cmd.exe "cmd.exe" /c REG ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v "Shell" /t REG_SZ /d "explorer.exe,C:\Users\test22\AppData\Local\microsoftz\microsoftze.exe,"
2956reg.exe REG ADD "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v "Shell" /t REG_SZ /d "explorer.exe,C:\Users\test22\AppData\Local\microsoftz\microsoftze.exe,"
3012microsoftze.exe "C:\Users\test22\AppData\Local\microsoftz\microsoftze.exe"
2236microsoftzf.exe "C:\Users\test22\AppData\Local\Temp\microsoftzf.exe"
2588