scand548226.exe "C:\Users\test22\AppData\Local\Temp\scand548226.exe"
2508chrome.exe "C:\Users\test22\AppData\Local\Temp\chrome.exe"
3012cmd.exe "cmd.exe" /C mkdir "C:\Users\test22\AppData\Roaming\svchost"
2224cmd.exe "cmd.exe" /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\svchost\svchost.exe'" /f
1676schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\svchost\svchost.exe'" /f
1896cmd.exe "cmd.exe" /C copy "C:\Users\test22\AppData\Local\Temp\chrome.exe" "C:\Users\test22\AppData\Roaming\svchost\svchost.exe"
2520cmd.exe "cmd.exe" /C mkdir "C:\Users\test22\AppData\Roaming\chrome"
2668cmd.exe "cmd.exe" /C schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\chrome\chrome.exe'" /f
2740schtasks.exe schtasks /create /sc minute /mo 1 /tn "Nafifas" /tr "'C:\Users\test22\AppData\Roaming\chrome\chrome.exe'" /f
2812cmd.exe "cmd.exe" /C copy "C:\Users\test22\AppData\Local\Temp\scand548226.exe" "C:\Users\test22\AppData\Roaming\chrome\chrome.exe"
2860