cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "PBAB" C:\Users\test22\AppData\Local\Temp\dovidka.chm
2544wscript.exe "C:\Windows\System32\WScript.exe" "C:\Users\Public\ignit.vbs"
2900wscript.exe "C:\Windows\System32\wscript.exe" //B //E:vbs C:\Users\Public\Favorites\desktop.ini
2984RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe" /U C:\Users\Public\Libraries\core.dll
604