powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Cursors\1u9b015XLbjel9ba4bc43e7\svchost.exe" -Force
5540powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\puredw.exe" -Force
5980powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Windows\Cursors\1u9b015XLbjel9ba4bc43e7\svchost.exe" -Force
5640timeout.exe timeout 1
7772winlogon.exe "C:\Users\test22\Documents\winlogon.exe"
4764