cmd.exe cmd /c ""C:\Users\test22\AppData\Local\Temp\rns.bat" "
2612rundll32.exe C:\Windows\system32\rundll32.exe "C:\Users\test22\AppData\Roaming\Microsoft\NewACt.dat",checkdrive
2716rundll32.exe C:\Windows\system32\rundll32.exe "C:\Users\test22\AppData\Local\Temp\F4FE.tmp",checkdrive
2900rundll32.exe C:\Windows\system32\rundll32.exe "C:\Users\test22\AppData\Local\Temp\F433.tmp",checkdrive
2852