATH%\desktop\troll_message_651.html
  • %HOMEPATH%\desktop\troll_message_652.html
  • %HOMEPATH%\desktop\troll_message_653.html
  • %HOMEPATH%\desktop\troll_message_654.html
  • %HOMEPATH%\desktop\troll_message_655.html
  • %HOMEPATH%\desktop\troll_message_656.html
  • %HOMEPATH%\desktop\troll_message_657.html
  • %HOMEPATH%\desktop\troll_message_658.html
  • %HOMEPATH%\desktop\troll_message_659.html
  • %HOMEPATH%\desktop\troll_message_660.html
  • %HOMEPATH%\desktop\troll_message_661.html
  • %HOMEPATH%\desktop\troll_message_662.html
  • %HOMEPATH%\desktop\troll_message_663.html
  • %HOMEPATH%\desktop\troll_message_664.html
  • %HOMEPATH%\desktop\troll_message_665.html
  • %HOMEPATH%\desktop\troll_message_666.html
  • %HOMEPATH%\desktop\troll_message_667.html
  • %HOMEPATH%\desktop\troll_message_668.html
  • %HOMEPATH%\desktop\troll_message_669.html
  • %HOMEPATH%\desktop\troll_message_670.html
  • %HOMEPATH%\desktop\troll_message_671.html
  • %HOMEPATH%\desktop\troll_message_672.html
  • %HOMEPATH%\desktop\troll_message_673.html
  • %HOMEPATH%\desktop\troll_message_674.html
  • %HOMEPATH%\desktop\troll_message_675.html
  • %HOMEPATH%\desktop\troll_message_676.html
  • %HOMEPATH%\desktop\troll_message_677.html
  • %HOMEPATH%\desktop\troll_message_678.html
  • %HOMEPATH%\desktop\troll_message_679.html
  • %HOMEPATH%\desktop\troll_message_680.html
  • %HOMEPATH%\desktop\troll_message_681.html
  • %HOMEPATH%\desktop\troll_message_682.html
  • %HOMEPATH%\desktop\troll_message_683.html
  • %HOMEPATH%\desktop\troll_message_684.html
  • %HOMEPATH%\desktop\troll_message_685.html
  • %HOMEPATH%\desktop\troll_message_686.html
  • %HOMEPATH%\desktop\troll_message_687.html
  • %HOMEPATH%\desktop\troll_message_688.html
  • %HOMEPATH%\desktop\troll_message_689.html
  • %HOMEPATH%\desktop\troll_message_690.html
  • %HOMEPATH%\desktop\troll_message_691.html
  • %HOMEPATH%\desktop\troll_message_692.html
  • %HOMEPATH%\desktop\troll_message_693.html
  • %HOMEPATH%\desktop\troll_message_694.html
  • %HOMEPATH%\desktop\troll_message_695.html
  • %HOMEPATH%\desktop\troll_message_696.html
  • %HOMEPATH%\desktop\troll_message_697.html
  • %HOMEPATH%\desktop\troll_message_698.html
  • %HOMEPATH%\desktop\troll_message_699.html
  • %HOMEPATH%\desktop\troll_message_700.html
  • %HOMEPATH%\desktop\troll_message_701.html
  • %HOMEPATH%\desktop\troll_message_702.html
  • %HOMEPATH%\desktop\troll_message_703.html
  • %HOMEPATH%\desktop\troll_message_704.html
  • %HOMEPATH%\desktop\troll_message_705.html
  • %HOMEPATH%\desktop\troll_message_706.html
  • %HOMEPATH%\desktop\troll_message_707.html
  • %HOMEPATH%\desktop\troll_message_708.html
  • %HOMEPATH%\desktop\troll_message_709.html
  • %HOMEPATH%\desktop\troll_message_710.html
  • %HOMEPATH%\desktop\troll_message_711.html
  • %HOMEPATH%\desktop\troll_message_712.html
  • %HOMEPATH%\desktop\troll_message_713.html
  • %HOMEPATH%\desktop\troll_message_714.html
  • %HOMEPATH%\desktop\troll_message_715.html
  • %HOMEPATH%\desktop\troll_message_716.html
  • %HOMEPATH%\desktop\troll_message_717.html
  • %HOMEPATH%\desktop\troll_message_718.html
  • %HOMEPATH%\desktop\troll_message_719.html
  • %HOMEPATH%\desktop\troll_message_720.html
  • %HOMEPATH%\desktop\troll_message_721.html
  • %HOMEPATH%\desktop\troll_message_722.html
  • %HOMEPATH%\desktop\troll_message_723.html
  • %HOMEPATH%\desktop\troll_message_724.html
  • %HOMEPATH%\desktop\troll_message_725.html
  • %HOMEPATH%\desktop\troll_message_726.html
  • %HOMEPATH%\desktop\troll_message_727.html
  • %HOMEPATH%\desktop\troll_message_728.html
  • %HOMEPATH%\desktop\troll_message_729.html
  • %HOMEPATH%\desktop\troll_message_730.html
  • %HOMEPATH%\desktop\troll_message_731.html
  • %HOMEPATH%\desktop\troll_message_732.html
  • %HOMEPATH%\desktop\troll_message_733.html
  • %HOMEPATH%\desktop\troll_message_734.html
  • %HOMEPATH%\desktop\troll_message_735.html
  • %HOMEPATH%\desktop\troll_message_736.html
  • %HOMEPATH%\desktop\troll_message_737.html
  • %HOMEPATH%\desktop\troll_message_738.html
  • %HOMEPATH%\desktop\troll_message_739.html
  • %HOMEPATH%\desktop\troll_message_740.html
  • %HOMEPATH%\desktop\troll_message_741.html
  • %HOMEPATH%\desktop\troll_message_742.html
  • %HOMEPATH%\desktop\troll_message_743.html
  • %HOMEPATH%\desktop\troll_message_744.html
  • %HOMEPATH%\desktop\troll_message_745.html
  • %HOMEPATH%\desktop\troll_message_746.html
  • %HOMEPATH%\desktop\troll_message_747.html
  • %HOMEPATH%\desktop\troll_message_748.html
  • %HOMEPATH%\desktop\troll_message_749.html
  • %HOMEPATH%\desktop\troll_message_750.html
  • %HOMEPATH%\desktop\troll_message_751.html
  • %HOMEPATH%\desktop\troll_message_752.html
  • %HOMEPATH%\desktop\troll_message_753.html
  • %HOMEPATH%\desktop\troll_message_754.html
  • %HOMEPATH%\desktop\troll_message_755.html
  • %HOMEPATH%\desktop\troll_message_756.html
  • %HOMEPATH%\desktop\troll_message_757.html
  • %HOMEPATH%\desktop\troll_message_758.html
  • %HOMEPATH%\desktop\troll_message_759.html
  • %HOMEPATH%\desktop\troll_message_760.html
  • %HOMEPATH%\desktop\troll_message_761.html
  • %HOMEPATH%\desktop\troll_message_762.html
  • %HOMEPATH%\desktop\troll_message_763.html
  • %HOMEPATH%\desktop\troll_message_764.html
  • %HOMEPATH%\desktop\troll_message_765.html
  • %HOMEPATH%\desktop\troll_message_766.html
  • %HOMEPATH%\desktop\troll_message_767.html
  • %HOMEPATH%\desktop\troll_message_768.html
  • %HOMEPATH%\desktop\troll_message_769.html
  • %HOMEPATH%\desktop\troll_message_770.html
  • %HOMEPATH%\desktop\troll_message_771.html
  • %HOMEPATH%\desktop\troll_message_772.html
  • %HOMEPATH%\desktop\troll_message_773.html
  • %HOMEPATH%\desktop\troll_message_774.html
  • %HOMEPATH%\desktop\troll_message_775.html
  • %HOMEPATH%\desktop\troll_message_776.html
  • %HOMEPATH%\desktop\troll_message_777.html
  • %HOMEPATH%\desktop\troll_message_778.html
  • %HOMEPATH%\desktop\troll_message_779.html
  • %HOMEPATH%\desktop\troll_message_780.html
  • %HOMEPATH%\desktop\troll_message_781.html
  • %HOMEPATH%\desktop\troll_message_782.html
  • %HOMEPATH%\desktop\troll_message_783.html
  • %HOMEPATH%\desktop\troll_message_784.html
  • %HOMEPATH%\desktop\troll_message_785.html
  • %HOMEPATH%\desktop\troll_message_786.html
  • %HOMEPATH%\desktop\troll_message_787.html
  • %HOMEPATH%\desktop\troll_message_788.html
  • %HOMEPATH%\desktop\troll_message_789.html
  • %HOMEPATH%\desktop\troll_message_790.html
  • %HOMEPATH%\desktop\troll_message_791.html
  • %HOMEPATH%\desktop\troll_message_792.html
  • %HOMEPATH%\desktop\troll_message_793.html
  • %HOMEPATH%\desktop\troll_message_794.html
  • %HOMEPATH%\desktop\troll_message_795.html
  • %HOMEPATH%\desktop\troll_message_796.html
  • %HOMEPATH%\desktop\troll_message_797.html
  • %HOMEPATH%\desktop\troll_message_798.html
  • %HOMEPATH%\desktop\troll_message_799.html
  • %HOMEPATH%\desktop\troll_message_800.html
  • %HOMEPATH%\desktop\troll_message_801.html
  • %HOMEPATH%\desktop\troll_message_802.html
  • %HOMEPATH%\desktop\troll_message_803.html
  • %HOMEPATH%\desktop\troll_message_804.html
  • %HOMEPATH%\desktop\troll_message_805.html
  • %HOMEPATH%\desktop\troll_message_806.html
  • %HOMEPATH%\desktop\troll_message_807.html
  • %HOMEPATH%\desktop\troll_message_808.html
  • %HOMEPATH%\desktop\troll_message_809.html
  • %HOMEPATH%\desktop\troll_message_810.html
  • %HOMEPATH%\desktop\troll_message_811.html
  • %HOMEPATH%\desktop\troll_message_812.html
  • %HOMEPATH%\desktop\troll_message_813.html
  • %HOMEPATH%\desktop\troll_message_814.html
  • %HOMEPATH%\desktop\troll_message_815.html
  • %HOMEPATH%\desktop\troll_message_816.html
  • %HOMEPATH%\desktop\troll_message_817.html
  • %HOMEPATH%\desktop\troll_message_818.html
  • %HOMEPATH%\desktop\troll_message_819.html
  • %HOMEPATH%\desktop\troll_message_820.html
  • %HOMEPATH%\desktop\troll_message_821.html
  • %HOMEPATH%\desktop\troll_message_822.html
  • %HOMEPATH%\desktop\troll_message_823.html
  • %HOMEPATH%\desktop\troll_message_824.html
  • %HOMEPATH%\desktop\troll_message_825.html
  • %HOMEPATH%\desktop\troll_message_826.html
  • %HOMEPATH%\desktop\troll_message_827.html
  • %HOMEPATH%\desktop\troll_message_828.html
  • %HOMEPATH%\desktop\troll_message_829.html
  • %HOMEPATH%\desktop\troll_message_830.html
  • %HOMEPATH%\desktop\troll_message_831.html
  • %HOMEPATH%\desktop\troll_message_832.html
  • %HOMEPATH%\desktop\troll_message_833.html
  • %HOMEPATH%\desktop\troll_message_834.html
  • %HOMEPATH%\desktop\troll_message_835.html
  • %HOMEPATH%\desktop\troll_message_836.html
  • %HOMEPATH%\desktop\troll_message_837.html
  • %HOMEPATH%\desktop\troll_message_838.html
  • %HOMEPATH%\desktop\troll_message_839.html
  • %HOMEPATH%\desktop\troll_message_840.html
  • %HOMEPATH%\desktop\troll_message_841.html
  • %HOMEPATH%\desktop\troll_message_842.html
  • %HOMEPATH%\desktop\troll_message_843.html
  • %HOMEPATH%\desktop\troll_message_844.html
  • %HOMEPATH%\desktop\troll_message_845.html
  • %HOMEPATH%\desktop\troll_message_846.html
  • %HOMEPATH%\desktop\troll_message_847.html
  • %HOMEPATH%\desktop\troll_message_848.html
  • %HOMEPATH%\desktop\troll_message_849.html
  • %HOMEPATH%\desktop\troll_message_850.html
  • %HOMEPATH%\desktop\troll_message_851.html
  • %HOMEPATH%\desktop\troll_message_852.html
  • %HOMEPATH%\desktop\troll_message_853.html
  • %HOMEPATH%\desktop\troll_message_854.html
  • %HOMEPATH%\desktop\troll_message_855.html
  • %HOMEPATH%\desktop\troll_message_856.html
  • %HOMEPATH%\desktop\troll_message_857.html
  • %HOMEPATH%\desktop\troll_message_858.html
  • %HOMEPATH%\desktop\troll_message_859.html
  • %HOMEPATH%\desktop\troll_message_860.html
  • %HOMEPATH%\desktop\troll_message_861.html
  • %HOMEPATH%\desktop\troll_message_862.html
  • %HOMEPATH%\desktop\troll_message_863.html
  • %HOMEPATH%\desktop\troll_message_864.html
  • %HOMEPATH%\desktop\troll_message_865.html
  • %HOMEPATH%\desktop\troll_message_866.html
  • %HOMEPATH%\desktop\troll_message_867.html
  • %HOMEPATH%\desktop\troll_message_868.html
  • %HOMEPATH%\desktop\troll_message_869.html
  • %HOMEPATH%\desktop\troll_message_870.html
  • %HOMEPATH%\desktop\troll_message_871.html
  • %HOMEPATH%\desktop\troll_message_872.html
  • %HOMEPATH%\desktop\troll_message_873.html
  • %HOMEPATH%\desktop\troll_message_874.html
  • %HOMEPATH%\desktop\troll_message_875.html
  • %HOMEPATH%\desktop\troll_message_876.html
  • %HOMEPATH%\desktop\troll_message_877.html
  • %HOMEPATH%\desktop\troll_message_878.html
  • %HOMEPATH%\desktop\troll_message_879.html
  • %HOMEPATH%\desktop\troll_message_880.html
  • %HOMEPATH%\desktop\troll_message_881.html
  • %HOMEPATH%\desktop\troll_message_882.html
  • %HOMEPATH%\desktop\troll_message_883.html
  • %HOMEPATH%\desktop\troll_message_884.html
  • %HOMEPATH%\desktop\troll_message_885.html
  • %HOMEPATH%\desktop\troll_message_886.html
  • %HOMEPATH%\desktop\troll_message_887.html
  • %HOMEPATH%\desktop\troll_message_888.html
  • %HOMEPATH%\desktop\troll_message_889.html
  • %HOMEPATH%\desktop\troll_message_890.html
  • %HOMEPATH%\desktop\troll_message_891.html
  • %HOMEPATH%\desktop\troll_message_892.html
  • %HOMEPATH%\desktop\troll_message_893.html
  • %HOMEPATH%\desktop\troll_message_894.html
  • %HOMEPATH%\desktop\troll_message_895.html
  • %HOMEPATH%\desktop\troll_message_896.html
  • %HOMEPATH%\desktop\troll_message_897.html
  • %HOMEPATH%\desktop\troll_message_898.html
  • %HOMEPATH%\desktop\troll_message_899.html
  • %HOMEPATH%\desktop\troll_message_900.html
  • %HOMEPATH%\desktop\troll_message_901.html
  • %HOMEPATH%\desktop\troll_message_902.html
  • %HOMEPATH%\desktop\troll_message_903.html
  • %HOMEPATH%\desktop\troll_message_904.html
  • %HOMEPATH%\desktop\troll_message_905.html
  • %HOMEPATH%\desktop\troll_message_906.html
  • %HOMEPATH%\desktop\troll_message_907.html
  • %HOMEPATH%\desktop\troll_message_908.html
  • %HOMEPATH%\desktop\troll_message_909.html
  • %HOMEPATH%\desktop\troll_message_910.html
  • %HOMEPATH%\desktop\troll_message_911.html
  • %HOMEPATH%\desktop\troll_message_912.html
  • %HOMEPATH%\desktop\troll_message_913.html
  • %HOMEPATH%\desktop\troll_message_914.html
  • %HOMEPATH%\desktop\troll_message_915.html
  • %HOMEPATH%\desktop\troll_message_916.html
  • %HOMEPATH%\desktop\troll_message_917.html
  • %HOMEPATH%\desktop\troll_message_918.html
  • %HOMEPATH%\desktop\troll_message_919.html
  • %HOMEPATH%\desktop\troll_message_920.html
  • %HOMEPATH%\desktop\troll_message_921.html
  • %HOMEPATH%\desktop\troll_message_922.html
  • %HOMEPATH%\desktop\troll_message_923.html
  • %HOMEPATH%\desktop\troll_message_924.html
  • %HOMEPATH%\desktop\troll_message_925.html
  • %HOMEPATH%\desktop\troll_message_926.html
  • %HOMEPATH%\desktop\troll_message_927.html
  • %HOMEPATH%\desktop\troll_message_928.html
  • %HOMEPATH%\desktop\troll_message_929.html
  • %HOMEPATH%\desktop\troll_message_930.html
  • %HOMEPATH%\desktop\troll_message_931.html
  • %HOMEPATH%\desktop\troll_message_932.html
  • %HOMEPATH%\desktop\troll_message_933.html
  • %HOMEPATH%\desktop\troll_message_934.html
  • %HOMEPATH%\desktop\troll_message_935.html
  • %HOMEPATH%\desktop\troll_message_936.html
  • %HOMEPATH%\desktop\troll_message_937.html
  • %HOMEPATH%\desktop\troll_message_938.html
  • %HOMEPATH%\desktop\troll_message_939.html
  • %HOMEPATH%\desktop\troll_message_940.html
  • %HOMEPATH%\desktop\troll_message_941.html
  • %HOMEPATH%\desktop\troll_message_942.html
  • %HOMEPATH%\desktop\troll_message_943.html
  • %HOMEPATH%\desktop\troll_message_944.html
  • %HOMEPATH%\desktop\troll_message_945.html
  • %HOMEPATH%\desktop\troll_message_946.html
  • %HOMEPATH%\desktop\troll_message_947.html
  • %HOMEPATH%\desktop\troll_message_948.html
  • %HOMEPATH%\desktop\troll_message_949.html
  • %HOMEPATH%\desktop\troll_message_950.html
  • %HOMEPATH%\desktop\troll_message_951.html
  • %HOMEPATH%\desktop\troll_message_952.html
  • %HOMEPATH%\desktop\troll_message_953.html
  • %HOMEPATH%\desktop\troll_message_954.html
  • %HOMEPATH%\desktop\troll_message_955.html
  • %HOMEPATH%\desktop\troll_message_956.html
  • %HOMEPATH%\desktop\troll_message_957.html
  • %HOMEPATH%\desktop\troll_message_958.html
  • %HOMEPATH%\desktop\troll_message_959.html
  • %HOMEPATH%\desktop\troll_message_960.html
  • %HOMEPATH%\desktop\troll_message_961.html
  • %HOMEPATH%\desktop\troll_message_962.html
  • %HOMEPATH%\desktop\troll_message_963.html
  • %HOMEPATH%\desktop\troll_message_964.html
  • %HOMEPATH%\desktop\troll_message_965.html
  • %HOMEPATH%\desktop\troll_message_966.html
  • %HOMEPATH%\desktop\troll_message_967.html
  • %HOMEPATH%\desktop\troll_message_968.html
  • %HOMEPATH%\desktop\troll_message_969.html
  • %HOMEPATH%\desktop\troll_message_970.html
  • %HOMEPATH%\desktop\troll_message_971.html
  • %HOMEPATH%\desktop\troll_message_972.html
  • %HOMEPATH%\desktop\troll_message_973.html
  • %HOMEPATH%\desktop\troll_message_974.html
  • %HOMEPATH%\desktop\troll_message_975.html
  • %HOMEPATH%\desktop\troll_message_976.html
  • %HOMEPATH%\desktop\troll_message_977.html
  • %HOMEPATH%\desktop\troll_message_978.html
  • %HOMEPATH%\desktop\troll_message_979.html
  • %HOMEPATH%\desktop\troll_message_980.html
  • %HOMEPATH%\desktop\troll_message_981.html
  • %HOMEPATH%\desktop\troll_message_982.html
  • %HOMEPATH%\desktop\troll_message_983.html
  • %HOMEPATH%\desktop\troll_message_984.html
  • %HOMEPATH%\desktop\troll_message_985.html
  • %HOMEPATH%\desktop\troll_message_986.html
  • %HOMEPATH%\desktop\troll_message_987.html
  • %HOMEPATH%\desktop\troll_message_988.html
  • %HOMEPATH%\desktop\troll_message_989.html
  • %HOMEPATH%\desktop\troll_message_990.html
  • %HOMEPATH%\desktop\troll_message_991.html
  • %HOMEPATH%\desktop\troll_message_992.html
  • %HOMEPATH%\desktop\troll_message_993.html
  • %HOMEPATH%\desktop\troll_message_994.html
  • %HOMEPATH%\desktop\troll_message_995.html
  • %HOMEPATH%\desktop\troll_message_996.html
  • %HOMEPATH%\desktop\troll_message_997.html
  • %HOMEPATH%\desktop\troll_message_998.html
  • %HOMEPATH%\desktop\troll_message_999.html
  • %HOMEPATH%\desktop\troll_message_1000.html
  • %HOMEPATH%\desktop\troll_message_1001.html
  • %HOMEPATH%\desktop\troll_message_1002.html
  • %HOMEPATH%\desktop\troll_message_1003.html
  • %HOMEPATH%\desktop\troll_message_1004.html
  • %HOMEPATH%\desktop\troll_message_1005.html
  • %HOMEPATH%\desktop\troll_message_1006.html
  • %HOMEPATH%\desktop\troll_message_1007.html
  • %HOMEPATH%\desktop\troll_message_1008.html
  • %HOMEPATH%\desktop\troll_message_1009.html
  • %HOMEPATH%\desktop\troll_message_1010.html
  • %HOMEPATH%\desktop\troll_message_1011.html
  • %HOMEPATH%\desktop\troll_message_1012.html
  • %HOMEPATH%\desktop\troll_message_1013.html
  • %HOMEPATH%\desktop\troll_message_1014.html
  • %HOMEPATH%\desktop\troll_message_1015.html
  • %HOMEPATH%\desktop\troll_message_1016.html
  • %HOMEPATH%\desktop\troll_message_1017.html
  • %HOMEPATH%\desktop\troll_message_1018.html
  • %HOMEPATH%\desktop\troll_message_1019.html
  • %HOMEPATH%\desktop\troll_message_1020.html
  • %HOMEPATH%\desktop\troll_message_1021.html
  • %HOMEPATH%\desktop\troll_message_1022.html
  • %HOMEPATH%\desktop\troll_message_1023.html
  • %HOMEPATH%\desktop\troll_message_1024.html
  • %HOMEPATH%\desktop\troll_message_1025.html
  • %HOMEPATH%\desktop\troll_message_1026.html
  • %HOMEPATH%\desktop\troll_message_1027.html
  • %HOMEPATH%\desktop\troll_message_1028.html
  • %HOMEPATH%\desktop\troll_message_1029.html
  • %HOMEPATH%\desktop\troll_message_1030.html
  • %HOMEPATH%\desktop\troll_message_1031.html
  • %HOMEPATH%\desktop\troll_message_1032.html
  • %HOMEPATH%\desktop\troll_message_1033.html
  • %HOMEPATH%\desktop\troll_message_1034.html
  • %HOMEPATH%\desktop\troll_message_1035.html
  • %HOMEPATH%\desktop\troll_message_1036.html
  • %HOMEPATH%\desktop\troll_message_1037.html
  • %HOMEPATH%\desktop\troll_message_1038.html
  • %HOMEPATH%\desktop\troll_message_1039.html
  • %HOMEPATH%\desktop\troll_message_1040.html
  • %HOMEPATH%\desktop\troll_message_1041.html
  • %HOMEPATH%\desktop\troll_message_1042.html
  • %HOMEPATH%\desktop\troll_message_1043.html
  • %HOMEPATH%\desktop\troll_message_1044.html
  • %HOMEPATH%\desktop\troll_message_1045.html
  • %HOMEPATH%\desktop\troll_message_1046.html
  • %HOMEPATH%\desktop\troll_message_1047.html
  • %HOMEPATH%\desktop\troll_message_1048.html
  • %HOMEPATH%\desktop\troll_message_1049.html
  • %HOMEPATH%\desktop\troll_message_1050.html
  • %HOMEPATH%\desktop\troll_message_1051.html
  • %HOMEPATH%\desktop\troll_message_1052.html
  • %HOMEPATH%\desktop\troll_message_1053.html
  • %HOMEPATH%\desktop\troll_message_1054.html
  • %HOMEPATH%\desktop\troll_message_1055.html
  • %HOMEPATH%\desktop\troll_message_1056.html
  • %HOMEPATH%\desktop\troll_message_1057.html
  • %HOMEPATH%\desktop\troll_message_1058.html
  • %HOMEPATH%\desktop\troll_message_1059.html
  • %HOMEPATH%\desktop\troll_message_1060.html
  • %HOMEPATH%\desktop\troll_message_1061.html
  • %HOMEPATH%\desktop\troll_message_1062.html
  • %HOMEPATH%\desktop\troll_message_1063.html
  • %HOMEPATH%\desktop\troll_message_1064.html
  • %HOMEPATH%\desktop\troll_message_1065.html
  • %HOMEPATH%\desktop\troll_message_1066.html
  • %HOMEPATH%\desktop\troll_message_1067.html
  • %HOMEPATH%\desktop\troll_message_1068.html
  • %HOMEPATH%\desktop\troll_message_1069.html
  • %HOMEPATH%\desktop\troll_message_1070.html
  • %HOMEPATH%\desktop\troll_message_1071.html
  • %HOMEPATH%\desktop\troll_message_1072.html
  • %HOMEPATH%\desktop\troll_message_1073.html
  • %HOMEPATH%\desktop\troll_message_1074.html
  • %HOMEPATH%\desktop\troll_message_1075.html
  • %HOMEPATH%\desktop\troll_message_1076.html
  • %HOMEPATH%\desktop\troll_message_1077.html
  • %HOMEPATH%\desktop\troll_message_1078.html
  • %HOMEPATH%\desktop\troll_message_1079.html
  • %HOMEPATH%\desktop\troll_message_1080.html
  • %HOMEPATH%\desktop\troll_message_1081.html
  • %HOMEPATH%\desktop\troll_message_1082.html
  • %HOMEPATH%\desktop\troll_message_1083.html
  • %HOMEPATH%\desktop\troll_message_1084.html
  • %HOMEPATH%\desktop\troll_message_1085.html
  • %HOMEPATH%\desktop\troll_message_1086.html
  • %HOMEPATH%\desktop\troll_message_1087.html
  • %HOMEPATH%\desktop\troll_message_1088.html
  • %HOMEPATH%\desktop\troll_message_1089.html
  • %HOMEPATH%\desktop\troll_message_1090.html
  • %HOMEPATH%\desktop\troll_message_1091.html
  • %HOMEPATH%\desktop\troll_message_1092.html
  • %HOMEPATH%\desktop\troll_message_1093.html
  • %HOMEPATH%\desktop\troll_message_1094.html
  • %HOMEPATH%\desktop\troll_message_1095.html
  • %HOMEPATH%\desktop\troll_message_1096.html
  • %HOMEPATH%\desktop\troll_message_1097.html
  • %HOMEPATH%\desktop\troll_message_1098.html
  • %HOMEPATH%\desktop\troll_message_1099.html
  • %HOMEPATH%\desktop\troll_message_1100.html
  • %HOMEPATH%\desktop\troll_message_1101.html
  • %HOMEPATH%\desktop\troll_message_1102.html
  • %HOMEPATH%\desktop\troll_message_1103.html
  • %HOMEPATH%\desktop\troll_message_1104.html
  • %HOMEPATH%\desktop\troll_message_1105.html
  • %HOMEPATH%\desktop\troll_message_1106.html
  • %HOMEPATH%\desktop\troll_message_1107.html
  • %HOMEPATH%\desktop\troll_message_1108.html
  • %HOMEPATH%\desktop\troll_message_1109.html
  • %HOMEPATH%\desktop\troll_message_1110.html
  • %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a090637-d68.pma
Deletes following files that it created itself
  • %TEMP%\dwvb8j8c
  • %TEMP%\hy_uoo37
  • %TEMP%\_mei14762\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei14762\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei14762\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei14762\base_library.zip
  • %TEMP%\_mei14762\libcrypto-1_1.dll
  • %TEMP%\_mei14762\python310.dll
  • %TEMP%\_mei14762\select.pyd
  • %TEMP%\_mei14762\ucrtbase.dll
  • %TEMP%\_mei14762\unicodedata.pyd
  • %TEMP%\_mei14762\vcruntime140.dll
  • %TEMP%\_mei14762\_bz2.pyd
  • %TEMP%\_mei14762\_decimal.pyd
  • %TEMP%\_mei14762\_hashlib.pyd
  • %TEMP%\_mei14762\_lzma.pyd
  • %TEMP%\_mei14762\_socket.pyd
  • %TEMP%\_mei21162\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei21162\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei21162\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei21162\base_library.zip
  • %TEMP%\_mei21162\libcrypto-1_1.dll
  • %TEMP%\_mei21162\libffi-7.dll
  • %TEMP%\_mei21162\python310.dll
  • %TEMP%\_mei21162\select.pyd
  • %TEMP%\_mei21162\ucrtbase.dll
  • %TEMP%\_mei21162\unicodedata.pyd
  • %TEMP%\_mei21162\vcruntime140.dll
  • %TEMP%\_mei21162\_bz2.pyd
  • %TEMP%\_mei21162\_ctypes.pyd
  • %TEMP%\_mei21162\_decimal.pyd
  • %TEMP%\_mei21162\_hashlib.pyd
  • %TEMP%\_mei21162\_lzma.pyd
  • %TEMP%\_mei21162\_socket.pyd
  • %TEMP%\logw9kau
  • %TEMP%\_mei24242\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei24242\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei24242\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei24242\base_library.zip
  • %TEMP%\_mei24242\libcrypto-1_1.dll
  • %TEMP%\_mei24242\python310.dll
  • %TEMP%\_mei24242\select.pyd
  • %TEMP%\_mei24242\ucrtbase.dll
  • %TEMP%\_mei24242\unicodedata.pyd
  • %TEMP%\_mei24242\vcruntime140.dll
  • %TEMP%\_mei24242\_bz2.pyd
  • %TEMP%\_mei24242\_decimal.pyd
  • %TEMP%\_mei24242\_hashlib.pyd
  • %TEMP%\_mei24242\_lzma.pyd
  • %TEMP%\_mei24242\_socket.pyd
  • %TEMP%\07k7u9ng
  • %TEMP%\_mei55882\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei55882\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei55882\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei55882\base_library.zip
  • %TEMP%\_mei55882\libcrypto-1_1.dll
  • %TEMP%\_mei55882\python310.dll
  • %TEMP%\_mei55882\select.pyd
  • %TEMP%\_mei55882\ucrtbase.dll
  • %TEMP%\_mei55882\unicodedata.pyd
  • %TEMP%\_mei55882\vcruntime140.dll
  • %TEMP%\_mei55882\_bz2.pyd
  • %TEMP%\_mei55882\_decimal.pyd
  • %TEMP%\_mei55882\_hashlib.pyd
  • %TEMP%\_mei55882\_lzma.pyd
  • %TEMP%\_mei55882\_socket.pyd
  • %TEMP%\cha11vj6
  • %TEMP%\_mei16842\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei16842\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei16842\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei16842\base_library.zip
  • %TEMP%\_mei16842\libcrypto-1_1.dll
  • %TEMP%\_mei16842\python310.dll
  • %TEMP%\_mei16842\select.pyd
  • %TEMP%\_mei16842\ucrtbase.dll
  • %TEMP%\_mei16842\unicodedata.pyd
  • %TEMP%\_mei16842\vcruntime140.dll
  • %TEMP%\_mei16842\_bz2.pyd
  • %TEMP%\_mei16842\_decimal.pyd
  • %TEMP%\_mei16842\_hashlib.pyd
  • %TEMP%\_mei16842\_lzma.pyd
  • %TEMP%\_mei16842\_socket.pyd
  • %TEMP%\5bpt2exz
  • %TEMP%\_mei54722\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei54722\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei54722\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei54722\base_library.zip
  • %TEMP%\_mei54722\libcrypto-1_1.dll
  • %TEMP%\_mei54722\python310.dll
  • %TEMP%\_mei54722\select.pyd
  • %TEMP%\_mei54722\ucrtbase.dll
  • %TEMP%\_mei54722\unicodedata.pyd
  • %TEMP%\_mei54722\vcruntime140.dll
  • %TEMP%\_mei54722\_bz2.pyd
  • %TEMP%\_mei54722\_decimal.pyd
  • %TEMP%\_mei54722\_hashlib.pyd
  • %TEMP%\_mei54722\_lzma.pyd
  • %TEMP%\_mei54722\_socket.pyd
  • %TEMP%\g2ow5_kt
  • %TEMP%\_mei61042\api-ms-win-core-console-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-datetime-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-debug-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-errorhandling-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-fibers-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-file-l2-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-handle-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-heap-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-interlocked-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-libraryloader-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-localization-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-memory-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-namedpipe-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processenvironment-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processthreads-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-processthreads-l1-1-1.dll
  • %TEMP%\_mei61042\api-ms-win-core-profile-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-string-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-synch-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-synch-l1-2-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-sysinfo-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-timezone-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-core-util-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-conio-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-convert-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-environment-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-filesystem-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-heap-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-locale-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-math-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-process-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-runtime-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-stdio-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-string-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-time-l1-1-0.dll
  • %TEMP%\_mei61042\api-ms-win-crt-utility-l1-1-0.dll
  • %TEMP%\_mei61042\base_library.zip
  • %TEMP%\_mei61042\libcrypto-1_1.dll
  • %TEMP%\_mei61042\python310.dll
  • %TEMP%\_mei61042\select.pyd
  • %TEMP%\_mei61042\ucrtbase.dll
  • %TEMP%\_mei61042\unicodedata.pyd
  • %TEMP%\_mei61042\vcruntime140.dll
  • %TEMP%\_mei61042\_bz2.pyd
  • %TEMP%\_mei61042\_decimal.pyd
  • %TEMP%\_mei61042\_hashlib.pyd
  • %TEMP%\_mei61042\_lzma.pyd
  • %TEMP%\_mei61042\_socket.pyd
  • %TEMP%\hzf0gdv_
Modifies the following files
  • %LOCALAPPDATA%\microsoft\edge\user data\last version
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: ''
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebCheckMonitor' WindowName: ''
  • ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Creates and executes the following
  • '%TEMP%\tmpa_cc1r02.exe'
  • '%TEMP%\tmp11so44j9.exe'
  • '<SYSTEM32>\wscript.exe' "%TEMP%\block.vbs"
  • '<SYSTEM32>\wscript.exe' "%TEMP%\block.vbs" runas
  • '%TEMP%\tmpmak5feak.exe'
  • '%TEMP%\tmpxwfd5e7_.exe'
  • '%TEMP%\tmp7xjg2exk.exe'
  • '%TEMP%\tmp84unprr0.exe'
  • '%TEMP%\tmptdocfwe2.exe'
  • '%TEMP%\tmp6c9ursf6.exe'
  • '%TEMP%\tmp6c9ursf6srv.exe'
  • '%ProgramFiles(x86)%\microsoft\desktoplayer.exe'
  • '%TEMP%\tmpxpnh1fb0.exe'
  • '%TEMP%\tmpd35en5y0.exe'
  • '%TEMP%\tmplblkymth.exe'
  • '%TEMP%\tmpv9jpoel1.exe'
Restarts the analyzed sample
Executes the following
  • '<SYSTEM32>\cmd.exe' /c wscript.exe "%TEMP%\block.vbs"
  • '%ProgramFiles%\internet explorer\iexplore.exe'
  • '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\bho\ie_to_edge_stub.exe' --from-ie-to-edge=3 --ie-frame-hwnd=501e8
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --from-ie-to-edge=3 --ie-frame-hwnd=501e8
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_1.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_2.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_3.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_4.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_5.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_6.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_7.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_8.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_9.txt
  • '<SYSTEM32>\notepad.exe' %HOMEPATH%\Desktop\fuck_you_10.txt
  • '<SYSTEM32>\cmd.exe' /c "powershell -command "Add-MpPreference -ExclusionPath "%TEMP%\tmplblkymth.exe"""
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_1.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_2.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_3.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_4.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_5.html
  • '<SYSTEM32>\cmd.exe' /c "powershell -command "Add-MpPreference -ExclusionProcess "tmplblkymth.exe"""
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_6.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_7.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_8.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_9.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_10.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_11.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_12.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_13.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_14.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_15.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_16.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_17.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_19.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_20.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_21.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_22.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_23.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_18.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_24.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_25.html
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --from-ie-to-edge=3 --ie-frame-hwnd=501e8 --flag-switches-begin --flag-switches-end --do-not-de-elevate
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument %HOMEPATH%\Desktop\troll_message_26.html
  • '<SYSTEM32>\taskkill.exe' /f /im taskmgr.exe' (with hidden window)
  • '<SYSTEM32>\cmd.exe' /c "powershell -command "Add-MpPreference -ExclusionPath "%TEMP%\tmplblkymth.exe"""' (with hidden window)
  • '<SYSTEM32>\cmd.exe' /c "powershell -command "Add-MpPreference -ExclusionProcess "tmplblkymth.exe"""' (with hidden window)
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --from-ie-to-edge=3 --ie-frame-hwnd=501e8 --flag-switches-begin --flag-switches-end --do-not-de-elevate' (with hidden window)

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке