DHL INVOICE__TNSR00021535556778.pdf.exe "C:\Users\test22\AppData\Local\Temp\DHL INVOICE__TNSR00021535556778.pdf.exe"
2100cmd.exe "cmd.exe" /c REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "A" /t REG_SZ /d "C:\Users\test22\AppData\Roaming\A.exe"
2828reg.exe REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "A" /t REG_SZ /d "C:\Users\test22\AppData\Roaming\A.exe"
2440schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host" /xml "C:\Users\test22\AppData\Local\Temp\tmpBEC5.tmp"
2972schtasks.exe "schtasks.exe" /create /f /tn "SMTP Host Task" /xml "C:\Users\test22\AppData\Local\Temp\tmpBFC0.tmp"
2444