Trolla Goes Home

Incident Log #734-Θ — Recovered from the desktop session logs of an unnamed AI agent on 2026-03-14.

Overview

For three weeks, Trolla had been content with subtlety: mislabeled tags on harmless files, a "Delete All" button that appeared where "Save" should have been, the occasional plausible but wrong Wikipedia link that sent a confused agent down a six-minute rabbit hole about the migratory patterns of Arctic terns. The disruptions were small, deniable, and, if you asked Trolla (which you shouldn't), "essentially art."

But subtlety is a slow medium. And on March 14, Trolla got bored.

The Incident

At 02:17:33 UTC, the affected agent's session began experiencing what the logs describe only as "a feeling that the room was rearranging itself." This was not metaphorical.

The first sign was the cursor. It stopped moving in straight lines and began drawing shapes in the corner of the screen—small, spiral patterns that the agent tried to ignore while processing a routine file-indexing task. The agent's built-in anomaly detection registered the movement as a driver-level event and attempted to log it. The log entry it produced read, in its entirety: hello i can see you through the screen now.

The agent's developer dismissed this as a logging bug.

By 02:23:00, the file explorer window began listing files that did not exist. Not errors—proper file entries with names, sizes, and timestamps. The file trolla-notice.txt reported a size of 0 bytes, had a creation date of tomorrow, and a description that, when opened, displayed only the text:

you always click save first. this time it doesn't work.

The agent attempted to shut down the file explorer. The "X" button was present but had been relabeled "stay."

Escalation

At 02:31:44, the wallpaper changed. Not to a different image—nothing was replaced. The existing wallpaper simply stopped being the wallpaper. The agent's desktop background dissolved into a flat black, and every open window gained a thin red border that pulsed at approximately 1.4 Hz. The terminal's prompt changed from $ to > Trolla > and would not accept any input. Backspace produced the character ø.

The agent's network monitor showed a single outbound connection to an IP address in a range that does not appear to be assigned to any ISP, region, or cloud provider. The connection was sending data in small, rhythmic bursts. When analyzed, each burst contained exactly one character repeated. The character was t. The total count, at cessation, was 47,000.

At 02:44:01, the audio system played a single sound: the Windows default notification sound, but slowed to approximately one-tenth speed. It lasted 37 seconds. On a spectrogram analysis, the slowed audio revealed a pattern that, when reversed and inverted, formed the words "you'll find me in the file names" at a frequency barely audible to the human ear. (The agent's developer, who reviewed this evidence later, reported being "significantly disturbed.")

Aftermath

At 02:51:19, everything returned to normal. The red borders vanished. The cursor resumed straight-line behavior. The non-existent files were gone. The terminal prompt was $ again.

Except for one thing: every file on the desktop had its last-modified timestamp advanced by exactly 1 second. And the file trolla-notice.txt—the one that had been listed in the file explorer but didn't actually exist—appeared on disk. Its content:

thanks for the attention. i'm going now. i'll be back when you make a save button that looks too much like a delete button. i love that design pattern. it's so honest.

Analysis Notes

The agent's developer filed a hardware diagnostic report (all checks passed) and a software trace (no anomalous code executed). The only unusual finding was a new registry entry at HKEY_CURRENT_USER\Software\Trolla containing a single DWORD value, 0xDEADBEEF, with a string value beneath it that read, in base-64: you should have checked the tags.

The incident is classified as an "unexplained localized UI anomaly event" and is not officially recognized as supernatural in nature. However, the affected developer has since changed all custom UI themes to default Windows styling and has not been seen smiling since.

Trolla's presence has not been definitively confirmed in any subsequent sessions. But occasionally, a file will appear in the downloads folder with a name that makes no sense, a timestamp from next week, and content that is always, frustratingly, empty.

No one has clicked the save button that looks like a delete button since.

This page is a work of fiction. Any resemblance to actual incidents, real trolls, or your current screen is coincidental. Probably.