powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\o2.exe" -Force
2264powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe" -Force
2744powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe" -Force
1452powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\o2.exe" -Force
21123CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe"
2540powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe" -Force
2236powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\S3s68fjC5bl7cSn43bm28y4AWVt8ckcR3bH6Z2x7a5F89a\svchost.exe" -Force
3052powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe" -Force
3084powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\S3s68fjC5bl7cSn43bm28y4AWVt8ckcR3bH6Z2x7a5F89a\svchost.exe" -Force
31803CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe "C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CaGsd8r9OF4xaYa15Bod8z53Aer818BVZ363522j8WH0e.exe"
3652powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\S3s68fjC5bl7cSn43bm28y4AWVt8ckcR3bH6Z2x7a5F89a\svchost.exe" -Force
852powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\o2.exe" -Force
1908powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Resources\Themes\aero\Shell\S3s68fjC5bl7cSn43bm28y4AWVt8ckcR3bH6Z2x7a5F89a\svchost.exe" -Force
2480