Virus/Malware Undoubtedly. Added users, permission changes etc.

Joe G · 2017/01/02

I definitely have an issue with my laptop, it's a Toshiba Satellite. I have very little experience with Virus and Malware, because I've never had the issue before. I don't know the name of it or how to locate it, but here is the scan results.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
Ran by urmomma (administrator) on DESKTOP-JVNHDJP (02-01-2017 14:12:02)
Running from C:\Users\urmomma\Desktop
Loaded Profiles: urmomma (Available Profiles: urmomma)
Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
() C:\Windows\syswow64\NetUtils2016.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files (x86)\stockholders\liquefaction.exe
() C:\Program Files (x86)\Acquitted\ubud.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Search Module Ltd.) C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-26] (Microsoft Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [601944 2015-08-14] (Conexant Systems, Inc.)
HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools First\MMERefresh.exe
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954880 2015-10-08] (Synaptics Incorporated)
HKLM-x32\...\Run: [IseUI] => C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\Run: [liquefaction] => C:\Program Files (x86)\stockholders\liquefaction.exe [68902 2016-12-31] ()
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\Run: [punjab] => C:\Program Files (x86)\Acquitted\ubud.exe [10752 2016-12-31] ()
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [231936 2016-07-16] (Microsoft Corporation)
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b79fbbb2-77e4-434e-b944-7b3d565de85c}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1640489101-2928496805-630120535-1001 -> {1711FC25-F05A-40CE-B859-A0C1CF01FD18} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=86311516&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC06MWF927Q7JC%2Bvz1nQlLHMwtviL9EUtgITgklNAo9lSXbhb1a9i4VS3HuLyRnKVTxiSU3pwChgOr0E%2FnvEcB4xIE83wKB4h7%2F%2BeKJTf1M544eVO3pf%2FUvNfudUlCPoCcLiv%2BOYbehiQJu1k8SNJ7PjeNUDl67i9iIYz5LBDJFRcP90Ewy2wdBoOZ8H3hUxmsP46uhgTLCfE12czNpdYIzbgwPjZAgsMLuZ4DVIP6MiAQ%3D%3D&p={searchTerms}
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [No File]
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s=GCVztrmbl10AU,a6c2266d-4f6c-4f1f-93a6-4e42191c53c5,&vp=ch&prd=set_ch
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s=GCVztrmbl10AU,a6c2266d-4f6c-4f1f-93a6-4e42191c53c5,&vp=ch&prd=set_ch"
CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shyos&prd=set_ch&q={searchTerms}&s=GCVztrmbl10AU,a6c2266d-4f6c-4f1f-93a6-4e42191c53c5,
CHR DefaultSearchKeyword: Default -> www-searching.com
CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}
CHR Profile: C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default [2017-01-01]
CHR Extension: (Google Slides) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-23]
CHR Extension: (YouTube) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnlfjpnmidfimlkaohpidplnoimahfh [2016-11-25]
CHR Extension: (Google Docs) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-23]
CHR Extension: (Google Drive) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-23]
CHR Extension: (YouTube) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-23]
CHR Extension: (Google Sheets) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-23]
CHR Extension: (Google Docs Offline) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-23]
CHR Extension: (Gmail) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-23]
CHR Extension: (Chrome Media Router) - C:\Users\urmomma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 debugregsvc; C:\WINDOWS\System32\debugregsvc.dll [29184 2016-07-15] (Microsoft Corporation)
U3 DeveloperToolsService; C:\WINDOWS\System32\DeveloperToolsSvc.exe [104448 2016-07-15] (Microsoft Corporation)
R2 NetUtils2016srv; C:\WINDOWS\SysWOW64\NetUtils2016.exe [470592 2016-12-31] ()
R2 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe [3109888 2016-12-31] (Search Module Ltd.) [File not signed]
S3 SshBroker; C:\WINDOWS\System32\SshBroker.dll [360960 2016-07-15] (Microsoft Corporation)
S3 SshProxy; C:\WINDOWS\System32\SshProxy.dll [275456 2016-07-15] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255168 2015-10-08] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S4 WebManagement; C:\WINDOWS\system32\WebManagement.exe [1000448 2016-07-15] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 DigiRefresh; C:\Program Files\Avid\Pro Tools First\MMERefresh.exe -s [X]
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools First\digisptiservice64.exe" [X]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AmdAS4; C:\WINDOWS\System32\drivers\AmdAS4.sys [17640 2013-10-24] (Advanced Micro Devices, INC.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2015-07-28] (GEAR Software Inc.)
S3 GeneStor; C:\WINDOWS\System32\drivers\GeneStor.sys [105704 2013-08-16] (GenesysLogic)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [909944 2016-12-31] () <==== ATTENTION
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [5144064 2016-07-16] (Realtek Semiconductor Corporation )
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-22] (Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [34544 2013-08-22] (Synaptics Incorporated)
R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2016-12-31] ()
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [54424 2015-07-29] (Toshiba Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
NETSVC: debugregsvc -> C:\Windows\System32\debugregsvc.dll (Microsoft Corporation)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-02 14:12 - 2017-01-02 14:12 - 00011937 _____ C:\Users\urmomma\Desktop\FRST.txt
2017-01-02 14:11 - 2017-01-02 14:12 - 00000000 ____D C:\FRST
2017-01-02 14:08 - 2017-01-02 14:10 - 02418176 _____ (Farbar) C:\Users\urmomma\Desktop\FRST64.exe
2017-01-01 22:51 - 2017-01-01 22:51 - 00000000 __RSD C:\WINDOWS\system32\WindowsDevicePortal
2017-01-01 22:51 - 2017-01-01 22:51 - 00000000 ___RD C:\WINDOWS\WebManagement
2017-01-01 22:51 - 2016-07-15 19:28 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevToolsLauncher.exe
2017-01-01 22:51 - 2016-07-15 19:28 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\debugregsvcapi.dll
2017-01-01 22:51 - 2016-07-15 19:28 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperTools.ProxyStub.dll
2017-01-01 22:51 - 2016-07-15 19:27 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\debugregsvc.dll
2017-01-01 22:51 - 2016-07-15 19:26 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdp.dll
2017-01-01 22:51 - 2016-07-15 19:26 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshProxy.dll
2017-01-01 22:51 - 2016-07-15 19:26 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperToolsSvc.exe
2017-01-01 22:51 - 2016-07-15 19:26 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeployUtil.exe
2017-01-01 22:51 - 2016-07-15 19:25 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshSession.exe
2017-01-01 22:51 - 2016-07-15 19:25 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshSftp.exe
2017-01-01 22:51 - 2016-07-15 19:25 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SshBroker.dll
2017-01-01 22:51 - 2016-07-15 19:17 - 01000448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebManagement.exe
2017-01-01 19:50 - 2017-01-01 19:50 - 00003290 _____ C:\WINDOWS\System32\Tasks\{E46660F5-F040-4C07-87A7-2A59D24CFB4E}
2017-01-01 09:04 - 2017-01-01 09:04 - 00002259 _____ C:\WINDOWS\epplauncher.mif
2017-01-01 08:18 - 2017-01-01 10:54 - 00000000 ____D C:\Users\urmomma\AppData\Local\DailyBee
2017-01-01 07:56 - 2017-01-01 08:07 - 00000000 ____D C:\WINDOWS\Microsoft Antimalware
2017-01-01 07:42 - 2017-01-01 07:43 - 00000000 ____D C:\Program Files (x86)\ScreenShared
2017-01-01 05:46 - 2017-01-01 08:59 - 00000000 ____D C:\Users\urmomma\Desktop\Anti-Virus
2017-01-01 04:52 - 2017-01-01 04:52 - 00042168 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2017-01-01 04:19 - 2017-01-01 04:19 - 00001601 _____ C:\Users\urmomma\Desktop\Microsoft Edge.lnk
2016-12-31 20:47 - 2016-12-31 20:47 - 418942060 _____ C:\WINDOWS\MEMORY.DMP
2016-12-31 20:47 - 2016-12-31 20:47 - 00339156 _____ C:\WINDOWS\Minidump\123116-27812-01.dmp
2016-12-31 20:47 - 2016-12-31 20:47 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-31 20:36 - 2016-12-31 20:36 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-12-31 14:25 - 2017-01-02 13:36 - 00011054 _____ C:\WINDOWS\system32\tmplog.log
2016-12-31 14:25 - 2017-01-02 13:33 - 00006385 _____ C:\WINDOWS\SysWOW64\tmplog2.log
2016-12-31 14:25 - 2017-01-02 03:48 - 00625272 _____ C:\WINDOWS\system32\NetUtils2016.dll
2016-12-31 14:25 - 2016-12-31 14:25 - 00909944 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys
2016-12-31 14:25 - 2016-12-31 14:25 - 00470592 _____ C:\WINDOWS\SysWOW64\NetUtils2016.exe
2016-12-31 14:25 - 2016-12-31 14:25 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp
2016-12-31 14:25 - 2016-12-31 14:25 - 00000000 ____D C:\WINDOWS\system32\sstmp
2016-12-31 13:52 - 2016-12-31 13:54 - 00524288 ___SH C:\WINDOWS\system32\config\drivers{bed670fa-cf9a-11e6-8f79-78843c3588ea}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 13:52 - 2016-12-31 13:54 - 00524288 ___SH C:\WINDOWS\system32\config\drivers{bed670fa-cf9a-11e6-8f79-78843c3588ea}.TMContainer00000000000000000001.regtrans-ms
2016-12-31 13:52 - 2016-12-31 13:54 - 00065536 ___SH C:\WINDOWS\system32\config\drivers{bed670fa-cf9a-11e6-8f79-78843c3588ea}.TM.blf
2016-12-31 13:50 - 2016-12-31 13:54 - 00524288 ___SH C:\Users\urmomma\ntuser.dat{c562f883-cf96-11e6-8f77-78843c3588ea}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 13:50 - 2016-12-31 13:54 - 00524288 ___SH C:\Users\urmomma\ntuser.dat{c562f883-cf96-11e6-8f77-78843c3588ea}.TMContainer00000000000000000001.regtrans-ms
2016-12-31 13:50 - 2016-12-31 13:54 - 00065536 ___SH C:\Users\urmomma\ntuser.dat{c562f883-cf96-11e6-8f77-78843c3588ea}.TM.blf
2016-12-31 13:24 - 2016-12-31 13:26 - 00524288 ___SH C:\WINDOWS\system32\config\drivers{c562f7db-cf96-11e6-8f77-78843c3588ea}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 13:24 - 2016-12-31 13:26 - 00524288 ___SH C:\WINDOWS\system32\config\drivers{c562f7db-cf96-11e6-8f77-78843c3588ea}.TMContainer00000000000000000001.regtrans-ms
2016-12-31 13:24 - 2016-12-31 13:26 - 00065536 ___SH C:\WINDOWS\system32\config\drivers{c562f7db-cf96-11e6-8f77-78843c3588ea}.TM.blf
2016-12-31 13:22 - 2016-12-31 13:29 - 00524288 ___SH C:\Users\urmomma\ntuser.dat{c2ade1ac-cf89-11e6-8f77-78843c3588ea}.TMContainer00000000000000000002.regtrans-ms
2016-12-31 13:22 - 2016-12-31 13:29 - 00524288 ___SH C:\Users\urmomma\ntuser.dat{c2ade1ac-cf89-11e6-8f77-78843c3588ea}.TMContainer00000000000000000001.regtrans-ms
2016-12-31 13:22 - 2016-12-31 13:29 - 00065536 ___SH C:\Users\urmomma\ntuser.dat{c2ade1ac-cf89-11e6-8f77-78843c3588ea}.TM.blf
2016-12-31 12:11 - 2016-12-31 12:11 - 00003258 _____ C:\WINDOWS\System32\Tasks\{E48E24C1-AB2A-4C8A-99D9-189A77F5E71A}
2016-12-31 12:07 - 2016-12-31 12:07 - 00000046 _____ C:\WINDOWS\wininit.ini
2016-12-31 11:50 - 2016-12-31 11:50 - 00000258 __RSH C:\Users\urmomma\ntuser.pol
2016-12-31 11:46 - 2016-12-31 12:13 - 00000000 ____D C:\Program Files (x86)\COMODO
2016-12-31 11:45 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files\DF8HTZZFTP
2016-12-31 11:45 - 2016-12-31 12:07 - 00000000 ____D C:\Program Files\COMODO
2016-12-31 11:45 - 2016-12-31 11:46 - 00000000 ____D C:\ProgramData\COMODO
2016-12-31 11:45 - 2016-12-31 11:45 - 00000000 ____D C:\ProgramData\c5973fe9-7427-0
2016-12-31 11:44 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\vnlgp
2016-12-31 11:33 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserAir
2016-12-31 11:33 - 2016-12-31 11:31 - 00629760 _____ C:\Users\urmomma\AppData\Roaming\K-lottrax.exe
2016-12-31 11:32 - 2016-12-31 13:47 - 00000000 ____D C:\ProgramData\SearchModule
2016-12-31 11:32 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files\Common Files\Noobzo
2016-12-31 11:32 - 2016-12-31 13:32 - 00000000 ____D C:\Users\urmomma\AppData\Local\BrowserAir
2016-12-31 11:32 - 2016-12-31 12:04 - 00000000 ____D C:\Users\urmomma\AppData\Local\app
2016-12-31 11:32 - 2016-12-31 11:32 - 00004430 _____ C:\WINDOWS\System32\Tasks\SMW_UpdateTask_Time_333832363535363730372d374a55414134502a576c4a5a
2016-12-31 11:31 - 2016-12-31 14:53 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Interstatnogui
2016-12-31 11:31 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files\S5GTIEQMET
2016-12-31 11:31 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files (x86)\CleanBrowser
2016-12-31 11:31 - 2016-12-31 11:31 - 00439808 _____ C:\ProgramData\smp2.exe
2016-12-31 11:31 - 2016-12-31 11:31 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2016-12-31 11:31 - 2016-12-31 11:31 - 00140288 _____ C:\Users\urmomma\AppData\Roaming\Installer.dat
2016-12-31 11:31 - 2016-12-31 11:31 - 00016224 _____ C:\Users\urmomma\AppData\Roaming\InstallationConfiguration.xml
2016-12-31 11:31 - 2016-12-31 11:31 - 00000000 ____D C:\Users\urmomma\AppData\Local\CrashRpt
2016-12-31 11:31 - 2016-12-31 11:31 - 00000000 ____D C:\Microsoft
2016-12-31 11:30 - 2017-01-01 11:48 - 00000000 ____D C:\Program Files (x86)\A10AD740-1483209029-11E3-84FD-78843C3588EA
2016-12-31 11:30 - 2016-12-31 13:47 - 00000000 ___HD C:\Program Files (x86)\Acquitted
2016-12-31 11:30 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files\268Q6TJ7HN
2016-12-31 11:30 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files (x86)\stockholders
2016-12-31 11:30 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files (x86)\hopelessness
2016-12-31 11:30 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files (x86)\BestCleaner
2016-12-31 11:30 - 2016-12-31 11:30 - 00000000 _____ C:\TOSTACK
2016-12-31 11:29 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnonymizerGadget
2016-12-31 11:29 - 2016-12-31 11:29 - 00000000 ____D C:\Users\urmomma\AppData\Local\AnonymizerLauncher
2016-12-31 11:28 - 2016-12-31 21:19 - 00000000 ____D C:\Program Files (x86)\OneSystemCare
2016-12-31 11:28 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files (x86)\AnonymizerGadget
2016-12-31 11:28 - 2016-12-31 13:33 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\AGData
2016-12-31 11:28 - 2016-12-31 11:28 - 00190976 _____ C:\Users\urmomma\AppData\Local\wlitdo.dll
2016-12-31 11:28 - 2016-12-31 11:28 - 00002560 _____ C:\Users\urmomma\AppData\Local\uninstallro.exe
2016-12-31 11:28 - 2016-12-31 11:28 - 00000000 ____D C:\ProgramData\0b60a19d-7673-0
2016-12-31 11:28 - 2016-12-31 11:28 - 00000000 ____D C:\ProgramData\0b60a19d-4533-1
2016-12-31 11:27 - 2016-12-31 11:27 - 00594944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\libeay32.dll
2016-12-31 11:27 - 2016-12-31 11:27 - 00152576 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\SysWOW64\ssleay32.dll
2016-12-31 04:45 - 2016-12-31 04:45 - 00010752 _____ C:\WINDOWS\throb.exe
2016-12-31 04:45 - 2016-12-31 04:45 - 00010752 _____ C:\Users\urmomma\AppData\Local\ubud.exe
2016-12-29 18:55 - 2016-12-31 13:33 - 00000000 ____D C:\WINDOWS\Cnxt
2016-12-29 18:54 - 2016-12-31 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant
2016-12-29 18:54 - 2016-12-29 18:54 - 00001961 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SmartAudio.lnk
2016-12-29 18:54 - 2015-02-05 16:04 - 00225496 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe
2016-12-29 18:53 - 2016-12-29 18:53 - 01701376 _____ (TODO: <Company name>) C:\WINDOWS\SysWOW64\RebootPrompt.exe
2016-12-29 10:34 - 2016-12-30 12:03 - 00000000 ____D C:\Users\urmomma\Documents\Studio One
2016-12-29 10:25 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\Downloads\Studio One 3
2016-12-29 10:25 - 2016-12-29 10:25 - 00000826 _____ C:\Users\Public\Desktop\Studio One 3 x64.lnk
2016-12-29 10:19 - 2016-12-29 10:19 - 99547505 _____ C:\Users\urmomma\Downloads\PreSonus Studio One Pro 3.2 + KeyGen x64 - softasm.com.rar
2016-12-29 09:48 - 2016-12-29 10:25 - 00000856 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio One 3 x64.lnk
2016-12-29 09:27 - 2016-12-29 09:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\tixati
2016-12-29 09:01 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tixati
2016-12-29 09:00 - 2016-12-31 13:47 - 00000000 ____D C:\Program Files\tixati
2016-12-29 08:59 - 2016-12-31 13:47 - 00000000 ____D C:\Users\urmomma\AppData\Local\Bazwise
2016-12-29 08:59 - 2016-12-29 08:59 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Bazwise
2016-12-29 08:58 - 2016-12-31 13:50 - 00000000 ____D C:\Program Files (x86)\Zipware
2016-12-29 08:58 - 2016-12-31 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zipware
2016-12-29 08:58 - 2016-12-29 08:58 - 00000000 ____D C:\ProgramData\Zipware
2016-12-29 03:17 - 2016-12-29 03:17 - 00283648 _____ C:\WINDOWS\system32\bi3.exe
2016-12-26 07:58 - 2017-01-01 12:21 - 00000000 ____D C:\Users\urmomma\Desktop\Studio One Joe
2016-12-26 07:30 - 2016-12-26 07:30 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-12-26 07:30 - 2015-07-28 08:56 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2016-12-26 06:56 - 2016-12-26 07:16 - 00000854 _____ C:\Users\urmomma\.lmmsrc.xml
2016-12-26 05:59 - 2016-12-26 05:59 - 00000735 _____ C:\Users\urmomma\AppData\Local\recently-used.xbel
2016-12-26 05:37 - 2016-12-26 05:39 - 00000099 _____ C:\WINDOWS\Reimage.ini
2016-12-25 23:04 - 2016-12-26 05:59 - 00000000 ____D C:\Users\urmomma\AppData\Local\gtk-2.0
2016-12-25 22:53 - 2016-12-25 16:51 - 00000000 ____D C:\Users\urmomma\AppData\Local\Ardour5
2016-12-25 21:37 - 2016-12-25 21:37 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-12-25 19:05 - 2017-01-01 12:12 - 00000000 ___RD C:\Users\urmomma\Downloads\LicenseSupportInstallerWin64
2016-12-25 16:50 - 2016-12-25 21:32 - 00000000 ____D C:\Users\urmomma\Desktop\Dave
2016-12-22 20:57 - 2016-12-22 20:57 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\YourUpdater
2016-12-22 20:56 - 2016-12-31 12:10 - 00000000 ____D C:\WINDOWS\system32\SSL
2016-12-22 20:55 - 2016-12-22 20:57 - 00000000 ____D C:\Program Files (x86)\UpdateFiles
2016-12-22 20:53 - 2016-12-22 20:54 - 00000000 ____D C:\Program Files (x86)\InetCSetup
2016-12-22 18:19 - 2016-12-22 18:19 - 00000000 ____D C:\Users\urmomma\AppData\Local\Conexant
2016-12-20 00:16 - 2016-12-20 00:16 - 00001335 _____ C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\adwcleaner_6.lnk
2016-12-20 00:05 - 2016-12-31 20:45 - 00000000 ____D C:\AdwCleaner

Continued in reply..

Joe G · 2017/01/02

2016-12-20 00:04 - 2016-12-20 00:05 - 03977168 _____ C:\Users\urmomma\Desktop\adwcleaner_6.041.exe
2016-12-18 11:10 - 2016-12-18 11:10 - 00000000 __SHD C:\ProgramData\ms-drivers
2016-12-18 11:10 - 2016-12-18 11:10 - 00000000 __SHD C:\ProgramData\icsxml
2016-12-18 11:06 - 2016-12-18 11:06 - 00001112 _____ C:\Users\urmomma\Desktop\Riffstation.lnk
2016-12-18 11:06 - 2016-12-18 11:06 - 00000000 __SHD C:\Users\urmomma\AppData\Local\ms-drivers
2016-12-18 11:06 - 2016-12-18 11:06 - 00000000 __SHD C:\Users\urmomma\AppData\Local\icsxml
2016-12-18 11:06 - 2016-12-18 11:06 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Riffstation
2016-12-18 11:06 - 2016-12-18 11:06 - 00000000 ____D C:\Users\urmomma\AppData\Local\Riffstation
2016-12-18 11:06 - 2016-12-18 11:06 - 00000000 ____D C:\Program Files (x86)\Riffstation
2016-12-18 11:01 - 2016-12-18 11:03 - 26671184 _____ C:\Users\urmomma\Downloads\Riffstation_v1.6.1.exe
2016-12-17 22:00 - 2016-12-17 22:00 - 00000000 ____D C:\Users\urmomma\AppData\Local\Avid Technology
2016-12-17 22:00 - 2016-12-17 22:00 - 00000000 ____D C:\Users\urmomma\AppData\Local\AMD
2016-12-17 21:59 - 2016-12-17 22:00 - 03202540 _____ C:\Users\urmomma\AppData\Roaming\AvidApplicationManager_Install.log
2016-12-17 21:58 - 2016-12-17 21:58 - 00000000 ____D C:\Program Files (x86)\My Company Name
2016-12-17 21:56 - 2016-12-17 21:58 - 01175280 _____ C:\Users\urmomma\AppData\Roaming\AvidCloudClientServices_Install.log
2016-12-17 21:32 - 2016-12-31 21:29 - 00000000 ____D C:\Users\urmomma\AppData\Local\Diagnostics
2016-12-17 21:27 - 2016-12-25 19:06 - 00004096 _____ C:\Users\urmomma\PaceKeyChain
2016-12-17 21:26 - 2016-12-17 21:26 - 00000000 ____D C:\Users\urmomma\AppData\Local\PaceAP
2016-12-16 09:27 - 2016-12-26 06:24 - 00000137 _____ C:\Users\urmomma\AppData\Roaming\WB.CFG
2016-12-16 08:24 - 2016-12-16 08:24 - 01718968 _____ C:\WINDOWS\cd1b84af9902f5ee49a8439922b70780.exe
2016-12-15 22:41 - 2016-12-17 21:01 - 00000062 _____ C:\WINDOWS\system32\AssetDeliveryValues.properties
2016-12-15 22:38 - 2016-12-25 16:43 - 00000000 ____D C:\Users\Public\Pro Tools
2016-12-15 22:33 - 2016-12-15 22:34 - 00000000 ____D C:\Users\urmomma\AppData\Local\Avid
2016-12-15 22:33 - 2016-12-15 22:33 - 00000000 ____D C:\ProgramData\PACE
2016-12-15 22:27 - 2016-12-15 22:27 - 00000000 ____D C:\Program Files\AIR Music Technology
2016-12-15 22:26 - 2016-12-15 22:26 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\FLEXnet
2016-12-15 22:26 - 2016-12-15 22:26 - 00000000 ____D C:\ProgramData\InstallShield
2016-12-15 22:25 - 2016-12-15 22:29 - 00000000 ____D C:\Program Files\Common Files\Avid
2016-12-15 22:22 - 2016-12-26 07:30 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-15 22:22 - 2016-12-26 06:37 - 00000000 ____D C:\ProgramData\Avid
2016-12-15 22:22 - 2016-12-15 22:22 - 00000000 ____D C:\Users\urmomma\AppData\Local\Downloaded Installations
2016-12-15 22:21 - 2016-12-15 22:21 - 00002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk
2016-12-15 22:21 - 2016-12-15 22:21 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2016-12-15 22:19 - 2016-12-15 22:19 - 00000000 ____D C:\ProgramData\Apple
2016-12-15 20:47 - 2016-12-15 20:47 - 00000000 ____D C:\WINDOWS\System32\Tasks\Leader Technologies
2016-12-15 20:47 - 2016-12-15 20:47 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Leadertech
2016-12-15 20:02 - 2016-12-26 06:36 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Avid
2016-12-15 17:01 - 2016-12-09 03:15 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-12-15 17:01 - 2016-12-09 02:30 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-12-15 17:01 - 2016-12-09 02:28 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-12-15 17:01 - 2016-11-11 02:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-12-15 17:01 - 2016-11-11 00:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-12-15 17:01 - 2016-11-11 00:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-12-15 17:01 - 2016-11-11 00:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-12-15 17:01 - 2016-11-11 00:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-12-15 17:01 - 2016-11-11 00:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-12-15 17:00 - 2016-12-09 03:32 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-12-15 17:00 - 2016-12-09 03:29 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-15 17:00 - 2016-12-09 03:19 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-12-15 17:00 - 2016-12-09 03:18 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-12-15 17:00 - 2016-12-09 03:18 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-12-15 17:00 - 2016-12-09 03:18 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-12-15 17:00 - 2016-12-09 03:18 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-12-15 17:00 - 2016-12-09 03:15 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-12-15 17:00 - 2016-12-09 03:14 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-12-15 17:00 - 2016-12-09 03:10 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-12-15 17:00 - 2016-12-09 03:01 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-12-15 17:00 - 2016-12-09 03:01 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-12-15 17:00 - 2016-12-09 02:57 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-12-15 17:00 - 2016-12-09 02:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-12-15 17:00 - 2016-12-09 02:51 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-12-15 17:00 - 2016-12-09 02:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-12-15 17:00 - 2016-12-09 02:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-12-15 17:00 - 2016-12-09 02:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-12-15 17:00 - 2016-12-09 02:40 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-12-15 17:00 - 2016-12-09 02:38 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-12-15 17:00 - 2016-12-09 02:37 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-12-15 17:00 - 2016-12-09 02:37 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-12-15 17:00 - 2016-12-09 02:36 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-12-15 17:00 - 2016-12-09 02:36 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-12-15 17:00 - 2016-12-09 02:36 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-12-15 17:00 - 2016-12-09 02:36 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-12-15 17:00 - 2016-12-09 02:33 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-12-15 17:00 - 2016-12-09 02:33 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-12-15 17:00 - 2016-12-09 02:31 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-12-15 17:00 - 2016-12-09 02:31 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-12-15 17:00 - 2016-12-09 02:29 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-12-15 17:00 - 2016-12-09 02:27 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-12-15 17:00 - 2016-12-09 02:27 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-12-15 17:00 - 2016-12-09 02:27 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-12-15 17:00 - 2016-12-09 02:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-12-15 17:00 - 2016-12-09 02:24 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-12-15 17:00 - 2016-12-09 02:23 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-12-15 17:00 - 2016-12-09 02:22 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-12-15 17:00 - 2016-12-09 02:22 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-12-15 17:00 - 2016-12-09 02:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-12-15 17:00 - 2016-12-09 02:19 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-12-15 17:00 - 2016-12-09 02:19 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-12-15 17:00 - 2016-12-09 02:19 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-12-15 17:00 - 2016-12-09 02:19 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-12-15 17:00 - 2016-12-09 02:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-12-15 17:00 - 2016-12-09 02:18 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-12-15 17:00 - 2016-12-09 02:16 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-12-15 17:00 - 2016-12-09 02:16 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-12-15 17:00 - 2016-12-09 02:15 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-12-15 17:00 - 2016-12-09 02:15 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-12-15 17:00 - 2016-12-09 02:15 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-12-15 17:00 - 2016-11-11 03:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2016-12-15 17:00 - 2016-11-11 03:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-12-15 17:00 - 2016-11-11 03:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-12-15 17:00 - 2016-11-11 03:03 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-12-15 17:00 - 2016-11-11 03:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-12-15 17:00 - 2016-11-11 03:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-12-15 17:00 - 2016-11-11 03:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-12-15 17:00 - 2016-11-11 02:57 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-12-15 17:00 - 2016-11-11 02:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-12-15 17:00 - 2016-11-11 02:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-12-15 17:00 - 2016-11-11 02:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2016-12-15 17:00 - 2016-11-11 02:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2016-12-15 17:00 - 2016-11-11 02:55 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-12-15 17:00 - 2016-11-11 02:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-12-15 17:00 - 2016-11-11 02:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-12-15 17:00 - 2016-11-11 02:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-12-15 17:00 - 2016-11-11 02:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-12-15 17:00 - 2016-11-11 02:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2016-12-15 17:00 - 2016-11-11 02:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2016-12-15 17:00 - 2016-11-11 02:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2016-12-15 17:00 - 2016-11-11 02:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-12-15 17:00 - 2016-11-11 02:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-12-15 17:00 - 2016-11-11 02:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-12-15 17:00 - 2016-11-11 02:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-12-15 17:00 - 2016-11-11 02:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-12-15 17:00 - 2016-11-11 02:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-12-15 17:00 - 2016-11-11 02:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-12-15 17:00 - 2016-11-11 02:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-12-15 17:00 - 2016-11-11 02:21 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-12-15 17:00 - 2016-11-11 02:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-12-15 17:00 - 2016-11-11 02:20 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-12-15 17:00 - 2016-11-11 02:19 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-12-15 17:00 - 2016-11-11 02:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-12-15 17:00 - 2016-11-11 02:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-12-15 17:00 - 2016-11-11 02:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-12-15 17:00 - 2016-11-11 02:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-15 17:00 - 2016-11-11 02:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2016-12-15 17:00 - 2016-11-11 02:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2016-12-15 17:00 - 2016-11-11 02:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-12-15 17:00 - 2016-11-11 02:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2016-12-15 17:00 - 2016-11-11 02:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2016-12-15 17:00 - 2016-11-11 02:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-12-15 17:00 - 2016-11-11 02:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-12-15 17:00 - 2016-11-11 02:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-12-15 17:00 - 2016-11-11 02:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-12-15 17:00 - 2016-11-11 02:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-12-15 17:00 - 2016-11-11 02:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2016-12-15 17:00 - 2016-11-11 02:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-12-15 17:00 - 2016-11-11 02:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-12-15 17:00 - 2016-11-11 02:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-12-15 17:00 - 2016-11-11 02:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-12-15 17:00 - 2016-11-11 02:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-12-15 17:00 - 2016-11-11 02:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-12-15 17:00 - 2016-11-11 02:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-12-15 17:00 - 2016-11-11 02:05 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-12-15 17:00 - 2016-11-11 02:04 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-12-15 17:00 - 2016-11-11 02:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-12-15 17:00 - 2016-11-11 02:03 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-12-15 17:00 - 2016-11-11 02:03 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-12-15 17:00 - 2016-11-11 02:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-12-15 17:00 - 2016-11-11 02:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-12-15 17:00 - 2016-11-11 01:01 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-12-15 17:00 - 2016-11-11 01:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2016-12-15 17:00 - 2016-11-11 00:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2016-12-15 17:00 - 2016-11-11 00:49 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-12-15 17:00 - 2016-11-11 00:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-12-15 17:00 - 2016-11-11 00:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-12-15 17:00 - 2016-11-11 00:42 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-12-15 17:00 - 2016-11-11 00:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-12-15 17:00 - 2016-11-11 00:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2016-12-15 17:00 - 2016-11-11 00:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-12-15 17:00 - 2016-11-11 00:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2016-12-15 17:00 - 2016-11-11 00:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-12-15 17:00 - 2016-11-11 00:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-12-15 17:00 - 2016-11-11 00:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-12-15 17:00 - 2016-11-11 00:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-12-15 17:00 - 2016-11-11 00:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-12-15 17:00 - 2016-11-11 00:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-12-15 17:00 - 2016-11-11 00:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-12-15 17:00 - 2016-11-11 00:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-12-15 17:00 - 2016-11-11 00:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-12-15 17:00 - 2016-11-11 00:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-12-15 17:00 - 2016-11-11 00:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2016-12-15 17:00 - 2016-11-11 00:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-12-15 17:00 - 2016-11-11 00:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-12-15 17:00 - 2016-11-11 00:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-12-15 17:00 - 2016-11-11 00:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-12-15 17:00 - 2016-11-11 00:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2016-12-15 17:00 - 2016-11-11 00:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2016-12-15 17:00 - 2016-11-11 00:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2016-12-15 17:00 - 2016-11-11 00:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2016-12-15 17:00 - 2016-11-11 00:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-12-15 17:00 - 2016-11-11 00:15 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-12-15 17:00 - 2016-11-11 00:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-12-15 17:00 - 2016-11-11 00:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-12-15 17:00 - 2016-11-11 00:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-12-15 17:00 - 2016-11-11 00:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2016-12-15 17:00 - 2016-11-11 00:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-12-15 17:00 - 2016-11-11 00:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2016-12-15 17:00 - 2016-11-11 00:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-12-15 17:00 - 2016-11-11 00:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-12-15 17:00 - 2016-11-11 00:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2016-12-15 17:00 - 2016-11-11 00:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-12-15 17:00 - 2016-11-11 00:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-12-15 17:00 - 2016-11-11 00:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-12-15 17:00 - 2016-11-11 00:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-12-15 17:00 - 2016-11-11 00:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-12-15 17:00 - 2016-11-11 00:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-12-15 17:00 - 2016-11-11 00:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-12-15 17:00 - 2016-11-11 00:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-12-15 17:00 - 2016-11-11 00:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-12-15 17:00 - 2016-11-11 00:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-12-15 17:00 - 2016-11-11 00:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-12-15 16:59 - 2016-12-09 03:42 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-12-15 16:59 - 2016-12-09 03:42 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-12-15 16:59 - 2016-12-09 03:34 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-12-15 16:59 - 2016-12-09 03:34 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-12-15 16:59 - 2016-12-09 03:33 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-12-15 16:59 - 2016-12-09 03:33 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-12-15 16:59 - 2016-12-09 03:30 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-12-15 16:59 - 2016-12-09 03:28 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-12-15 16:59 - 2016-12-09 03:27 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-12-15 16:59 - 2016-12-09 03:20 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-12-15 16:59 - 2016-12-09 03:20 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-12-15 16:59 - 2016-12-09 03:20 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-12-15 16:59 - 2016-12-09 03:20 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-12-15 16:59 - 2016-12-09 03:20 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-12-15 16:59 - 2016-12-09 03:19 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2016-12-15 16:59 - 2016-12-09 03:18 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-12-15 16:59 - 2016-12-09 03:18 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-12-15 16:59 - 2016-12-09 03:18 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-12-15 16:59 - 2016-12-09 03:14 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-12-15 16:59 - 2016-12-09 03:11 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-12-15 16:59 - 2016-12-09 03:10 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-12-15 16:59 - 2016-12-09 03:09 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-12-15 16:59 - 2016-12-09 03:01 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-12-15 16:59 - 2016-12-09 03:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2016-12-15 16:59 - 2016-12-09 02:59 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-12-15 16:59 - 2016-12-09 02:59 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-12-15 16:59 - 2016-12-09 02:57 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-12-15 16:59 - 2016-12-09 02:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-12-15 16:59 - 2016-12-09 02:52 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-12-15 16:59 - 2016-12-09 02:47 - 22563328 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-12-15 16:59 - 2016-12-09 02:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-12-15 16:59 - 2016-12-09 02:41 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-12-15 16:59 - 2016-12-09 02:37 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-12-15 16:59 - 2016-12-09 02:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-12-15 16:59 - 2016-12-09 02:31 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-12-15 16:59 - 2016-12-09 02:30 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-12-15 16:59 - 2016-12-09 02:30 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-12-15 16:59 - 2016-12-09 02:28 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-12-15 16:59 - 2016-12-09 02:27 - 19417088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-12-15 16:59 - 2016-12-09 02:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-12-15 16:59 - 2016-12-09 02:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-12-15 16:59 - 2016-12-09 02:22 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-12-15 16:59 - 2016-12-09 02:21 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-12-15 16:59 - 2016-12-09 02:21 - 01512960 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-12-15 16:59 - 2016-12-09 02:21 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-12-15 16:59 - 2016-12-09 02:20 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-12-15 16:59 - 2016-12-09 02:20 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-12-15 16:59 - 2016-12-09 02:20 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-12-15 16:59 - 2016-12-09 02:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-12-15 16:59 - 2016-12-09 02:20 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-12-15 16:59 - 2016-12-09 02:18 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-12-15 16:59 - 2016-12-09 02:18 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-12-15 16:59 - 2016-12-09 02:17 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-12-15 16:59 - 2016-12-09 02:17 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-12-15 16:59 - 2016-12-09 02:16 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-12-15 16:59 - 2016-12-09 01:54 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-12-15 16:59 - 2016-11-11 03:22 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-12-15 16:59 - 2016-11-11 03:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-12-15 16:59 - 2016-11-11 03:14 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-12-15 16:59 - 2016-11-11 03:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-12-15 16:59 - 2016-11-11 03:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-12-15 16:59 - 2016-11-11 03:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-12-15 16:59 - 2016-11-11 03:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-12-15 16:59 - 2016-11-11 03:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2016-12-15 16:59 - 2016-11-11 03:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2016-12-15 16:59 - 2016-11-11 03:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-12-15 16:59 - 2016-11-11 03:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-12-15 16:59 - 2016-11-11 03:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-12-15 16:59 - 2016-11-11 03:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-12-15 16:59 - 2016-11-11 03:00 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-12-15 16:59 - 2016-11-11 03:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-12-15 16:59 - 2016-11-11 02:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-12-15 16:59 - 2016-11-11 02:57 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-12-15 16:59 - 2016-11-11 02:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-12-15 16:59 - 2016-11-11 02:56 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-12-15 16:59 - 2016-11-11 02:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-12-15 16:59 - 2016-11-11 02:56 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-12-15 16:59 - 2016-11-11 02:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2016-12-15 16:59 - 2016-11-11 02:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-12-15 16:59 - 2016-11-11 02:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-12-15 16:59 - 2016-11-11 02:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-12-15 16:59 - 2016-11-11 02:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-12-15 16:59 - 2016-11-11 02:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2016-12-15 16:59 - 2016-11-11 02:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2016-12-15 16:59 - 2016-11-11 02:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2016-12-15 16:59 - 2016-11-11 02:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2016-12-15 16:59 - 2016-11-11 02:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-12-15 16:59 - 2016-11-11 02:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-12-15 16:59 - 2016-11-11 02:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-12-15 16:59 - 2016-11-11 02:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2016-12-15 16:59 - 2016-11-11 02:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-12-15 16:59 - 2016-11-11 02:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-12-15 16:59 - 2016-11-11 02:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2016-12-15 16:59 - 2016-11-11 02:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-15 16:59 - 2016-11-11 02:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-12-15 16:59 - 2016-11-11 02:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-12-15 16:59 - 2016-11-11 02:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2016-12-15 16:59 - 2016-11-11 02:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-12-15 16:59 - 2016-11-11 02:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2016-12-15 16:59 - 2016-11-11 02:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-12-15 16:59 - 2016-11-11 02:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-12-15 16:59 - 2016-11-11 02:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-12-15 16:59 - 2016-11-11 02:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-12-15 16:59 - 2016-11-11 02:21 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-12-15 16:59 - 2016-11-11 02:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-12-15 16:59 - 2016-11-11 02:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-12-15 16:59 - 2016-11-11 02:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-12-15 16:59 - 2016-11-11 02:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-12-15 16:59 - 2016-11-11 02:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-12-15 16:59 - 2016-11-11 02:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2016-12-15 16:59 - 2016-11-11 02:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2016-12-15 16:59 - 2016-11-11 02:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2016-12-15 16:59 - 2016-11-11 02:18 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-12-15 16:59 - 2016-11-11 02:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-12-15 16:59 - 2016-11-11 02:17 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-12-15 16:59 - 2016-11-11 02:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-12-15 16:59 - 2016-11-11 02:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-12-15 16:59 - 2016-11-11 02:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-12-15 16:59 - 2016-11-11 02:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2016-12-15 16:59 - 2016-11-11 02:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2016-12-15 16:59 - 2016-11-11 02:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2016-12-15 16:59 - 2016-11-11 02:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-12-15 16:59 - 2016-11-11 02:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-12-15 16:59 - 2016-11-11 02:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-12-15 16:59 - 2016-11-11 02:07 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-12-15 16:59 - 2016-11-11 02:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-12-15 16:59 - 2016-11-11 02:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-12-15 16:59 - 2016-11-11 02:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-12-15 16:59 - 2016-11-11 02:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-12-15 16:59 - 2016-11-11 02:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-12-15 16:59 - 2016-11-11 02:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-12-15 16:59 - 2016-11-11 02:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-12-15 16:59 - 2016-11-11 02:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-12-15 16:59 - 2016-11-11 02:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-12-15 16:59 - 2016-11-11 02:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-12-15 16:59 - 2016-11-11 01:39 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-12-15 16:59 - 2016-11-11 01:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-12-15 16:59 - 2016-11-11 01:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-12-15 16:59 - 2016-11-11 00:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-12-15 16:59 - 2016-11-11 00:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2016-12-15 16:59 - 2016-11-11 00:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-12-15 16:59 - 2016-11-11 00:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-12-15 16:59 - 2016-11-11 00:42 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-12-15 16:59 - 2016-11-11 00:42 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-12-15 16:59 - 2016-11-11 00:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-12-15 16:59 - 2016-11-11 00:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2016-12-15 16:59 - 2016-11-11 00:28 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-12-15 16:59 - 2016-11-11 00:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2016-12-15 16:59 - 2016-11-11 00:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-12-15 16:59 - 2016-11-11 00:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-12-15 16:59 - 2016-11-11 00:20 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-12-15 16:59 - 2016-11-11 00:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-12-15 16:59 - 2016-11-11 00:20 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-12-15 16:59 - 2016-11-11 00:19 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-12-15 16:59 - 2016-11-11 00:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-12-15 16:59 - 2016-11-11 00:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-12-15 16:59 - 2016-11-11 00:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-12-15 16:59 - 2016-11-11 00:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-12-15 16:59 - 2016-11-11 00:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2016-12-15 16:59 - 2016-11-11 00:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-12-15 16:59 - 2016-11-11 00:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-12-15 16:59 - 2016-11-11 00:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-12-15 16:59 - 2016-11-11 00:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-12-15 16:59 - 2016-11-11 00:13 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-12-15 16:59 - 2016-11-11 00:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2016-12-15 16:59 - 2016-11-11 00:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-12-15 16:59 - 2016-11-11 00:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-12-15 16:59 - 2016-11-11 00:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-12-15 16:59 - 2016-11-11 00:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-12-15 16:59 - 2016-11-11 00:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-12-15 16:59 - 2016-11-11 00:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-12-15 16:58 - 2016-12-09 02:36 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-12-15 16:58 - 2016-12-09 02:34 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-12-15 16:58 - 2016-12-09 02:32 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-12-15 16:58 - 2016-11-11 02:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-12-15 16:58 - 2016-11-11 02:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2016-12-15 16:58 - 2016-11-11 02:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2016-12-15 16:58 - 2016-11-11 02:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2016-12-15 16:58 - 2016-11-11 02:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-12-15 16:58 - 2016-11-11 02:11 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-12-15 16:58 - 2016-11-11 02:11 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-12-15 16:58 - 2016-11-11 02:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2016-12-15 16:58 - 2016-11-11 02:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-12-15 16:58 - 2016-11-11 02:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-12-15 16:58 - 2016-11-11 00:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2016-12-15 16:58 - 2016-11-11 00:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2016-12-15 16:58 - 2016-11-11 00:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-12-15 16:58 - 2016-11-11 00:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-12-15 16:33 - 2016-12-26 06:39 - 00000000 ____D C:\Users\urmomma\AppData\Local\chromium

Joe G · 2017/01/02

2016-12-15 16:33 - 2016-12-15 16:33 - 00000000 ____D C:\ProgramData\Oracle
2016-12-15 16:32 - 2016-12-31 11:31 - 00000258 __RSH C:\ProgramData\ntuser.pol
2016-12-15 16:22 - 2016-12-15 16:22 - 00003294 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2016-12-11 19:58 - 2016-12-29 08:23 - 00007128 _____ C:\GEARDIFx_uninstall.log
2016-12-11 19:56 - 2016-12-31 13:35 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE
2016-12-11 19:56 - 2016-12-31 13:33 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\PreSonus
2016-12-11 19:56 - 2016-12-29 10:25 - 00020042 _____ C:\GEARDIFx_install.log
2016-12-11 19:56 - 2016-12-26 07:31 - 00000000 ____D C:\ProgramData\PreSonus
2016-12-11 18:14 - 2016-12-26 06:33 - 00000000 ____D C:\Users\urmomma\AppData\Roaming\Audacity
2016-12-11 18:14 - 2016-12-11 18:14 - 00000000 ____D C:\Users\urmomma\AppData\Local\Audacity
2016-12-11 13:19 - 2016-12-11 13:19 - 26305456 _____ C:\Users\urmomma\Downloads\RiffstationTrial (1).exe
2016-12-05 08:09 - 2017-01-01 12:48 - 00006388 _____ C:\WINDOWS\PFRO.log
2016-12-04 06:36 - 2016-12-04 06:41 - 00004015 _____ C:\Users\urmomma\Desktop\resume template.docx
2016-12-04 06:36 - 2016-12-04 06:36 - 00000000 ____D C:\Users\urmomma\AppData\LocalLow\Temp
2016-12-04 06:33 - 2016-12-04 06:33 - 00059081 _____ C:\Users\urmomma\Downloads\Truck-Driver-Resume-Samples.zip
2016-12-04 06:30 - 2016-12-04 06:30 - 00034861 _____ C:\Users\urmomma\Downloads\Construction-Resume-Pack-.zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-02 13:43 - 2016-11-23 01:05 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-02 11:45 - 2016-11-23 04:35 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-01 23:27 - 2016-11-23 01:13 - 00000000 ____D C:\WINDOWS\INF
2017-01-01 21:16 - 2016-11-25 11:50 - 00000000 ____D C:\Users\urmomma\AppData\Local\ElevatedDiagnostics
2017-01-01 18:13 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-01 12:48 - 2016-11-23 04:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-01 12:47 - 2016-11-23 04:44 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-01-01 12:47 - 2016-11-23 01:00 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-01 08:52 - 2016-11-23 12:37 - 135632432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-01 08:02 - 2016-11-23 09:16 - 00000000 ____D C:\Users\urmomma
2016-12-31 21:19 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\Tasks
2016-12-31 21:04 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-31 21:04 - 2016-11-23 01:00 - 00000000 ___RD C:\Users
2016-12-31 13:55 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\config\TxR
2016-12-31 13:50 - 2016-11-23 04:41 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-12-31 13:50 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\wbem
2016-12-31 13:50 - 2016-11-23 01:00 - 00000000 ___RD C:\Program Files
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 __SHD C:\WINDOWS\Installer
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\Drivers\etc
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\CodeIntegrity
2016-12-31 13:48 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\security
2016-12-31 13:47 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-31 13:47 - 2016-11-23 04:41 - 00000000 ____D C:\Program Files\CONEXANT
2016-12-31 13:47 - 2016-11-23 01:00 - 00000000 ____D C:\Program Files\Common Files
2016-12-31 13:42 - 2016-11-23 01:16 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-31 13:35 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\registration
2016-12-31 13:35 - 2016-11-23 01:00 - 00000000 ____D C:\WINDOWS\system32\CatRoot
2016-12-31 13:33 - 2016-11-23 09:16 - 00000000 ___SD C:\Users\urmomma\AppData\Roaming\Microsoft
2016-12-31 13:31 - 2016-11-23 15:14 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-31 13:31 - 2016-11-23 01:16 - 00000000 ____D C:\Program Files\Internet Explorer
2016-12-31 13:31 - 2016-11-23 01:16 - 00000000 ____D C:\Program Files (x86)\Internet Explorer
2016-12-31 12:07 - 2016-11-23 01:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
2016-12-31 11:47 - 2016-11-23 01:24 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-31 11:46 - 2016-11-23 01:00 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-29 18:52 - 2016-11-23 04:41 - 00000000 ____D C:\ProgramData\Conexant
2016-12-29 06:59 - 2016-11-23 15:14 - 00000000 ____D C:\Users\urmomma\AppData\Local\Google
2016-12-29 06:30 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\config\RegBack
2016-12-28 22:48 - 2016-11-23 09:16 - 00524288 ___SH C:\Users\urmomma\NTUSER.DAT{e4d59f90-b170-11e6-8f5d-ced4525c6f0f}.TMContainer00000000000000000002.regtrans-ms
2016-12-28 22:48 - 2016-11-23 09:16 - 00065536 ___SH C:\Users\urmomma\NTUSER.DAT{e4d59f90-b170-11e6-8f5d-ced4525c6f0f}.TM.blf
2016-12-28 17:54 - 2016-11-23 09:16 - 00000000 ____D C:\Users\urmomma\AppData\Local\Microsoft
2016-12-25 22:45 - 2016-11-23 04:35 - 00246440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-12-25 18:57 - 2016-11-23 04:48 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{e4d5a08d-b170-11e6-8f5d-ced4525c6f0f}.TMContainer00000000000000000001.regtrans-ms
2016-12-22 20:57 - 2016-11-23 01:16 - 00000000 __RSD C:\WINDOWS\Fonts
2016-12-20 00:16 - 2016-11-23 09:16 - 00000174 ___SH C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-18 13:25 - 2016-11-23 04:55 - 01134612 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-18 13:25 - 2016-11-23 01:19 - 00938020 _____ C:\WINDOWS\system32\perfh009.dat
2016-12-18 13:25 - 2016-11-23 01:19 - 00196702 _____ C:\WINDOWS\system32\perfc009.dat
2016-12-17 23:16 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\WDI
2016-12-17 21:16 - 2016-11-23 09:16 - 00524288 ___SH C:\Users\urmomma\NTUSER.DAT{e4d59f90-b170-11e6-8f5d-ced4525c6f0f}.TMContainer00000000000000000001.regtrans-ms
2016-12-16 17:31 - 2016-11-23 01:16 - 00000000 __RSD C:\WINDOWS\assembly
2016-12-16 16:46 - 2016-11-23 15:15 - 00003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-16 16:46 - 2016-11-23 15:15 - 00003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 14:10 - 2016-11-23 09:16 - 00000456 ___SH C:\Users\urmomma\Desktop\desktop.ini
2016-12-16 14:10 - 2016-11-23 09:16 - 00000402 ___SH C:\Users\urmomma\Documents\desktop.ini
2016-12-16 14:10 - 2016-11-23 09:16 - 00000282 ___SH C:\Users\urmomma\Downloads\desktop.ini
2016-12-16 14:10 - 2016-11-23 09:16 - 00000174 ___SH C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Videos
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Searches
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Saved Games
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Pictures
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Music
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Links
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Favorites
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\Contacts
2016-12-16 14:10 - 2016-11-23 09:16 - 00000000 ___RD C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2016-12-16 13:51 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\rescache
2016-12-16 12:24 - 2016-11-23 01:00 - 00262144 _____ C:\Users\Default\NTUSER.DAT
2016-12-16 12:18 - 2016-11-23 04:35 - 00524288 ___SH C:\WINDOWS\system32\config\DRIVERS{e4d59f53-b170-11e6-8f5d-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms
2016-12-16 12:18 - 2016-11-23 04:35 - 00065536 ___SH C:\WINDOWS\system32\config\DRIVERS{e4d59f53-b170-11e6-8f5d-806e6f6e6963}.TM.blf
2016-12-16 12:18 - 2016-11-23 01:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2016-12-16 12:18 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-12-16 12:18 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\SysWOW64\en-US
2016-12-16 12:18 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-12-16 12:17 - 2016-11-23 01:16 - 00000666 ___SH C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\sr-Latn-CS
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\system32\Boot
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-12-16 12:17 - 2016-11-23 01:16 - 00000000 ____D C:\WINDOWS\AppPatch
2016-12-16 12:17 - 2016-11-23 01:00 - 00000000 ____D C:\WINDOWS\servicing
2016-12-16 00:19 - 2016-11-23 09:59 - 00000000 ____D C:\Users\urmomma\AppData\Local\Free Download Manager
2016-12-15 23:52 - 2016-11-23 09:16 - 00000000 ____D C:\Users\urmomma\AppData\Local\VirtualStore
2016-12-15 22:38 - 2016-11-23 01:16 - 00000000 ___RD C:\Users\Public
2016-12-15 22:24 - 2016-11-23 01:16 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-12-15 17:12 - 2016-11-23 12:38 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-12-15 16:22 - 2016-11-23 09:19 - 00002369 _____ C:\Users\urmomma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-15 16:22 - 2016-11-23 09:19 - 00000000 ___RD C:\Users\urmomma\OneDrive
2016-12-11 16:56 - 2016-11-23 01:19 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-11 16:56 - 2016-11-23 01:19 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-09 20:00 - 2016-07-16 04:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-12-04 06:36 - 2016-11-23 09:16 - 00000000 ____D C:\Users\urmomma\AppData\LocalLow
==================== Files in the root of some directories =======
2016-12-17 21:59 - 2016-12-17 22:00 - 3202540 _____ () C:\Users\urmomma\AppData\Roaming\AvidApplicationManager_Install.log
2016-12-17 21:56 - 2016-12-17 21:58 - 1175280 _____ () C:\Users\urmomma\AppData\Roaming\AvidCloudClientServices_Install.log
2016-12-31 11:31 - 2016-12-31 11:31 - 0016224 _____ () C:\Users\urmomma\AppData\Roaming\InstallationConfiguration.xml
2016-12-31 11:31 - 2016-12-31 11:31 - 0140288 _____ () C:\Users\urmomma\AppData\Roaming\Installer.dat
2016-12-31 11:33 - 2016-12-31 11:31 - 0629760 _____ () C:\Users\urmomma\AppData\Roaming\K-lottrax.exe
2016-11-24 00:29 - 2016-11-24 00:29 - 0139566 _____ () C:\Users\urmomma\AppData\Roaming\MixPad.dmp
2016-12-16 09:27 - 2016-12-26 06:24 - 0000137 _____ () C:\Users\urmomma\AppData\Roaming\WB.CFG
2016-12-26 05:59 - 2016-12-26 05:59 - 0000735 _____ () C:\Users\urmomma\AppData\Local\recently-used.xbel
2016-11-23 13:09 - 2016-11-23 13:09 - 0000017 _____ () C:\Users\urmomma\AppData\Local\resmon.resmoncfg
2016-12-31 04:45 - 2016-12-31 04:45 - 0010752 _____ () C:\Users\urmomma\AppData\Local\ubud.exe
2016-12-31 11:28 - 2016-12-31 11:28 - 0002560 _____ () C:\Users\urmomma\AppData\Local\uninstallro.exe
2016-12-31 11:28 - 2016-12-31 11:28 - 0190976 _____ () C:\Users\urmomma\AppData\Local\wlitdo.dll
2016-12-31 11:31 - 2016-12-31 11:31 - 0439808 _____ () C:\ProgramData\smp2.exe
Files to move or delete:
====================
C:\ProgramData\smp2.exe

Some files in TEMP:
====================
C:\Users\urmomma\AppData\Local\Temp\1000.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1002.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1003.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1011.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1012.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1033.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1042.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\105.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1052.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1053.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1054.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\106.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1063.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1074.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1075.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1085.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1086.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1087.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1098.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1099.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\109A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\10BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\10C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\10D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\10D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\10DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\110A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\110B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1115.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\114B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\114C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1154.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\116C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\117.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\117D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\118.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\118D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\119.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1194.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\11FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1205.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\120C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1216.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1217.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\121D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\123D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\124E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1256.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1257.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\125E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\126F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1270.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1271.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1277.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1282.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1283.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1284.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1285.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1295.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1298.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1299.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\12F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1302.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\131A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1322.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1333.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1334.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1359.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1364.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1374.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1379.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1385.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\138A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1396.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\13FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\141B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\142A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\142B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\144B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\146B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\147B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\148C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\148D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\148E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\149F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\14FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\150.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\150A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\151.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1510.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\151B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\152B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\152C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1530.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\153D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\153E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\153F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1550.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1551.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1552.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1570.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1572.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1573.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1574.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1580.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1584.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1585.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1586.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1587.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1598.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1599.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\159A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\15E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1604.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1605.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1615.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1616.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1621.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1627.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1628.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\162A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\163B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\163C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\163D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1641.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1652.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\165D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1662.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1663.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1664.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\166E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1675.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1676.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1686.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\168E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1697.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1698.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1699.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\169E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\16FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\170B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\171.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\171C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\171D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\171E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\172E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\172F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\173A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1740.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1741.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\174B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1752.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1753.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1754.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1755.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\177B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1785.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\17FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\180.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\181.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1845.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\184A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1865.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1866.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1899.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\18F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1909.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\192.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1921.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1929.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1941.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1942.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1949.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1953.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1969.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\19F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1A9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1AF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1B99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BAA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BCC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BCE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BE1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1BF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1C9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CAA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1CFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D51.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1D9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1DC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1DDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1DF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1E94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1EAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1EBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1ED3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1EDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1EFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F11.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1F96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\1FFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\200.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2000.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2001.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2012.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2013.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2014.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2015.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2024.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2025.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2026.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2027.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2045.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2047.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2056.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2066.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2067.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2068.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2079.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\207A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\207B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2086.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2087.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\208C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\208D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\20F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2101.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2102.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2109.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2114.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2124.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2125.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2136.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2137.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2138.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2139.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\213A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\213B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2149.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\214A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\214B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\215C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\215D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\216B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\216E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\217C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\218C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\218D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\218E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\218F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\219E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\21F5.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\220.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2204.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2205.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2206.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2207.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2215.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2226.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2237.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2238.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2239.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\223A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2249.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\224A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\224B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\224C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\224D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\225D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\225E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\225F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2260.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2261.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2271.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2272.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2273.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2274.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2285.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2286.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2287.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2288.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2298.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2299.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\229A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\229B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\22FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\230D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\230E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\230F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\231F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2320.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2321.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2322.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2323.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\233.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2333.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2334.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2335.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\234.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2346.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2347.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2348.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\234F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2359.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\235A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\235B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\235C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\236C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\236D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\236E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\236F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\237F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2380.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2381.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2382.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2392.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2393.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2394.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\23F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2404.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2405.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2406.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2407.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\241.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2416.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2417.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2418.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2419.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\241A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\241B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2427.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2428.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\243A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\244.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\245A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\246B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\247C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\248C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\249D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\24BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\24CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\24EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\251.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2516.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\251E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\252.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\252E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\253.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\253F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2540.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2541.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2546.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2547.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2552.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2553.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2554.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2564.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2575.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2595.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2596.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2597.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\25A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\25B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2605.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2615.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2625.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2626.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2627.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2628.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2638.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2639.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\263A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\263B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\263C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\263D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\264.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\264B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\264C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\264D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\264E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\265E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\265F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2660.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2661.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2672.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2683.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\268F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\26F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2702.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2703.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2704.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2715.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2716.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2717.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\274.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2741.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\275.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2756.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\276.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2767.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2768.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2769.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\276A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\277.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2771.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\277A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\277B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\277C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2782.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\278D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\278E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\278F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\27F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2801.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2802.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2803.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2811.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2812.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2814.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2825.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2826.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2827.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2828.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2838.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2839.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\285.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2859.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2871.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2872.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\287A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\288.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2883.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\289.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\28F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\290C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\292D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\293D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\294E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2952.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\295E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\295F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2960.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2961.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2972.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2973.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2974.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2975.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2985.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2986.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2987.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2988.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2998.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2999.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\299A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\299B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\29E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2A9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2ADA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2ADB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2AFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B51.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2B9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BE3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2BF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2C98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CAA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2CF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2D97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2DFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2E90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2EC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2ECF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2F9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2FA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2FE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2FE1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2FF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\2FF2.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\3003.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3004.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3005.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3006.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3017.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3018.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3028.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3029.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\302A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\303B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\303C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\303D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\303E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\304F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3050.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3051.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\306.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3061.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3069.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\307.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3091.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\30F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3102.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3104.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\310D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\310E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3115.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3116.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3117.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3118.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\311E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\311F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3120.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3129.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\312A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\312B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\312C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3131.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3132.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3133.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3134.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\313C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\313D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\313E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3145.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3146.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3147.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\314F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3150.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3161.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3162.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3167.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3168.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3169.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\316A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\317B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\317C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\317D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3182.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\318D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\318E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\318F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\31F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3201.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3204.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3205.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3206.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\321.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3216.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3217.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3218.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3219.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\322.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3221.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3231.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3232.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3233.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3244.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3245.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3246.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3247.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3259.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3267.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3268.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3269.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\327.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3279.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\327A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\327B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\327C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\328.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\328D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\328E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\328F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\329.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3290.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3299.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\32F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\331A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\332.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3347.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\335A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3368.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\336B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3378.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\33F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3407.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3408.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3412.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3438.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3439.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3448.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3449.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\344A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\344B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\345C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\345D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\345E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\345F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3469.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3470.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3471.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3472.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3479.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3482.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3483.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3484.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\348A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3495.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3496.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3497.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3498.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\34F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\350.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3501.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3511.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3512.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\351A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\352B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3533.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\353C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\353D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\354D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3553.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\355E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\355F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3560.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3563.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3571.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3572.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3573.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3574.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3584.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3585.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3586.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3597.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3598.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\35F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3609.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\360A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\360B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\361.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\361B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\361C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\361F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\362.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\362D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\362F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\363.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3630.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3631.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\364.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3642.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3643.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3644.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3645.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\364D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3656.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3657.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3658.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3668.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3669.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\366D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\366E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\366F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\368A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3690.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\369A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\36FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3700.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3701.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\370D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\370E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\371E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\371F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3720.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3721.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3742.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\375.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3750.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3752.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\376.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3761.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3763.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3764.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3765.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\377.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3775.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3776.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3777.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\378.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3781.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3782.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3788.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3793.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\37C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\37C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\37D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\37D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\37F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3808.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\381.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3814.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3828.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3829.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3834.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3835.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3855.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3867.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3878.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3879.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\388.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\38E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3906.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\390A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\392A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3935.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\393B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\394C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\394D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\394E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\394F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\395F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3960.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3961.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3972.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3973.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\399.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3994.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\39EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3A9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3AF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3B92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3BF4.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\3C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3C9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3CF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D2D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D51.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3D9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3DFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3E9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3ED9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3EFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F51.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3F99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FAA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\3FF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\401E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\402.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\402E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\403.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\403F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\404.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4040.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4041.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\405.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4052.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4053.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4068.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4073.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4079.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4084.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\40F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4109.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\410A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4114.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4115.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\411B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\411C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\411D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\412E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\412F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\413.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4130.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4140.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4141.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4152.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4153.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4155.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\416.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4164.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4165.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4166.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4167.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4168.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\417.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4176.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4178.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4179.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4187.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4188.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4189.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\418A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4199.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\419A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\419B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\419C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\41E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4203.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4204.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4205.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4216.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4217.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4218.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4219.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\421A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\423B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\424.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4248.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\425.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\425B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\426.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\426C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\427.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4278.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\428.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4299.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\429A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\42FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\430E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\431B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\431C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\431E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\432F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4330.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4341.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\434B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4351.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4352.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\436C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\436D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\437.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4373.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\437D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\438.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\439.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\439E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\439F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\43F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4400.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4423.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4453.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\446F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4483.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\448F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4490.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\44F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4503.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4504.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4505.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4506.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4517.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4539.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\453A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\453B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\454C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\454D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\45F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\460.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\461.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\462F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\464A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\465D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\466F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\467A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\467B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\467C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\467F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\468C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\468D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4690.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4691.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\469E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\46F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4700.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4706.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4707.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4708.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\471.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4718.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4719.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\472.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\473A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4740.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\474A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4750.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\475B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\475C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\475D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4761.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4762.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\476D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\476E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\476F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4780.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4781.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4782.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4793.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4794.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4795.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\47DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4802.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\480E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4813.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\481F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\482F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\483.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4833.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4834.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\484.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4845.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\485.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4855.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4866.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\486F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4877.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4897.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\489F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\48C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\48CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\48E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\48FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4917.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\493E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\493F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4947.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4950.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4951.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4952.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4962.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4963.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4964.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4965.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4967.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4976.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4977.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4997.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\49F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4A9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4AA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4AAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4ABF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4AC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4AD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4AEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B11.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4B7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4BFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4C9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4CFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D2D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DCE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DE1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4DFD.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\4E2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4E80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4EAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4EAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4EBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4EE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4EEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4F8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\4FF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5003.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\501D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\502D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\502E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5033.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5034.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\505E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\505F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5070.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5071.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\508.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5082.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5083.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\509.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5093.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5094.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5095.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5096.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\50FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5110.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5111.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5121.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5122.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5123.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5134.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5135.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5136.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5137.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5142.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5147.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5153.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\516.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5164.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5165.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5166.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5167.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5177.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5178.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5179.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\518A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\518B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5198.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\51A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\51A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\51A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\51F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\51F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5209.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\520A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\521A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\522A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\523A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\523B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\524A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\526B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\526C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\527A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\528B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\528C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\529C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\529D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\529E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\52FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\530A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5310.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\531B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\532C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\534F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\537B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\539B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\53F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\540.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5403.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\541.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5413.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5414.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5415.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5426.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5427.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5428.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\543.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\543A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\543B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\543C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\545.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5451.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\545C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5464.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\547C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5484.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\548D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\548E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\548F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5495.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5496.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\549F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\54FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5504.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5505.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5515.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\551D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5526.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5527.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\552D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\552E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5539.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\553A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\553B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\556A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\557D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\558B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\558E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\558F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\55F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5601.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5602.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5604.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5607.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5608.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5609.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\561A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\561B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\561C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\561D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\562.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5632.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\563D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\566.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5671.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5692.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\56F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5702.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5703.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5708.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5713.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5714.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5719.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5725.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5726.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5727.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5738.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5739.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\573A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\573B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\574A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\574B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\574C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\574D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\574E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\575E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\575F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\576.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5760.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\577.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5771.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5772.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5773.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5774.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\577B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\578.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5784.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5785.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5786.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\579.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5797.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5798.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5799.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\579A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\579B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\579C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\57F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5800.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5811.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5831.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5838.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5848.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5849.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\584A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5851.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\585B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\585C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\585D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5862.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\586E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\586F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\587F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5882.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5893.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\58F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5906.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\591.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5917.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5947.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5948.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5957.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5987.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5988.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\59F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5A7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5AAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5ADB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5AEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5B90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5BFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5C9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5CFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5D93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5DD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5E93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5ECA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5ECB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5ECC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5ECD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5EFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5F9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\5FFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\601E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\602C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\602F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\603C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6040.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6041.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6042.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6043.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\604D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\604E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\604F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6050.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6053.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6060.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6064.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6074.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6075.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6076.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6081.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6097.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\60F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\612.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6122.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6126.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6147.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6152.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6167.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6172.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6183.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6184.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6194.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6195.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6196.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6197.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\61FF.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\620B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\620C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\620D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6212.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\621D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\621E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\621F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\622F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\623.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6230.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6231.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6232.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6252.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6253.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6254.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\625F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6260.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6265.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6266.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6267.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6268.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6278.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6279.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\628A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\62E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6304.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\631C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6325.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6326.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\634C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\635C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\635D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6375.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6376.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\637D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6386.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6397.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\63F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\642D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\643.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6457.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6458.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\645D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\645E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6468.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6469.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\646A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\646B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\647C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\647D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\647E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\648E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\648F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6490.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\64A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\64CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\64FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\650E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\650F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6520.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6521.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6522.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6533.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\654E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6563.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\656E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6592.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\659E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\65E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6605.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6606.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6615.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6636.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6656.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6657.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6685.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6686.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\66F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6707.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6708.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6709.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\671A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\671B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\671C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\671D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\673.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\674.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6764.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\676C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6774.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6785.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6795.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6796.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\67F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6809.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6813.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6819.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6843.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6854.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6855.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6859.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6866.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6867.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6868.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6869.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6879.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\687A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\688A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\688B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\688C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\689C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\68C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\690A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6912.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\691A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\692B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\692C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6932.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\694.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6952.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6973.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6983.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6984.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6985.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\698B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6996.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6997.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6998.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6999.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\69E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6A9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6ABF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6AFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6B96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6BA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6BC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6BF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6C9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6CCE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6CFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D11.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6D8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6DFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6E95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6EF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F2D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6F9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6FA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6FAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6FBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\6FD0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\700.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\701F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7020.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7021.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\702D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7032.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7033.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7034.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7044.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7045.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7056.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7057.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\705D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\705E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\706E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\707F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\708.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7090.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7091.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\70FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7100.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\711.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\712.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7129.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\712A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\712B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\713C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\713D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\713E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7140.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\714E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\714F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7150.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7151.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7160.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7162.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7163.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7164.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7175.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7176.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7177.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7180.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7181.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7182.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7187.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7188.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7199.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\71F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7206.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7207.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7214.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7225.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\723.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7236.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7237.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\724.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7247.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7248.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7249.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\724A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\725.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\725B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\725C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\725D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\725E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\726.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\726D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\726E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\727F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\728.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7280.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7281.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7282.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7293.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7294.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7295.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\729D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\729E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\72FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7355.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\735E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\736.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7366.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\736E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\736F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\737.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\738.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\738F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\739.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7396.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7397.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\73F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7403.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7404.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7405.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7406.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7416.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7417.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7427.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7428.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7439.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\743A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\743B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\744B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\744C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\744D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\745E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\745F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7460.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7467.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7468.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7471.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7481.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\74F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7502.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7503.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7508.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7519.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\753A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\753B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\753C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\753D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7543.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\754E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\754F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7550.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\757F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7582.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\75FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\760C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\760D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\760E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\760F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7610.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\761F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7620.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7621.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7630.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7631.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7632.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7643.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7644.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7645.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7651.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7656.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7657.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7658.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7678.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\768.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7680.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\769.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\76E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7700.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7719.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7730.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7739.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\774A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\774B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\774C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7751.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\775D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\775E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\775F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\776F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7770.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7781.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7782.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7783.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7794.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7795.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7796.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\77F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7820.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7823.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7830.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7853.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7860.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7861.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7863.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7874.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7881.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78F7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\78F8.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\7904.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7908.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7909.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\790A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7915.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\792B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\792C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\792D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7930.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\793D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\793E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\793F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7945.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7950.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7951.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7952.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7953.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7963.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7965.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7974.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7975.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7976.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7977.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7986.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7988.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7989.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\798A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\799.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\799A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\799B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\79FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A2D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7A87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7ABF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7AC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7AC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7AE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7AF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7B84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7BF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7C9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CD6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7CF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7D86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7DE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7E9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7EA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7EBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7EC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7EF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7EF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7F92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\7FF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8001.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8033.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8040.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8044.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8045.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8046.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8051.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8057.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8068.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8069.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\806A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\807B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\807C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\808D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\808E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\808F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\809.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\809F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\80FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8104.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\810F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8115.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8116.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8120.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8121.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8122.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8123.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8134.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8135.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8136.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8137.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8138.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8148.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8149.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\814A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8157.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\815B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\815C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\815D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\815E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\816F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8170.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8171.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8181.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8182.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8193.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8194.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8197.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\81FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\822B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\822D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\823C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\825D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\826C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\826D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\826E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\827E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\827F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8280.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\828F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\829.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8290.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8291.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8292.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8293.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\82E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8304.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8305.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8315.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8325.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8354.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8355.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8365.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8366.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8385.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8396.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8397.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\83F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8407.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8408.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8448.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8458.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8459.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8465.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\847A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\847B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\84FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\850.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8518.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\853C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\856C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\859.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\859C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\85ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\860.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8608.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8609.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\860A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\861.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\861A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\861B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\862C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\862D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\863C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\863D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\863E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\863F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\865C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\866D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\866E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\866F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8670.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\867D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8680.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8681.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8682.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8683.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8693.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8694.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\86FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8700.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8701.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8712.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8715.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8716.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\872.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8722.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8732.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8762.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8763.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8765.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8772.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8773.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8774.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8783.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8785.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\87FC.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\8814.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8816.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\881D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8834.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8846.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8864.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8865.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\886C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8875.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\888C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\889.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8895.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\889D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\889E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\889F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\88FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\890D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\890E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\890F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8920.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8930.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8931.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8932.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8933.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8943.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8944.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8945.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8946.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8947.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8958.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8959.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\895A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8963.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8965.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8966.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\896A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\896B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\896C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\897D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\897E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\897F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8980.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8990.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8991.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\89F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8A9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8AAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8AC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8ACF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8AF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8AF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8AFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8B9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BD0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BE3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8BF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8C7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8CF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8D86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8DF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8E97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8ED6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8ED7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8ED8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8ED9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8EF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8F8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\8FDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\900B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\900C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\900D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\901C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\901E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\901F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\903.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\903F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\904C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\904F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9050.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9061.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9062.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9073.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9074.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9084.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9085.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9096.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9097.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9098.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\909B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\90FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\910C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\910D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\911D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\911E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\912E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\912F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\913E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\913F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9140.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9151.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9161.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9162.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9163.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\917D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\91FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\920C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\920D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\921D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\921E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\922C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\922F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9230.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9231.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9232.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9243.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9244.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9245.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9246.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9256.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9257.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9268.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9269.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\926A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\926B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\926C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\926D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\927B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\927C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\927D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\928D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\928E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\928F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9290.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\92C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9302.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\930D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\930E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9313.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9314.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9325.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9335.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9336.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9337.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9338.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\933E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9349.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\934A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\934B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\935C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\935D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\936D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\936E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\936F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\937E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\937F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9380.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9381.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9390.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9391.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9392.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9393.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\93FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9404.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\940E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9415.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9416.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9417.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\941E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\942.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9428.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\942A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\944A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\945E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\945F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9460.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9471.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9472.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9473.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9482.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9483.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9484.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9485.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9486.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9497.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9498.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9499.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\949A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\94FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9500.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9505.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9506.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9507.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9510.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9511.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9512.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9517.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\953.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9542.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9549.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9569.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\957A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\957B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9582.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\958C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\958D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\959D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\959E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\959F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\95F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9606.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\960A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\960B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\960C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9616.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9617.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9618.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\961D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\961E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\961F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9620.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\962A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\962B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\962C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\963.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9630.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9631.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\964.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9651.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\965C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9662.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9663.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9674.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9675.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\967C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9685.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9696.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9697.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\969C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\96F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\970.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9705.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9715.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9716.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9717.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9718.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9720.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9721.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9729.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\972A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\972B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\973C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\973D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\973E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\974E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\975.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9761.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\976E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9772.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9773.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9774.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\977F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9784.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9785.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\979F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\97E9.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\980.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9800.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9809.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9830.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9831.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9832.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9843.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9853.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9854.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9855.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9858.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\986.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9867.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9868.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9878.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9879.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\987A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\988A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\988B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\989C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\989D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\989E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\98F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9902.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9913.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9914.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9915.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9925.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9926.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9927.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9937.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9938.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9939.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\993A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9955.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\996A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\997B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\999B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\99F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9A92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AC7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9ACA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9ADA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9ADB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9ADC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9ADD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9AF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9B79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BCC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9BF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9C9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9CF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9DFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9E9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9EFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9F9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FE3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\9FF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A021.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A023.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A032.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A034.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A042.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A044.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A053.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A055.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A056.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A066.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A067.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A068.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A073.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A079.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A07A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A08B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A08C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A09C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A09D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A09E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A09F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A0F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A11.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A112.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A114.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A122.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A123.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A135.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A136.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A144.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A146.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A154.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A176.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A177.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A178.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A184.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A185.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A189.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A196.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A197.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A198.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A199.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A1B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A1E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A1F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A1FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A1FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A20C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A20D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A217.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A218.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A21D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A21E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A21F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A220.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A228.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A229.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A269.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A279.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A27A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A27F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A28B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A28C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A28D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A28E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A29F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A2E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A321.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A326.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A32E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A341.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A352.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A362.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A36D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A382.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A393.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A39D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A39E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A3B3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A3E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A3ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A403.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A404.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A415.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A416.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A417.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A418.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A41D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A429.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A42A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A42B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A42E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A43B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A43C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A44D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A44E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A44F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A450.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A451.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A45F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A460.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A461.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A462.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A463.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A464.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A465.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A472.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A473.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A474.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A485.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A486.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A495.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A4FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A50B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A517.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A51B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A527.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A53C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A53D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A54D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A558.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A55E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A55F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A569.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A56A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A570.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A580.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A591.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A592.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A5F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A60A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A61B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A62B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A63B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A63C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A63D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A63E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A64F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A650.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A651.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A652.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A662.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A663.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A664.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A66B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A675.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A676.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A677.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A67B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A688.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A689.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A68A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A68B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A69B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A69C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A69D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A6F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A703.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A706.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A707.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A718.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A719.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A71A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A72A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A72B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A72C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A733.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A73D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A73E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A782.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A783.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A78D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A78E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A79F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A7FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A804.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A80C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A80D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A81E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A81F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A820.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A821.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A832.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A833.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A834.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A835.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A844.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A855.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A865.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A866.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A876.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A887.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A888.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A898.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A915.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A91B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A91C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A92D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A92E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A92F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A930.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A941.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A942.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A952.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A953.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A954.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A955.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A956.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A966.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A967.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A968.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A976.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A977.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A978.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A979.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A97A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A98B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A997.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A99C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\A9F1.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\AA01.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA14.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AA89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AAA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AAA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AAE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AB8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ABFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC51.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AC9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ACE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ACF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AD9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ADFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AE9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AED7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AED8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEEF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AEF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AF9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFE3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\AFF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B017.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B024.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B035.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B045.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B046.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B057.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B068.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B076.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B079.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B07A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B07B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B08C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B096.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B09C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B09D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B09E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B100.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B111.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B112.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B122.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B123.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B124.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B135.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B136.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B137.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B148.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B149.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B14D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B14E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B169.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B179.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B17E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B18A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B19B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B1FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B21E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B23F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B24F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B250.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B251.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B25A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B262.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B263.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B264.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B275.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B276.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B277.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B27A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B287.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B28B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B28C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B298.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B2FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B30D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B30E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B30F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B310.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B311.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B31F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B320.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B321.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B331.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B332.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B333.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B334.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B341.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B364.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B371.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B382.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B384.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B395.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B396.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B3F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B407.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B408.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B423.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B448.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B449.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B462.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B469.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B473.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B474.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B475.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B47A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B47B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B486.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B487.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B488.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B489.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B499.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B4F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B500.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B501.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B502.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B505.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B506.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B507.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B512.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B513.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B527.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B543.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B554.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B555.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B557.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B566.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B567.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B568.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B578.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B579.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B587.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B588.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B58A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B59A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B5FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B60F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B610.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B611.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B617.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B621.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B622.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B643.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B646.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B647.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B673.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B677.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B678.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B683.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B689.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B6C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B6F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B6F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B748.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B769.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B779.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B77A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B78B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B79C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B79D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B79E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B79F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B7DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B80E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B81E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B81F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B820.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B821.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B822.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B832.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B833.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B834.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B845.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B846.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B847.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B886.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B896.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B897.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B898.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B8A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B8A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B8E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B8F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B8F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B907.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B908.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B909.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B90A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B90B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B919.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B939.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B94A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B95A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B95B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B95C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B96D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B96E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B96F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B970.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B981.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B991.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B992.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\B9F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA5A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BA85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAD6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BAFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB2A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BB9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBBF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BBF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BC9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BD96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDCE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BDF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BE96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BED7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BED8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BED9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BEFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BF98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\BFF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C009.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C00B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C01A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C01B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C01C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C02B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C02C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C02D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C03E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C03F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C050.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C051.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C052.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C062.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C063.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C064.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C065.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C076.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C077.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C078.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C079.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C07A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C089.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C09A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C09B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C09C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C09D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C0E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C100.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C10A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C10B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C11B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C130.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C15B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C15C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C16D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C16E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C16F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C17F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C180.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C181.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C182.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C183.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C194.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C195.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C196.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C19F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C1FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C200.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C201.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C211.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C212.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C213.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C214.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C215.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C225.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C226.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C227.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C228.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C238.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C239.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C23A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C23B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C249.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C24A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C24B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C24C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C24D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C25D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C25E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C25F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C270.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C271.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C272.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C273.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C283.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C284.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C295.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C29C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C2F4.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\C305.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C306.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C307.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C308.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C318.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C319.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C31A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C31B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C31C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C328.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C329.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C32A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C32C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C32D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C33B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C33C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C33D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C33E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C34E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C34F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C35E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C35F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C360.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C361.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C372.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C373.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C384.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C385.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C386.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C387.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C38E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C397.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C398.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C39F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3C5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C3FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C419.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C41E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C439.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C43E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C44A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C45A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C45B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C45C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C45F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C49C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C4FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C54C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C56C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C59B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C59C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C5F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C605.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C606.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C617.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C618.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C619.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C62A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C62B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C62C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C635.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C63D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C645.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C646.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C647.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C658.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C659.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C65A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C66A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C66B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C67C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C67D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C67E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C68F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C690.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C691.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C6FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C70D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C70E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C70F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C710.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C721.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C722.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C723.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C724.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C734.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C745.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C774.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C7FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C80B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C80C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C816.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C826.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C83C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C847.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C87C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C896.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C89C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8EF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C8FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C901.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C902.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C913.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C914.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C915.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C91E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C926.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C92F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C93F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C950.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9D3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\C9FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CA9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CAAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CAAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CAAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CABC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CACD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CAEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CAED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB6D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CB9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBF6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CBFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC59.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CC98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCCC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCE0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CCF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD04.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD27.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CD68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDDB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CDFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE2B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE6B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CE80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CECA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CEFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF0D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF21.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF34.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF48.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF49.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF6E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF70.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CFB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CFC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CFD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CFF3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\CFF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D013.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D014.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D034.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D044.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D053.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D055.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D056.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D057.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D058.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D064.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D065.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D069.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D06A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D06B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D076.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D077.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D07B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D087.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D088.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D089.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D09A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D09B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D09C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D0EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D123.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D12A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D13B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D162.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D16B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D173.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D184.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D19A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D1B4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D1C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D1F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D212.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D213.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D219.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D234.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D23A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D244.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D24A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D25B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D25C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D25D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D26E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D26F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D270.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D271.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D274.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D281.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D282.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D283.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D284.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D294.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D295.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D296.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D297.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D2F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D304.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D305.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D306.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D316.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D317.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D318.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D319.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D329.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D32A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D33A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D33B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D33C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D349.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D34A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D34D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D34E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D34F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D35B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D360.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D361.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D362.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D36B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D372.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D373.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D374.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D385.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D38C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D3BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D3EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D41B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D422.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D423.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D42C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D42D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D42E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D43F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D440.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D441.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D451.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D452.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D453.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D482.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D483.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D4F2.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\D503.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D514.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D515.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D516.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D517.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D527.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D539.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D53A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D569.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D579.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D59A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D5F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D608.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D612.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D619.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D642.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D659.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D672.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D673.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D679.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D693.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D694.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D69A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6CB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D6E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D709.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D72B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D739.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D73A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D75A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D799.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D7D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D7D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D7F9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D819.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D81A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D828.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D82B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D85A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D877.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D888.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D88A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D899.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D89B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D8F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D902.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D903.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D904.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D908.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D924.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D954.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D957.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D968.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D969.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D96A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D974.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D97A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D97B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D97C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D98D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D98E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D98F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D994.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D995.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D996.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9A0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9C4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\D9F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA16.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA46.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA8B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DA9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAAF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAD6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAE8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DAEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB07.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB19.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB1A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB4E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBCE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBD0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBD1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBE2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBE3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DBF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC06.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC26.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC79.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC82.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC83.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC84.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC96.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC97.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DC98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCA8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DCFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD1B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DD9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDBC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDCD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DDFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE00.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE6C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DE9C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DECC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DECF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DED0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DEFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF20.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DF81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\DFFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E020.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E034.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E055.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E056.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E07E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E086.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E096.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E097.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E098.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E0F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E103.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E104.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E106.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E107.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E108.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E115.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E116.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E119.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E11A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E127.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E13A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E199.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1A9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1AA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E1E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E214.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E215.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E220.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E226.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E227.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E228.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E238.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E239.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E23A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E23B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E24C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E24D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E24F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E260.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E271.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E27D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E281.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E292.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E2F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E318.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E31C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E31D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E377.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E37C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E37D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E387.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E398.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E399.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E39A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E39D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E39E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E3E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E41F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E42E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E43E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E43F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E44F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E450.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E460.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E461.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E462.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E463.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E474.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E475.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E48E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E4B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E4CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E4DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E4E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E4F5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E515.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E526.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E527.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E528.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E539.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E53A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E54A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E54B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E54C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E55D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E55E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E55F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E56C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E56D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E57E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E57F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E58F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E590.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E591.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5DD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5DE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5DF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5E0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5F1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E5F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E603.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E604.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E60E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E615.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E616.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E617.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E627.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E628.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E629.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E63A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E63B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E63C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E64D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E64E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E64F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E65D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E66E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E66F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E670.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E680.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E681.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E682.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E683.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E68E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E694.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E695.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E696.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E69F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6A8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6BC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6CF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6D5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6D6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E6F0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E701.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E702.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E703.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E713.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E714.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E715.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E716.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E717.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E736.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E737.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E766.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E786.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E787.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E797.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E7F6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E817.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E818.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E826.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E829.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E849.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E857.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E85A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E85B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E887.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8C6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8D7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8E8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8FA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8FB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E8FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E94A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E94C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E95B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E95D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E95E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E96B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E96C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E96E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E96F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E970.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E971.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E982.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9AC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\E9F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA89.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA8A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EA9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EAB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EABC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EADC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EAFC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB2D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB38.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EB78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBA9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBAA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBBA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBBB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EBF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC09.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC0C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC29.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC2C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC3C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC5C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC5D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC8C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC8D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC9D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EC9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECB0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECC1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECC2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECE1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ECE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ED88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDC5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDD8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDE9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EDFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE10.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE11.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE12.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE17.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE18.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE22.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE23.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE25.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE37.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE57.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EE86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EECA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EECB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEDE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEDF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEE5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEF0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEF1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EEF2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF02.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF13.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF53.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF76.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF78.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF98.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EF9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFAD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFAE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFBE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFCF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFF4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\EFF5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\ext2830491529755596861.dll
C:\Users\urmomma\AppData\Local\Temp\ext3041113072756639649.dll
C:\Users\urmomma\AppData\Local\Temp\ext3727985571795989782.dll
C:\Users\urmomma\AppData\Local\Temp\ext662324030247568704.dll
C:\Users\urmomma\AppData\Local\Temp\ext674162783771649569.dll
C:\Users\urmomma\AppData\Local\Temp\ext6864088480007758105.dll
C:\Users\urmomma\AppData\Local\Temp\ext7003865185294628989.dll
C:\Users\urmomma\AppData\Local\Temp\F00E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F01F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F025.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F030.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F045.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F06F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F075.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F080.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F081.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F091.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F092.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F093.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F094.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0A7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0D9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0DA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0E4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F0F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F124.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F13A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F13B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F144.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F145.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F14B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F15C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F17C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F17D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F17E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F185.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F18F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F19F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1D0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1E7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F1F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F207.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F208.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F212.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F228.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F229.tmp.exe

Joe G · 2017/01/02

C:\Users\urmomma\AppData\Local\Temp\F23A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F23B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F23C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F23D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F24D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F24E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F24F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F251.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F260.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F261.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F262.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F263.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F274.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F275.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F276.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F277.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F287.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F288.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F289.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F291.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F292.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F29A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F29B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F29C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2A3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2AD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2AE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2AF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2B6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2BF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2C9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2E2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2E9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2EA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2EB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F2FC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F30.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F304.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F30D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F31.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F314.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F31E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F31F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F32.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F320.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F330.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F335.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F351.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F355.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F365.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F380.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F3B5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F3C0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F3D1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F420.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F423.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F43.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F450.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F451.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F453.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F463.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F471.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F493.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4A6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4B7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4B8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4B9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4BA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4CA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4DB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4DC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4EC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4F3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4FE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F4FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F500.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F504.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F505.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F506.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F517.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F518.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F520.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F529.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F549.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F550.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F579.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F580.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F581.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5A1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5A2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5C3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5D8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5F2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F5F8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F632.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F637.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F658.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F659.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F662.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F679.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F689.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F68A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F692.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6AB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6B2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6BB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6CC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6CD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6D2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6E3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6ED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F703.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F714.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F715.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F72E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F76D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F773.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F78D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F794.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7A4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7BD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7CE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7D4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7EE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F7F4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F815.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F82E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F835.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F846.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F84E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F856.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F85F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F860.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F880.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F8A5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F8B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F8E5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F8E6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F8FF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F906.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F917.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F918.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F928.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F929.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F92A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F92F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F93B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F93C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F93D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F93E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F93F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F94F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F96F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F97F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F98F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F9B0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F9B1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F9BE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F9E1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\F9FD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA3D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA4F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA50.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA62.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA63.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA64.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA9E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FA9F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FAA7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FABF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FAC0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FAD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FAF7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB08.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB0F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB28.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB39.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB3A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB3B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB4B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB4C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB4D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB5E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB5F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB6F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB7F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB80.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB81.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB85.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB92.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB93.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FB95.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBA0.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBA1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBB3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBC6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FBE4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC33.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC44.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC45.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC56.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC67.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC68.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC69.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC6A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC7B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC7C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC7D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC7E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC8E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC8F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC90.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FC91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCA2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCA3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCA4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCA5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCB5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCB7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCC4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCC8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCCA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCCB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCDC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCDD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FCFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD03.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD0E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD24.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD3E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD3F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD54.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD60.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD61.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD71.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD72.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD73.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD74.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD75.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD86.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD88.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD94.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD9A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FD9B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDAB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDAC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDB4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDBD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FDD6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE05.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE55.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE65.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE66.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE77.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FE99.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEB.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEB6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEB9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEC.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEC9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FED.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FEDA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF0A.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF0B.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF15.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF1C.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF1D.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF1E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF2E.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF2F.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF35.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF36.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF40.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF41.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF42.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF47.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF52.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF58.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF87.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FF91.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFB1.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFB2.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFC3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFD.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFD3.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFD4.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFD5.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFD7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFE.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFE6.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFE7.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFF.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFF8.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFF9.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\FFFA.tmp.exe
C:\Users\urmomma\AppData\Local\Temp\fsd266B.exe
C:\Users\urmomma\AppData\Local\Temp\fsd575F.exe
C:\Users\urmomma\AppData\Local\Temp\fsdF4FB.exe
C:\Users\urmomma\AppData\Local\Temp\fsdFF98.exe
C:\Users\urmomma\AppData\Local\Temp\J5JSD21W0GEA.exe
C:\Users\urmomma\AppData\Local\Temp\libeay32.dll
C:\Users\urmomma\AppData\Local\Temp\msvcr120.dll
C:\Users\urmomma\AppData\Local\Temp\sdfB6F.exe
C:\Users\urmomma\AppData\Local\Temp\sqlite3.dll
C:\Users\urmomma\AppData\Local\Temp\sqlite3.exe
C:\Users\urmomma\AppData\Local\Temp\vcredist_x64.exe
C:\Users\urmomma\AppData\Local\Temp\Z5DS5Z078J.exe

==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-12-29 06:30
==================== End of FRST.txt ============================

Joe G · 2017/01/02

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-01-2017
Ran by urmomma (02-01-2017 14:14:02)
Running from C:\Users\urmomma\Desktop
Windows 10 Home Version 1607 (X64) (2016-11-23 16:11:35)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================
3DC15A3F4FED4989BCA3 (S-1-5-21-1640489101-2928496805-630120535-1002 - Limited - Enabled)
8B5D1110211D4A62BE50 (S-1-5-21-1640489101-2928496805-630120535-1006 - Limited - Enabled)
Administrator (S-1-5-21-1640489101-2928496805-630120535-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1640489101-2928496805-630120535-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1640489101-2928496805-630120535-1000 - Limited - Disabled)
Guest (S-1-5-21-1640489101-2928496805-630120535-501 - Limited - Disabled)
urmomma (S-1-5-21-1640489101-2928496805-630120535-1001 - Administrator - Enabled) => C:\Users\urmomma
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AIR Xpand!2 (HKLM\...\{69A89482-FEC4-4E34-97F9-46BB287D0953}) (Version: 12.0.0.615 - AIR Music Technology)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.43.50 - Conexant)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden <==== ATTENTION
Microsoft OneDrive (HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{83E92696-D92D-4c7e-B094-0BE853B191FE}) (Version: 2.5.2.1034 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.5.2.1034 - PACE Anti-Piracy, Inc.) Hidden
PreSonus Studio One 3 x64 (HKLM\...\PreSonus Studio One 3) (Version: 3.2.0.36707 - PreSonus Audio Electronics)
Riffstation (HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\{e2cc3021-7ccf-4f28-8bd0-8cffd31cbd23}) (Version: 1.6 - Sonic Ladder Ltd.)
Search module (HKLM-x32\...\Search module) (Version: - Goobzo) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.3 - Synaptics Incorporated)
Tixati (HKLM-x32\...\tixati) (Version: - )
Zipware (HKLM-x32\...\{2742E6F1-E073-4A77-9728-76097E29B959}) (Version: 1.4.0 - Bazwise)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0756EE29-B3E0-4EFA-AF2C-AB04D0834AE7} - System32\Tasks\{E48E24C1-AB2A-4C8A-99D9-189A77F5E71A} => pcalua.exe -a C:\WINDOWS\cd1b84af9902f5ee49a8439922b70780.exe
Task: {199309DE-A63E-4C36-A1FA-73B40B346CCA} - System32\Tasks\{E46660F5-F040-4C07-87A7-2A59D24CFB4E} => pcalua.exe -a "C:\Program Files\Common Files\Noobzo\GNUpdate\smUninstall.exe"
Task: {266DF560-0F64-463E-96F5-1E2AF3E93309} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {2C036080-C254-4C85-9F19-13864045A89D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {329DB360-1416-4869-BFE4-D1B387083EE4} - System32\Tasks\SMW_UpdateTask_Time_333832363535363730372d374a55414134502a576c4a5a => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {73AC901B-9FFF-4FC8-9E8C-9A52E9D85264} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {8E4648E1-BAB8-4E24-9AF4-A150DB4D2072} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {ECC3A6D6-D1CD-4ED4-9224-DDA4B3EC9262} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {FE0865CA-549C-43E3-B399-0712E8F45DE8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-12-31 14:25 - 2016-12-31 14:25 - 00470592 _____ () C:\WINDOWS\SysWoW64\NetUtils2016.exe
2016-12-31 14:25 - 2017-01-02 03:48 - 00625272 _____ () C:\Windows\System32\NetUtils2016.dll
2016-07-16 04:42 - 2016-07-16 04:42 - 00231424 ____N () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-15 17:00 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-12-15 17:00 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-15 17:00 - 2016-12-09 03:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-15 16:21 - 2016-12-15 16:21 - 01678560 _____ () C:\Users\urmomma\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2016-09-26 05:08 - 2016-09-26 05:08 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-15 17:00 - 2016-12-09 02:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-23 11:51 - 2016-11-02 03:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-23 11:51 - 2016-11-02 03:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-23 11:51 - 2016-11-02 03:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-23 11:51 - 2016-11-02 03:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-23 11:51 - 2016-11-02 03:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-23 11:51 - 2016-11-02 03:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-31 04:46 - 2016-12-31 04:46 - 00068902 _____ () C:\Program Files (x86)\stockholders\liquefaction.exe
2016-12-31 04:45 - 2016-12-31 04:45 - 00010752 _____ () C:\Program Files (x86)\Acquitted\ubud.exe
2016-12-15 16:25 - 2016-12-15 16:25 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-15 16:25 - 2016-12-15 16:25 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-15 16:25 - 2016-12-15 16:25 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-15 16:25 - 2016-12-15 16:25 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2016-12-15 16:21 - 2016-12-15 16:21 - 01244376 _____ () C:\Users\urmomma\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2016-11-23 01:16 - 2017-01-01 08:18 - 00002880 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
34.195.153.94 www.google-analytics.com
34.195.153.94 google-analytics.com
34.195.153.94 mc.yandex.ru
34.195.153.94 top-fwz1.mail.ru
34.195.153.94 site.yandex.net
34.195.153.94 pagead2.googlesyndication.com
34.195.153.94 ad.mail.ru
34.195.153.94 ads.adfox.ru
34.195.153.94 ads.pubmatic.com
34.195.153.94 apis.google.com
34.195.153.94 autocontext.begun.ru
34.195.153.94 b.scorecardresearch.com
34.195.153.94 c.amazon-adsystem.com
34.195.153.94 cdn.admixer.net
34.195.153.94 cdn.cxense.com
34.195.153.94 cdn.livefyre.com
34.195.153.94 cdn.onthe.io
34.195.153.94 cdn.optimizely.com
34.195.153.94 cdn.prom.st
34.195.153.94 cdn.pushwoosh.com
There are 56 more lines.

Joe G · 2017/01/02

==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run: => "DigidesignMMERefresh"
HKLM\...\StartupApproved\Run: => "communallycommunally"
HKLM\...\StartupApproved\Run: => "communally"
HKLM\...\StartupApproved\Run: => "vnlgp"
HKLM\...\StartupApproved\Run32: => "clunkedclunked"
HKLM\...\StartupApproved\Run32: => "clunked"
HKLM\...\StartupApproved\Run32: => "IseUI"
HKLM\...\StartupApproved\Run32: => "DailyBee"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\StartupFolder: => "corry.lnk"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "punjab"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "giladgilad"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "gilad"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "sortssorts"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "sorts"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "Interstatnogui"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "OP7CX6KF79"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "EUQ60OE9EO"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "Y51IWS0Z9H"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "JYCDUAZN1B"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "wlitdo"
HKU\S-1-5-21-1640489101-2928496805-630120535-1001\...\StartupApproved\Run: => "Publisher"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{4A496FC2-4554-476C-AC52-AA195078C976}C:\users\urmomma\downloads\studio one 3\studio one.exe] => C:\users\urmomma\downloads\studio one 3\studio one.exe
FirewallRules: [UDP Query User{0856CCC7-1CB5-47BE-8EEA-01B658A3AD60}C:\users\urmomma\downloads\studio one 3\studio one.exe] => C:\users\urmomma\downloads\studio one 3\studio one.exe
FirewallRules: [TCP Query User{383B2430-3D10-4B00-906A-E37316AACE4E}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{03E33C4F-FAE5-44CE-A778-1B9F5A2FA7F7}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================
Application errors:
==================
Error: (01/02/2017 01:51:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1614
Start Time: 01d26537dacda0ab
Termination Time: 28
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: 2efa471f-d12d-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/02/2017 12:41:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-JVNHDJP)
Description: Package windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel was terminated because it took too long to suspend.
Error: (01/02/2017 03:30:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: onenoteim.exe, version: 16.0.7668.5760, time stamp: 0x584f5b67
Faulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x5825887f
Exception code: 0xc0000008
Fault offset: 0x00000000000a9d2a
Faulting process id: 0x740
Faulting application start time: 0x01d264e33443885b
Faulting application path: C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.7668.57601.0_x64__8wekyb3d8bbwe\onenoteim.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: eda6e122-a651-42e5-9a39-35cfab530b88
Faulting package full name: Microsoft.Office.OneNote_17.7668.57601.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: microsoft.onenoteim
Error: (01/01/2017 10:27:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1e94
Start Time: 01d264b89c8b074e
Termination Time: 60000
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: eee83ae9-d0ab-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/01/2017 07:56:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: bcc
Start Time: 01d264a31bbc8b59
Termination Time: 20
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: 1233a338-d097-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/01/2017 07:51:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1e84
Start Time: 01d264a21b1d37a7
Termination Time: 60000
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: 28304462-d096-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/01/2017 07:32:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-JVNHDJP)
Description: Package Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge#{0bf2b088-27c7-4a12-9014-a495f117ee93} was terminated because it took too long to suspend.
Error: (01/01/2017 01:49:19 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 18f4
Start Time: 01d2646df6d8d62c
Termination Time: 60000
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: 985dcd06-d063-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/01/2017 01:48:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program MicrosoftEdgeCP.exe version 11.0.14393.82 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: be8
Start Time: 01d2647035d972f5
Termination Time: 4372
Application Path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report Id: ac338829-d063-11e6-8f86-78843c3588ea
Faulting package full name: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftEdge
Error: (01/01/2017 01:48:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-JVNHDJP)
Description: Package Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge#{2af83bae-5de4-4c63-a746-8981059313dd} was terminated because it took too long to suspend.

System errors:
=============
Error: (01/02/2017 01:51:08 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-JVNHDJP)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
to the user DESKTOP-JVNHDJP\urmomma SID (S-1-5-21-1640489101-2928496805-630120535-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 01:35:34 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-JVNHDJP)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
to the user DESKTOP-JVNHDJP\urmomma SID (S-1-5-21-1640489101-2928496805-630120535-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 01:15:40 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 12:37:32 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-JVNHDJP)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
to the user DESKTOP-JVNHDJP\urmomma SID (S-1-5-21-1640489101-2928496805-630120535-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 11:23:44 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-JVNHDJP)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
and APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
to the user DESKTOP-JVNHDJP\urmomma SID (S-1-5-21-1640489101-2928496805-630120535-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe SID (S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 10:58:13 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/02/2017 03:16:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (01/01/2017 11:02:06 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Time Broker service, but this action failed with the following error:
An instance of the service is already running.
Error: (01/01/2017 11:00:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Security Center service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
Error: (01/01/2017 11:00:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Time Broker service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

CodeIntegrity:
===================================
Date: 2016-12-31 12:02:21.144
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\iseguard64.dll that did not meet the Windows signing level requirements.
Date: 2016-12-31 11:55:18.398
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\iseguard64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-12-31 11:49:56.755
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\iseguard64.dll that did not meet the Windows signing level requirements.
Date: 2016-12-31 11:49:56.371
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\wininit.exe) attempted to load \Device\HarddiskVolume4\Windows\syswow64\iseguard32.dll that did not meet the Windows signing level requirements.
Date: 2016-12-22 20:56:42.540
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ad7fcf5708f2b7a8806713fae9544edf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-12-22 20:56:40.541
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\ad7fcf5708f2b7a8806713fae9544edf.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================
Processor: AMD A6-5200 APU with Radeon(TM) HD Graphics
Percentage of memory in use: 44%
Total physical RAM: 7629.51 MB
Available physical RAM: 4251.42 MB
Total Virtual: 8845.51 MB
Available Virtual: 5358.31 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:688.51 GB) (Free:655.42 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================

Joe G · 2017/01/02

Hope that I provided the correct information. Please help if you can!!!

Thanks again.

Log in or Sign up

Virus/Malware Undoubtedly. Added users, permission changes etc.

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Share This Page

Log in or Sign up

Virus/Malware Undoubtedly. Added users, permission changes etc.

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Joe G New Member Thread Starter

Share This Page

Useful Searches