.winlogon.exe "C:\Users\test22\AppData\Local\Temp\.winlogon.exe"
schtasks.exe "C:\Windows\System32\schtasks.exe" /Create /TN "Updates\SzbGjGvdD" /XML "C:\Users\test22\AppData\Local\Temp\tmpA40.tmp"
RegSvcs.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
No process loaded Click on a process in the tree above to load its data.