Trojan.Encoder.33603

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\!@\oh.exe
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\waterresourcesag.pptx.exe
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\middaugh_keynote.pptx.exe
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.exe
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\mappingconcepthubberlin.ppt
<Drive name for removable media>:\ksearch_esa_talk.ppt
<Drive name for removable media>:\accountsreceivable.ppt
<Drive name for removable media>:\writingcompletesarnarrative_1103.ppt
<Drive name for removable media>:\file1.ppt
<Drive name for removable media>:\proposaltemplates.ppt
<Drive name for removable media>:\metac.ppt
<Drive name for removable media>:\arrow-down.png
<Drive name for removable media>:\breakpoint.png
<Drive name for removable media>:\calibre.png
<Drive name for removable media>:\block.png
<Drive name for removable media>:\cbz.png
<Drive name for removable media>:\irgeek.pem
<Drive name for removable media>:\hhhlcert.pem
<Drive name for removable media>:\server.pem
<Drive name for removable media>:\cert.pem
<Drive name for removable media>:\lom602.pdf
<Drive name for removable media>:\spib_pima.pdf
<Drive name for removable media>:\ff_ot_user_guide.pdf
<Drive name for removable media>:\dualectls.pdf
<Drive name for removable media>:\clip_480_5sec_6mbps_h264.mp4
<Drive name for removable media>:\clip_1080_5sec_10mbps_h264.mp4
<Drive name for removable media>:\video_1.mp4
<Drive name for removable media>:\51.mp4
<Drive name for removable media>:\roozenedowebinar.pptx.exe
<Drive name for removable media>:\contenttypes.rdf
<Drive name for removable media>:\calculatorworksheet.zip
<Drive name for removable media>:\subjectclassification.zip
<Drive name for removable media>:\1sm_price.zip
<Drive name for removable media>:\price.zip
<Drive name for removable media>:\productos.zip
<Drive name for removable media>:\contractualdeadlines.zip
<Drive name for removable media>:\2013_smccc_competition_points_jul2013.xlsx
<Drive name for removable media>:\cee_mmsprogram_summary_public.xlsx
<Drive name for removable media>:\al.xlsx
<Drive name for removable media>:\disclosuredetails.xlsx
<Drive name for removable media>:\suspendedcompanies.xlsx
<Drive name for removable media>:\trtf_matrix2012_oct.xlsx
<Drive name for removable media>:\national_autism_preparation_programs.xlsx
<Drive name for removable media>:\2013_finalsummaryforweb.xlsx
<Drive name for removable media>:\productos.xls
<Drive name for removable media>:\about.htm
<Drive name for removable media>:\price030215.xls
<Drive name for removable media>:\babyboymaintoscenesbackground_pal.wmv
<Drive name for removable media>:\babyboymaintoscenesbackground.wmv
<Drive name for removable media>:\babyboymaintonotesbackground_pal.wmv
<Drive name for removable media>:\passport_pal.wmv
<Drive name for removable media>:\flower_trans_matte.wmv
<Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
<Drive name for removable media>:\pubnet_855.rtf
<Drive name for removable media>:\fungalnameauthors.rtf
<Drive name for removable media>:\phytoremediation.rtf
<Drive name for removable media>:\foaf.rdf
<Drive name for removable media>:\schema.rdf
<Drive name for removable media>:\taxus_baccata.rdf
<Drive name for removable media>:\20140114.rdf
<Drive name for removable media>:\spanner.mov
<Drive name for removable media>:\dag2_panel1_320_ref.mov
<Drive name for removable media>:\etc6_m_1.mov
<Drive name for removable media>:\applicantform_en.doc.exe
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc.exe
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\fi51.doc.exe
<Drive name for removable media>:\fi51.doc
<Drive name for removable media>:\contoso_1.cer.exe
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\testcertificate.cer.exe
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer.exe
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\contoso.cer.exe
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\contosoroot.cer.exe
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\pmd.cer.exe
<Drive name for removable media>:\pmd.cer
<Drive name for removable media>:\sdksampleunprivdeveloper.cer.exe
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\dashborder_144.bmp.exe
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\split.avi.exe
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\000814251_video_01.avi.exe
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\join.avi.exe
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\lisp_success.doc.exe
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\lisp_success.doc
<Drive name for removable media>:\508softwareandos.doc.exe
<Drive name for removable media>:\pushkin.jpg
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\3.jpg
<Drive name for removable media>:\168.jpg
<Drive name for removable media>:\210252809.jpg
<Drive name for removable media>:\4f0bf7ff71f28.jpg
<Drive name for removable media>:\region-north-karelia.jpg
<Drive name for removable media>:\pushkin.jpeg
<Drive name for removable media>:\3.jpeg
<Drive name for removable media>:\1189.jpeg
<Drive name for removable media>:\howto-index.html
<Drive name for removable media>:\adadsi.html
<Drive name for removable media>:\64bit_notes.htm
<Drive name for removable media>:\iisstart.htm
<Drive name for removable media>:\alert.htm
<Drive name for removable media>:\removedtitles_records.xls
<Drive name for removable media>:\fiche_inscription_2015.zip
<Drive name for removable media>:\tree_view.htm
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\hadac_newsletter_july_2010_final.docx
<Drive name for removable media>:\file_p_00000000_1371597592.docx
<Drive name for removable media>:\issi2013_template_for_posters.docx
<Drive name for removable media>:\holycrosschurchinstructions.docx
<Drive name for removable media>:\glidescope_review_rev_010.docx
<Drive name for removable media>:\adhd_and_obesity.docx
<Drive name for removable media>:\cveuropeo.doc.exe
<Drive name for removable media>:\garden.htm
<Drive name for removable media>:\price030215.zip

Modifies file system

Creates the following files

<Current directory>\iconlib.dll
%TEMP%\hk0ius0o.cmdline
%TEMP%\hk0ius0o.out
%TEMP%\vbcf97a.tmp
%TEMP%\resf97b.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pptx.ico
%TEMP%\xrntvq13.0.vb
%TEMP%\xrntvq13.out
%TEMP%\resf759.tmp
%TEMP%\vbcfb2f.tmp
%TEMP%\resfb30.tmp
%TEMP%\tflypaz2.0.vb
%TEMP%\tflypaz2.cmdline
%TEMP%\tflypaz2.out
%TEMP%\vbcfd42.tmp
%TEMP%\hk0ius0o.0.vb
%TEMP%\vbcf758.tmp
%TEMP%\r4lylq3y.0.vb
%TEMP%\zdsl0luj.cmdline
%TEMP%\zdsl0luj.out
%TEMP%\vbcf343.tmp
%TEMP%\resf344.tmp
%TEMP%\resfd52.tmp
%TEMP%\resf180.tmp
%TEMP%\xrntvq13.cmdline
%TEMP%\f045yycw.0.vb
%TEMP%\resf576.tmp
%TEMP%\zpy5sqyw.0.vb
%TEMP%\zpy5sqyw.cmdline
%TEMP%\zpy5sqyw.out
%TEMP%\f045yycw.cmdline
%TEMP%\f045yycw.out
%TEMP%\vbcf575.tmp
%TEMP%\wg2vt2nx.cmdline
%TEMP%\r4lylq3y.cmdline
%TEMP%\ssfguvev.0.vb
%TEMP%\ssfguvev.cmdline
%TEMP%\ssfguvev.out
%TEMP%\vbc849.tmp
%TEMP%\res85a.tmp
%TEMP%\vi2vffu3.0.vb
%TEMP%\res609.tmp
%TEMP%\vbcf16f.tmp
%TEMP%\vbc5f8.tmp
%TEMP%\resaba.tmp
%TEMP%\flt3oj2m.0.vb
%TEMP%\flt3oj2m.cmdline
%TEMP%\flt3oj2m.out
%TEMP%\vbccdb.tmp
%TEMP%\vi2vffu3.out
%TEMP%\vi2vffu3.cmdline
%TEMP%\zdsl0luj.0.vb
%TEMP%\q5i2h3lm.cmdline
%TEMP%\o2tf1ula.0.vb
%TEMP%\resff45.tmp
%TEMP%\y0dadha1.0.vb
%TEMP%\y0dadha1.cmdline
%TEMP%\y0dadha1.out
%TEMP%\vbc186.tmp
%TEMP%\q5i2h3lm.out
%TEMP%\r4lylq3y.out
%TEMP%\vbcff44.tmp
%TEMP%\o2tf1ula.cmdline
%TEMP%\o2tf1ula.out
%TEMP%\vbc398.tmp
%TEMP%\res3a9.tmp
%TEMP%\q5i2h3lm.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rdf.ico
%TEMP%\res187.tmp
%TEMP%\wg2vt2nx.out
%TEMP%\wg2vt2nx.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rtf.ico
%TEMP%\resde4e.tmp
%TEMP%\ehntrnao.0.vb
%TEMP%\ehntrnao.cmdline
%TEMP%\ehntrnao.out
%TEMP%\lwmiu52z.cmdline
%TEMP%\lwmiu52z.0.vb
%TEMP%\vbcde4d.tmp
%TEMP%\vbce05f.tmp
%TEMP%\uo15jtti.out
%TEMP%\vbce252.tmp
%TEMP%\rese253.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.png.ico
%TEMP%\rese070.tmp
%TEMP%\uo15jtti.0.vb
%TEMP%\uo15jtti.cmdline
%TEMP%\lwmiu52z.out
%TEMP%\ti4uaral.0.vb
%TEMP%\rescdc.tmp
%TEMP%\vor2b2cw.out
%TEMP%\vbcd883.tmp
%TEMP%\resd884.tmp
%TEMP%\admvar2d.0.vb
%TEMP%\resdc89.tmp
%TEMP%\vor2b2cw.0.vb
%TEMP%\vbcdc88.tmp
%TEMP%\admvar2d.cmdline
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pem.ico
%TEMP%\3ojgv43q.0.vb
%TEMP%\3ojgv43q.cmdline
%TEMP%\3ojgv43q.out
%TEMP%\admvar2d.out
%TEMP%\vbcda66.tmp
%TEMP%\resda67.tmp
%TEMP%\vbcab9.tmp
%TEMP%\ti4uaral.cmdline
%TEMP%\w5rnysd4.0.vb
%TEMP%\resebe5.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.ppt.ico
%TEMP%\vpm0gbzr.0.vb
%TEMP%\vpm0gbzr.cmdline
%TEMP%\pgys0fft.cmdline
%TEMP%\pgys0fft.0.vb
%TEMP%\vbcebe4.tmp
%TEMP%\vpm0gbzr.out
%TEMP%\2vkpmzka.cmdline
%TEMP%\2vkpmzka.out
%TEMP%\vbcef4d.tmp
%TEMP%\resef5e.tmp
%TEMP%\vbced98.tmp
%TEMP%\resed99.tmp
%TEMP%\2vkpmzka.0.vb
%TEMP%\pgys0fft.out
%TEMP%\ti4uaral.out
%TEMP%\vbce455.tmp
%TEMP%\w5rnysd4.cmdline
%TEMP%\w5rnysd4.out
%TEMP%\vbce61a.tmp
%TEMP%\rese61b.tmp
%TEMP%\rese9e2.tmp
%TEMP%\rese456.tmp
%TEMP%\vbce9e1.tmp
%TEMP%\fymhwqfu.0.vb
%TEMP%\rese80e.tmp
%TEMP%\o02ritam.0.vb
%TEMP%\o02ritam.cmdline
%TEMP%\o02ritam.out
%TEMP%\fymhwqfu.cmdline
%TEMP%\fymhwqfu.out
%TEMP%\vbce80d.tmp
%TEMP%\resac27.tmp
%TEMP%\hghqvtjq.0.vb
%TEMP%\res3717.tmp
%TEMP%\tdt5g25u.0.vb
%TEMP%\tdt5g25u.cmdline
%TEMP%\tdt5g25u.out
%TEMP%\vbc3996.tmp
%TEMP%\res3997.tmp
%TEMP%\vbc3707.tmp
%TEMP%\fx4wo3yo.out
%TEMP%\0mtofxii.out
%TEMP%\vbc3bc7.tmp
%TEMP%\res3bd8.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.zip.ico
%TEMP%\fx4wo3yo.0.vb
%TEMP%\fx4wo3yo.cmdline
%TEMP%\aamf1cpz.cmdline
%TEMP%\aamf1cpz.0.vb
%TEMP%\aamf1cpz.out
%TEMP%\0mtofxii.0.vb
%TEMP%\res3256.tmp
%TEMP%\mehkckpp.out
%TEMP%\vbc3005.tmp
%TEMP%\res3006.tmp
%TEMP%\ebwt0llf.0.vb
%TEMP%\ebwt0llf.cmdline
%TEMP%\0mtofxii.cmdline
%TEMP%\mehkckpp.0.vb
%TEMP%\mehkckpp.cmdline
%TEMP%\ybilrjip.0.vb
%TEMP%\ybilrjip.cmdline
%TEMP%\ybilrjip.out
%TEMP%\vbc34d5.tmp
%TEMP%\res34d6.tmp
%TEMP%\vbc3255.tmp
%TEMP%\ebwt0llf.out
%TEMP%\resd604.tmp
%TEMP%\res2d19.tmp
%TEMP%\res4856.tmp
%TEMP%\zmuy1dka.0.vb
%TEMP%\zmuy1dka.cmdline
%TEMP%\zmuy1dka.out
%TEMP%\vbc4ab5.tmp
%TEMP%\res4ab6.tmp
%TEMP%\vbc4855.tmp
%TEMP%\res3ee4.tmp
%TEMP%\f5h4iqxf.out
%TEMP%\vbc4cd7.tmp
%TEMP%\res4ce8.tmp
%TEMP%\mlbil3nb.0.vb
%TEMP%\mlbil3nb.cmdline
%TEMP%\mlbil3nb.out
%TEMP%\szddpyct.cmdline
%TEMP%\szddpyct.0.vb
%TEMP%\vbc3ee3.tmp
%TEMP%\f5h4iqxf.0.vb
%TEMP%\res43c4.tmp
%TEMP%\o2js5vrj.out
%TEMP%\vbc41a1.tmp
%TEMP%\res41a2.tmp
%TEMP%\dxlnm5ze.0.vb
%TEMP%\dxlnm5ze.cmdline
%TEMP%\f5h4iqxf.cmdline
%TEMP%\o2js5vrj.0.vb
%TEMP%\o2js5vrj.cmdline
%TEMP%\5ixpl540.0.vb
%TEMP%\5ixpl540.cmdline
%TEMP%\5ixpl540.out
%TEMP%\vbc4652.tmp
%TEMP%\res4653.tmp
%TEMP%\vbc43c3.tmp
%TEMP%\dxlnm5ze.out
%TEMP%\vor2b2cw.cmdline
%TEMP%\kbisce4g.out
%TEMP%\ecnoyusg.cmdline
%TEMP%\pyilpne2.0.vb
%TEMP%\pyilpne2.cmdline
%TEMP%\pyilpne2.out
%TEMP%\vbc1840.tmp
%TEMP%\res1851.tmp
%TEMP%\res1600.tmp
%TEMP%\vbc1cf2.tmp
%TEMP%\vbc1592.tmp
%TEMP%\vbc1adf.tmp
%TEMP%\res1af0.tmp
%TEMP%\snzlddem.0.vb
%TEMP%\snzlddem.cmdline
%TEMP%\snzlddem.out
%TEMP%\owfg3qpu.cmdline
%TEMP%\owfg3qpu.0.vb
%TEMP%\owfg3qpu.out
%TEMP%\cvxaclmf.cmdline
%TEMP%\33v1hmte.0.vb
%TEMP%\vbcf3c.tmp
%TEMP%\resf4c.tmp
%TEMP%\aeuoqdof.0.vb
%TEMP%\aeuoqdof.cmdline
%TEMP%\aeuoqdof.out
%TEMP%\cvxaclmf.out
%TEMP%\vbc2d08.tmp
%TEMP%\hghqvtjq.out
%TEMP%\33v1hmte.cmdline
%TEMP%\33v1hmte.out
%TEMP%\vbc1360.tmp
%TEMP%\res1371.tmp
%TEMP%\cvxaclmf.0.vb
%TEMP%\res1120.tmp
%TEMP%\vbc1110.tmp
%TEMP%\hghqvtjq.cmdline
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.wmv.ico
%TEMP%\res2655.tmp
%TEMP%\cq3nxsve.0.vb
%TEMP%\cq3nxsve.cmdline
%TEMP%\cq3nxsve.out
%TEMP%\vbc2895.tmp
%TEMP%\res2896.tmp
%TEMP%\vbc2654.tmp
%TEMP%\homvh1a3.0.vb
%TEMP%\52xu1okq.out
%TEMP%\ecnoyusg.out
%TEMP%\vbc2a89.tmp
%TEMP%\res2a99.tmp
%TEMP%\kbisce4g.0.vb
%TEMP%\kbisce4g.cmdline
%TEMP%\ecnoyusg.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xlsx.ico
%TEMP%\res1cf3.tmp
%TEMP%\52xu1okq.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xls.ico
%TEMP%\vbc1f62.tmp
%TEMP%\res1f72.tmp
%TEMP%\514apegt.0.vb
%TEMP%\514apegt.cmdline
%TEMP%\514apegt.out
%TEMP%\52xu1okq.cmdline
%TEMP%\homvh1a3.cmdline
%TEMP%\homvh1a3.out
%TEMP%\dilpm0k2.0.vb
%TEMP%\dilpm0k2.cmdline
%TEMP%\dilpm0k2.out
%TEMP%\vbc2403.tmp
%TEMP%\res2414.tmp
%TEMP%\res2194.tmp
%TEMP%\vbc2193.tmp
%TEMP%\vbcd603.tmp
%TEMP%\kx4x3qot.out
%TEMP%\kx4x3qot.cmdline
%TEMP%\fjyqqtrb.out
%TEMP%\vbc5e35.tmp
%TEMP%\res5e36.tmp
%TEMP%\p5azjf2y.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.docx.ico
%TEMP%\res5976.tmp
%TEMP%\fjyqqtrb.cmdline
%TEMP%\p5azjf2y.cmdline
%TEMP%\u0hkiw5a.0.vb
%TEMP%\u0hkiw5a.cmdline
%TEMP%\u0hkiw5a.out
%TEMP%\vbc6621.tmp
%TEMP%\p5azjf2y.out
%TEMP%\vbc624b.tmp
%TEMP%\res624c.tmp
%TEMP%\c3ujuhgv.0.vb
%TEMP%\res6622.tmp
%TEMP%\uxrcky4q.out
%TEMP%\xz5evz2b.0.vb
%TEMP%\xz5evz2b.cmdline
%TEMP%\xz5evz2b.out
%TEMP%\vbc507f.tmp
%TEMP%\vbc5975.tmp
%TEMP%\vbc4cc8.tmp
%TEMP%\wzqnxuo4.out
%TEMP%\res5080.tmp
%TEMP%\vbc54c3.tmp
%TEMP%\res54c4.tmp
%TEMP%\wzqnxuo4.0.vb
%TEMP%\wzqnxuo4.cmdline
%TEMP%\23numqbu.0.vb
%TEMP%\23numqbu.cmdline
%TEMP%\23numqbu.out
%TEMP%\res4cc9.tmp
%TEMP%\5x1ho333.0.vb
%TEMP%\res6a95.tmp
%TEMP%\lgz13xmr.out
%TEMP%\vbc7e53.tmp
%TEMP%\res7e54.tmp
%TEMP%\cy5d4wt3.0.vb
%TEMP%\res78b8.tmp
%TEMP%\vbc78b7.tmp
%TEMP%\lgz13xmr.cmdline
%TEMP%\cy5d4wt3.cmdline
%TEMP%\3edoo2v0.0.vb
%TEMP%\3edoo2v0.cmdline
%TEMP%\3edoo2v0.out
%TEMP%\vbc8738.tmp
%TEMP%\cy5d4wt3.out
%TEMP%\vbc82f4.tmp
%TEMP%\res8305.tmp
%TEMP%\lgz13xmr.0.vb
%TEMP%\5x1ho333.cmdline
%TEMP%\5x1ho333.out
%TEMP%\dx5zfgzd.0.vb
%TEMP%\dx5zfgzd.cmdline
%TEMP%\dx5zfgzd.out
%TEMP%\vbc6f45.tmp
%TEMP%\a0papek4.out
%TEMP%\vbc6a85.tmp
%TEMP%\a0papek4.cmdline
%TEMP%\res6f56.tmp
%TEMP%\vbc73b8.tmp
%TEMP%\res73b9.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.exe.ico
%TEMP%\a0papek4.0.vb
%TEMP%\sfgg0kks.0.vb
%TEMP%\sfgg0kks.cmdline
%TEMP%\sfgg0kks.out
%TEMP%\vbc4f57.tmp
%TEMP%\res8739.tmp
%TEMP%\res4930.tmp
%TEMP%\vbc1a72.tmp
%TEMP%\res1a73.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.cer.ico
%TEMP%\rciqddqk.0.vb
%TEMP%\gxrfegdf.0.vb
%TEMP%\evtb2wbw.cmdline
%TEMP%\gxrfegdf.out
%TEMP%\rciqddqk.cmdline
%TEMP%\lgks0iqv.0.vb
%TEMP%\lgks0iqv.cmdline
%TEMP%\lgks0iqv.out
%TEMP%\vbc256a.tmp
%TEMP%\rciqddqk.out
%TEMP%\vbc1f90.tmp
%TEMP%\res1fa1.tmp
%TEMP%\uxrcky4q.0.vb
%TEMP%\res256b.tmp
%TEMP%\vbc1563.tmp
%TEMP%\tjglzjjx.out
%TEMP%\tjglzjjx.cmdline
%TEMP%\tjglzjjx.0.vb
%TEMP%\res119d.tmp
%TEMP%\vbc119c.tmp
%TEMP%\evtb2wbw.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.bmp.ico
%TEMP%\evtb2wbw.0.vb
%TEMP%\resd49.tmp
%TEMP%\vbcd48.tmp
%TEMP%\ikupklca.out
%TEMP%\ikupklca.cmdline
%TEMP%\ikupklca.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.avi.ico
%TEMP%\res1574.tmp
%TEMP%\uxrcky4q.cmdline
%TEMP%\5as3f3iu.0.vb
%TEMP%\vbc2c1e.tmp
%TEMP%\rhw5v3cu.out
%TEMP%\vbc41d0.tmp
%TEMP%\res41d1.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.doc.ico
%TEMP%\yhndtuxr.0.vb
%TEMP%\5as3f3iu.cmdline
%TEMP%\rhw5v3cu.cmdline
%TEMP%\rhw5v3cu.0.vb
%TEMP%\res45c7.tmp
%TEMP%\aetwrybm.0.vb
%TEMP%\aetwrybm.cmdline
%TEMP%\aetwrybm.out
%TEMP%\vbc492f.tmp
%TEMP%\yhndtuxr.cmdline
%TEMP%\vbc45c6.tmp
%TEMP%\5as3f3iu.out
%TEMP%\yhndtuxr.out
%TEMP%\gxrfegdf.cmdline
%TEMP%\res2c1f.tmp
%TEMP%\urkchps1.0.vb
%TEMP%\urkchps1.cmdline
%TEMP%\urkchps1.out
%TEMP%\vbc3227.tmp
%TEMP%\1idjazg1.out
%TEMP%\res3d2f.tmp
%TEMP%\vbc3d2e.tmp
%TEMP%\c3ujuhgv.out
%TEMP%\vbc3774.tmp
%TEMP%\res3775.tmp
%TEMP%\1idjazg1.0.vb
%TEMP%\1idjazg1.cmdline
%TEMP%\res3228.tmp
%TEMP%\c3ujuhgv.cmdline
%TEMP%\szddpyct.out
%TEMP%\ym3swhnf.0.vb
%TEMP%\vbc8c76.tmp
%TEMP%\0bhg4xvd.0.vb
%TEMP%\0bhg4xvd.cmdline
%TEMP%\0bhg4xvd.out
%TEMP%\vbcc1a9.tmp
%TEMP%\resc1b9.tmp
%TEMP%\ywlxpiv3.out
%TEMP%\resbf69.tmp
%TEMP%\vbcbf68.tmp
%TEMP%\i1fhuc1j.out
%TEMP%\vbcc3ac.tmp
%TEMP%\resc3bc.tmp
%TEMP%\ywlxpiv3.0.vb
%TEMP%\ywlxpiv3.cmdline
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mov.ico
%TEMP%\i1fhuc1j.cmdline
%TEMP%\ym3swhnf.cmdline
%TEMP%\i1fhuc1j.0.vb
%TEMP%\vbcbb43.tmp
%TEMP%\rry4uutc.out
%TEMP%\vbcb96f.tmp
%TEMP%\resb970.tmp
%TEMP%\bban3tp0.0.vb
%TEMP%\bban3tp0.cmdline
%TEMP%\0rwri413.0.vb
%TEMP%\0rwri413.out
%TEMP%\0rwri413.cmdline
%TEMP%\zrmg0m2b.0.vb
%TEMP%\zrmg0m2b.cmdline
%TEMP%\zrmg0m2b.out
%TEMP%\vbcbd65.tmp
%TEMP%\resbd75.tmp
%TEMP%\bban3tp0.out
%TEMP%\resbb53.tmp
%TEMP%\rry4uutc.cmdline
%TEMP%\rry4uutc.0.vb
%TEMP%\1cgrwvht.cmdline
%TEMP%\rescf50.tmp
%TEMP%\nr1b3q1x.0.vb
%TEMP%\nr1b3q1x.cmdline
%TEMP%\nr1b3q1x.out
%TEMP%\vbcd181.tmp
%TEMP%\resc5fd.tmp
%TEMP%\vbccf40.tmp
%TEMP%\sczzdone.out
%TEMP%\n4ryicsw.cmdline
%TEMP%\n4ryicsw.out
%TEMP%\vbcd3c2.tmp
%TEMP%\resd3c3.tmp
%TEMP%\kx4x3qot.0.vb
%TEMP%\resd182.tmp
%TEMP%\n4ryicsw.0.vb
%TEMP%\1cgrwvht.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pdf.ico
%TEMP%\vbcc5fc.tmp
%TEMP%\1cgrwvht.out
%TEMP%\vbcc7b1.tmp
%TEMP%\resc7c2.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mp4.ico
%TEMP%\zefncqtf.0.vb
%TEMP%\resccc1.tmp
%TEMP%\sczzdone.cmdline
%TEMP%\sczzdone.0.vb
%TEMP%\rescadd.tmp
%TEMP%\kpinveg1.0.vb
%TEMP%\kpinveg1.cmdline
%TEMP%\kpinveg1.out
%TEMP%\vbcccc0.tmp
%TEMP%\zefncqtf.cmdline
%TEMP%\vbccadc.tmp
%TEMP%\ym3swhnf.out
%TEMP%\zefncqtf.out
%TEMP%\fjyqqtrb.0.vb
%TEMP%\ptwadq0j.cmdline
%TEMP%\ptwadq0j.out
%TEMP%\vbc9ccb.tmp
%TEMP%\res9cdb.tmp
%TEMP%\roxzfkja.0.vb
%TEMP%\resa525.tmp
%TEMP%\ptwadq0j.0.vb
%TEMP%\res98e5.tmp
%TEMP%\resa0d1.tmp
%TEMP%\5qspzdc5.0.vb
%TEMP%\5qspzdc5.cmdline
%TEMP%\5qspzdc5.out
%TEMP%\vbca524.tmp
%TEMP%\roxzfkja.cmdline
%TEMP%\vbca0d0.tmp
%TEMP%\wp4fnwi0.out
%TEMP%\roxzfkja.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.htm.ico
%TEMP%\res8c77.tmp
%TEMP%\qmnukrtu.0.vb
%TEMP%\qmnukrtu.cmdline
%TEMP%\qmnukrtu.out
%TEMP%\vbc90ba.tmp
%TEMP%\4fmze1xr.cmdline
%TEMP%\vbc98e4.tmp
%TEMP%\4fmze1xr.out
%TEMP%\1g5dnmfz.cmdline
%TEMP%\1g5dnmfz.out
%TEMP%\vbc94fe.tmp
%TEMP%\res94ff.tmp
%TEMP%\4fmze1xr.0.vb
%TEMP%\res90ca.tmp
%TEMP%\1g5dnmfz.0.vb
%TEMP%\resb76d.tmp
%TEMP%\vbcb76c.tmp
%TEMP%\vbcaa23.tmp
%TEMP%\it1bjaoc.0.vb
%TEMP%\it1bjaoc.cmdline
%TEMP%\it1bjaoc.out
%TEMP%\vbcb376.tmp
%TEMP%\resb377.tmp
%TEMP%\4sp4jc5w.cmdline
%TEMP%\resb1b3.tmp
%TEMP%\vbcb1b2.tmp
%TEMP%\vbcb588.tmp
%TEMP%\resb589.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpg.ico
%TEMP%\wp4fnwi0.0.vb
%TEMP%\wp4fnwi0.cmdline
%TEMP%\4hyto151.0.vb
%TEMP%\4hyto151.out
%TEMP%\4sp4jc5w.out
%TEMP%\4hyto151.cmdline
%TEMP%\4sp4jc5w.0.vb
%TEMP%\resaa24.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.html.ico
%TEMP%\lntts2dg.0.vb
%TEMP%\lntts2dg.cmdline
%TEMP%\lntts2dg.out
%TEMP%\n0bpvwal.0.vb
%TEMP%\n0bpvwal.out
%TEMP%\n0bpvwal.cmdline
%TEMP%\fyor3gzz.cmdline
%TEMP%\fyor3gzz.out
%TEMP%\vbcae38.tmp
%TEMP%\resae39.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpeg.ico
%TEMP%\vbcac26.tmp
%TEMP%\fyor3gzz.0.vb
%TEMP%\res4f68.tmp

Sets the 'hidden' attribute to the following files

<Drive name for removable media>:\!@\oh.exe

Deletes the following files

%TEMP%\resd49.tmp
%TEMP%\vbcf97a.tmp
%TEMP%\hk0ius0o.out
%TEMP%\hk0ius0o.cmdline
%TEMP%\hk0ius0o.0.vb
%TEMP%\resfb30.tmp
%TEMP%\vbcfb2f.tmp
%TEMP%\xrntvq13.cmdline
%TEMP%\zpy5sqyw.out
%TEMP%\xrntvq13.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pptx.ico
%TEMP%\resfd52.tmp
%TEMP%\vbcfd42.tmp
%TEMP%\tflypaz2.out
%TEMP%\tflypaz2.cmdline
%TEMP%\resf97b.tmp
%TEMP%\zpy5sqyw.0.vb
%TEMP%\resff45.tmp
%TEMP%\vbcf343.tmp
%TEMP%\zdsl0luj.out
%TEMP%\zdsl0luj.cmdline
%TEMP%\zdsl0luj.0.vb
%TEMP%\tflypaz2.0.vb
%TEMP%\wg2vt2nx.0.vb
%TEMP%\xrntvq13.out
%TEMP%\resf576.tmp
%TEMP%\f045yycw.0.vb
%TEMP%\resf759.tmp
%TEMP%\vbcf758.tmp
%TEMP%\zpy5sqyw.cmdline
%TEMP%\vbcf575.tmp
%TEMP%\f045yycw.cmdline
%TEMP%\f045yycw.out
%TEMP%\vbce80d.tmp
%TEMP%\vbcff44.tmp
%TEMP%\res85a.tmp
%TEMP%\vbc849.tmp
%TEMP%\ssfguvev.cmdline
%TEMP%\ssfguvev.0.vb
%TEMP%\ssfguvev.out
%TEMP%\resaba.tmp
%TEMP%\q5i2h3lm.0.vb
%TEMP%\wg2vt2nx.cmdline
%TEMP%\q5i2h3lm.cmdline
%TEMP%\vi2vffu3.0.vb
%TEMP%\rescdc.tmp
%TEMP%\vbccdb.tmp
%TEMP%\flt3oj2m.0.vb
%TEMP%\flt3oj2m.cmdline
%TEMP%\vi2vffu3.out
%TEMP%\vbcab9.tmp
%TEMP%\resf344.tmp
%TEMP%\vbc5f8.tmp
%TEMP%\vbc398.tmp
%TEMP%\r4lylq3y.cmdline
%TEMP%\res187.tmp
%TEMP%\vbc186.tmp
%TEMP%\y0dadha1.0.vb
%TEMP%\y0dadha1.cmdline
%TEMP%\q5i2h3lm.out
%TEMP%\r4lylq3y.out
%TEMP%\r4lylq3y.0.vb
%TEMP%\o2tf1ula.0.vb
%TEMP%\o2tf1ula.cmdline
%TEMP%\o2tf1ula.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rdf.ico
%TEMP%\res609.tmp
%TEMP%\res3a9.tmp
%TEMP%\y0dadha1.out
%TEMP%\wg2vt2nx.out
%TEMP%\vbcf16f.tmp
%TEMP%\resf180.tmp
%TEMP%\lwmiu52z.out
%TEMP%\rese070.tmp
%TEMP%\vbce05f.tmp
%TEMP%\ehntrnao.out
%TEMP%\vbcde4d.tmp
%TEMP%\admvar2d.0.vb
%TEMP%\lwmiu52z.0.vb
%TEMP%\ehntrnao.0.vb
%TEMP%\uo15jtti.0.vb
%TEMP%\uo15jtti.cmdline
%TEMP%\uo15jtti.out
%TEMP%\rese456.tmp
%TEMP%\ehntrnao.cmdline
%TEMP%\rese253.tmp
%TEMP%\vbce252.tmp
%TEMP%\flt3oj2m.out
%TEMP%\vbce455.tmp
%TEMP%\3ojgv43q.0.vb
%TEMP%\3ojgv43q.cmdline
%TEMP%\3ojgv43q.out
%TEMP%\vbcdc88.tmp
%TEMP%\resdc89.tmp
%TEMP%\admvar2d.cmdline
%TEMP%\admvar2d.out
%TEMP%\resde4e.tmp
%TEMP%\vbcda66.tmp
%TEMP%\resda67.tmp
%TEMP%\vor2b2cw.cmdline
%TEMP%\vor2b2cw.out
%TEMP%\vor2b2cw.0.vb
%TEMP%\vbcd883.tmp
%TEMP%\resd884.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pem.ico
%TEMP%\vi2vffu3.cmdline
%TEMP%\ti4uaral.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.png.ico
%TEMP%\pgys0fft.out
%TEMP%\pgys0fft.0.vb
%TEMP%\resed99.tmp
%TEMP%\vbced98.tmp
%TEMP%\vpm0gbzr.0.vb
%TEMP%\ti4uaral.out
%TEMP%\pgys0fft.cmdline
%TEMP%\vbcebe4.tmp
%TEMP%\resef5e.tmp
%TEMP%\vbcef4d.tmp
%TEMP%\2vkpmzka.cmdline
%TEMP%\2vkpmzka.0.vb
%TEMP%\2vkpmzka.out
%TEMP%\vpm0gbzr.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.ppt.ico
%TEMP%\ti4uaral.cmdline
%TEMP%\vpm0gbzr.cmdline
%TEMP%\lwmiu52z.cmdline
%TEMP%\rese61b.tmp
%TEMP%\vbce61a.tmp
%TEMP%\w5rnysd4.cmdline
%TEMP%\w5rnysd4.out
%TEMP%\w5rnysd4.0.vb
%TEMP%\o02ritam.out
%TEMP%\resebe5.tmp
%TEMP%\o02ritam.cmdline
%TEMP%\fymhwqfu.out
%TEMP%\fymhwqfu.cmdline
%TEMP%\rese9e2.tmp
%TEMP%\vbce9e1.tmp
%TEMP%\o02ritam.0.vb
%TEMP%\rese80e.tmp
%TEMP%\fymhwqfu.0.vb
%TEMP%\resf4c.tmp
%TEMP%\vbcf3c.tmp
%TEMP%\hghqvtjq.0.vb
%TEMP%\0mtofxii.cmdline
%TEMP%\res3997.tmp
%TEMP%\vbc3996.tmp
%TEMP%\tdt5g25u.out
%TEMP%\tdt5g25u.cmdline
%TEMP%\tdt5g25u.0.vb
%TEMP%\vbc3bc7.tmp
%TEMP%\fx4wo3yo.0.vb
%TEMP%\aamf1cpz.cmdline
%TEMP%\aamf1cpz.out
%TEMP%\aamf1cpz.0.vb
%TEMP%\res3ee4.tmp
%TEMP%\vbc3ee3.tmp
%TEMP%\fx4wo3yo.out
%TEMP%\0mtofxii.0.vb
%TEMP%\res3bd8.tmp
%TEMP%\0mtofxii.out
%TEMP%\ebwt0llf.0.vb
%TEMP%\vbc3005.tmp
%TEMP%\mehkckpp.0.vb
%TEMP%\mehkckpp.cmdline
%TEMP%\mehkckpp.out
%TEMP%\res3256.tmp
%TEMP%\vbc3255.tmp
%TEMP%\ebwt0llf.out
%TEMP%\res3717.tmp
%TEMP%\ebwt0llf.cmdline
%TEMP%\res34d6.tmp
%TEMP%\vbc34d5.tmp
%TEMP%\ybilrjip.out
%TEMP%\ybilrjip.cmdline
%TEMP%\ybilrjip.0.vb
%TEMP%\vbc3707.tmp
%TEMP%\dxlnm5ze.cmdline
%TEMP%\kx4x3qot.cmdline
%TEMP%\res41a2.tmp
%TEMP%\f5h4iqxf.out
%TEMP%\res4ab6.tmp
%TEMP%\vbc4ab5.tmp
%TEMP%\zmuy1dka.out
%TEMP%\zmuy1dka.cmdline
%TEMP%\zmuy1dka.0.vb
%TEMP%\vbc4cd7.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.zip.ico
%TEMP%\szddpyct.cmdline
%TEMP%\szddpyct.out
%TEMP%\szddpyct.0.vb
%TEMP%\res4f68.tmp
%TEMP%\vbc4f57.tmp
%TEMP%\mlbil3nb.cmdline
%TEMP%\f5h4iqxf.cmdline
%TEMP%\res3006.tmp
%TEMP%\f5h4iqxf.0.vb
%TEMP%\dxlnm5ze.out
%TEMP%\vbc41a1.tmp
%TEMP%\o2js5vrj.0.vb
%TEMP%\o2js5vrj.out
%TEMP%\o2js5vrj.cmdline
%TEMP%\res43c4.tmp
%TEMP%\vbc43c3.tmp
%TEMP%\fx4wo3yo.cmdline
%TEMP%\res4856.tmp
%TEMP%\dxlnm5ze.0.vb
%TEMP%\res4653.tmp
%TEMP%\vbc4652.tmp
%TEMP%\5ixpl540.0.vb
%TEMP%\5ixpl540.cmdline
%TEMP%\5ixpl540.out
%TEMP%\vbc4855.tmp
%TEMP%\514apegt.out
%TEMP%\kbisce4g.0.vb
%TEMP%\res2a99.tmp
%TEMP%\res1851.tmp
%TEMP%\vbc1840.tmp
%TEMP%\pyilpne2.cmdline
%TEMP%\pyilpne2.0.vb
%TEMP%\pyilpne2.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.wmv.ico
%TEMP%\vbc1adf.tmp
%TEMP%\snzlddem.0.vb
%TEMP%\owfg3qpu.cmdline
%TEMP%\owfg3qpu.0.vb
%TEMP%\owfg3qpu.out
%TEMP%\res1cf3.tmp
%TEMP%\vbc1cf2.tmp
%TEMP%\snzlddem.cmdline
%TEMP%\cvxaclmf.out
%TEMP%\res1af0.tmp
%TEMP%\cvxaclmf.0.vb
%TEMP%\aeuoqdof.0.vb
%TEMP%\hghqvtjq.cmdline
%TEMP%\hghqvtjq.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rtf.ico
%TEMP%\res1120.tmp
%TEMP%\vbc1110.tmp
%TEMP%\aeuoqdof.out
%TEMP%\aeuoqdof.cmdline
%TEMP%\vbc1592.tmp
%TEMP%\res1371.tmp
%TEMP%\vbc1360.tmp
%TEMP%\33v1hmte.0.vb
%TEMP%\33v1hmte.cmdline
%TEMP%\33v1hmte.out
%TEMP%\res1600.tmp
%TEMP%\cvxaclmf.cmdline
%TEMP%\mlbil3nb.0.vb
%TEMP%\kbisce4g.out
%TEMP%\vbc1f62.tmp
%TEMP%\52xu1okq.cmdline
%TEMP%\res2896.tmp
%TEMP%\vbc2895.tmp
%TEMP%\cq3nxsve.out
%TEMP%\cq3nxsve.0.vb
%TEMP%\cq3nxsve.cmdline
%TEMP%\vbc2a89.tmp
%TEMP%\res1f72.tmp
%TEMP%\ecnoyusg.cmdline
%TEMP%\ecnoyusg.0.vb
%TEMP%\ecnoyusg.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xlsx.ico
%TEMP%\res2d19.tmp
%TEMP%\vbc2d08.tmp
%TEMP%\52xu1okq.0.vb
%TEMP%\kbisce4g.cmdline
%TEMP%\52xu1okq.out
%TEMP%\514apegt.cmdline
%TEMP%\homvh1a3.out
%TEMP%\homvh1a3.0.vb
%TEMP%\homvh1a3.cmdline
%TEMP%\res2194.tmp
%TEMP%\vbc2193.tmp
%TEMP%\514apegt.0.vb
%TEMP%\snzlddem.out
%TEMP%\res2655.tmp
%TEMP%\res2414.tmp
%TEMP%\vbc2403.tmp
%TEMP%\dilpm0k2.out
%TEMP%\dilpm0k2.0.vb
%TEMP%\dilpm0k2.cmdline
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xls.ico
%TEMP%\vbc2654.tmp
%TEMP%\res4ce8.tmp
%TEMP%\kx4x3qot.out
%TEMP%\nr1b3q1x.cmdline
%TEMP%\vbc5e35.tmp
%TEMP%\fjyqqtrb.cmdline
%TEMP%\fjyqqtrb.out
%TEMP%\fjyqqtrb.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.docx.ico
%TEMP%\res624c.tmp
%TEMP%\p5azjf2y.cmdline
%TEMP%\wzqnxuo4.out
%TEMP%\p5azjf2y.out
%TEMP%\p5azjf2y.0.vb
%TEMP%\res6622.tmp
%TEMP%\vbc6621.tmp
%TEMP%\u0hkiw5a.out
%TEMP%\u0hkiw5a.0.vb
%TEMP%\res5e36.tmp
%TEMP%\wzqnxuo4.0.vb
%TEMP%\res6a95.tmp
%TEMP%\vbc507f.tmp
%TEMP%\xz5evz2b.out
%TEMP%\xz5evz2b.0.vb
%TEMP%\xz5evz2b.cmdline
%TEMP%\u0hkiw5a.cmdline
%TEMP%\uxrcky4q.cmdline
%TEMP%\vbc624b.tmp
%TEMP%\res54c4.tmp
%TEMP%\23numqbu.cmdline
%TEMP%\res5976.tmp
%TEMP%\vbc5975.tmp
%TEMP%\wzqnxuo4.cmdline
%TEMP%\vbc54c3.tmp
%TEMP%\23numqbu.out
%TEMP%\23numqbu.0.vb
%TEMP%\vbc3774.tmp
%TEMP%\vbc6a85.tmp
%TEMP%\res7e54.tmp
%TEMP%\vbc7e53.tmp
%TEMP%\lgz13xmr.cmdline
%TEMP%\lgz13xmr.0.vb
%TEMP%\lgz13xmr.out
%TEMP%\res8305.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.exe.ico
%TEMP%\uxrcky4q.out
%TEMP%\a0papek4.out
%TEMP%\cy5d4wt3.cmdline
%TEMP%\res8739.tmp
%TEMP%\vbc8738.tmp
%TEMP%\3edoo2v0.cmdline
%TEMP%\3edoo2v0.out
%TEMP%\cy5d4wt3.out
%TEMP%\vbc82f4.tmp
%TEMP%\res5080.tmp
%TEMP%\a0papek4.0.vb
%TEMP%\vbc73b8.tmp
%TEMP%\5x1ho333.0.vb
%TEMP%\res6f56.tmp
%TEMP%\vbc6f45.tmp
%TEMP%\dx5zfgzd.0.vb
%TEMP%\dx5zfgzd.cmdline
%TEMP%\a0papek4.cmdline
%TEMP%\5x1ho333.cmdline
%TEMP%\5x1ho333.out
%TEMP%\sfgg0kks.out
%TEMP%\sfgg0kks.cmdline
%TEMP%\sfgg0kks.0.vb
%TEMP%\res78b8.tmp
%TEMP%\vbc78b7.tmp
%TEMP%\res73b9.tmp
%TEMP%\dx5zfgzd.out
%TEMP%\uxrcky4q.0.vb
%TEMP%\vbc4cc8.tmp
%TEMP%\res4cc9.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.bmp.ico
%TEMP%\res1fa1.tmp
%TEMP%\vbc1f90.tmp
%TEMP%\rciqddqk.cmdline
%TEMP%\gxrfegdf.out
%TEMP%\evtb2wbw.cmdline
%TEMP%\gxrfegdf.cmdline
%TEMP%\rciqddqk.out
%TEMP%\vbc256a.tmp
%TEMP%\lgks0iqv.cmdline
%TEMP%\lgks0iqv.0.vb
%TEMP%\lgks0iqv.out
%TEMP%\rciqddqk.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.cer.ico
%TEMP%\res256b.tmp
%TEMP%\3edoo2v0.0.vb
%TEMP%\res2c1f.tmp
%TEMP%\tjglzjjx.cmdline
%TEMP%\tjglzjjx.out
%TEMP%\tjglzjjx.0.vb
%TEMP%\vbc1563.tmp
%TEMP%\res1574.tmp
%TEMP%\evtb2wbw.out
%TEMP%\evtb2wbw.0.vb
%TEMP%\vbc1a72.tmp
%TEMP%\vbc119c.tmp
%TEMP%\res119d.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.avi.ico
%TEMP%\ikupklca.0.vb
%TEMP%\ikupklca.cmdline
%TEMP%\ikupklca.out
%TEMP%\vbcd48.tmp
%TEMP%\res1a73.tmp
%TEMP%\cy5d4wt3.0.vb
%TEMP%\vbc2c1e.tmp
%TEMP%\5as3f3iu.cmdline
%TEMP%\rhw5v3cu.cmdline
%TEMP%\rhw5v3cu.out
%TEMP%\res45c7.tmp
%TEMP%\vbc45c6.tmp
%TEMP%\yhndtuxr.0.vb
%TEMP%\5as3f3iu.out
%TEMP%\rhw5v3cu.0.vb
%TEMP%\vbc41d0.tmp
%TEMP%\res4930.tmp
%TEMP%\vbc492f.tmp
%TEMP%\aetwrybm.cmdline
%TEMP%\aetwrybm.0.vb
%TEMP%\aetwrybm.out
%TEMP%\yhndtuxr.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.doc.ico
%TEMP%\5as3f3iu.0.vb
%TEMP%\yhndtuxr.cmdline
%TEMP%\gxrfegdf.0.vb
%TEMP%\res3228.tmp
%TEMP%\vbc3227.tmp
%TEMP%\urkchps1.0.vb
%TEMP%\urkchps1.cmdline
%TEMP%\urkchps1.out
%TEMP%\1idjazg1.0.vb
%TEMP%\res41d1.tmp
%TEMP%\1idjazg1.cmdline
%TEMP%\c3ujuhgv.0.vb
%TEMP%\c3ujuhgv.out
%TEMP%\res3d2f.tmp
%TEMP%\vbc3d2e.tmp
%TEMP%\1idjazg1.out
%TEMP%\res3775.tmp
%TEMP%\c3ujuhgv.cmdline
%TEMP%\res8c77.tmp
%TEMP%\vbc8c76.tmp
%TEMP%\ym3swhnf.cmdline
%TEMP%\0rwri413.0.vb
%TEMP%\resc1b9.tmp
%TEMP%\vbcc1a9.tmp
%TEMP%\0bhg4xvd.cmdline
%TEMP%\0bhg4xvd.0.vb
%TEMP%\0bhg4xvd.out
%TEMP%\vbcc3ac.tmp
%TEMP%\ywlxpiv3.out
%TEMP%\i1fhuc1j.0.vb
%TEMP%\i1fhuc1j.cmdline
%TEMP%\i1fhuc1j.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mov.ico
%TEMP%\resc5fd.tmp
%TEMP%\vbcc5fc.tmp
%TEMP%\0rwri413.out
%TEMP%\resc3bc.tmp
%TEMP%\0rwri413.cmdline
%TEMP%\bban3tp0.0.vb
%TEMP%\vbcb96f.tmp
%TEMP%\rry4uutc.cmdline
%TEMP%\rry4uutc.out
%TEMP%\rry4uutc.0.vb
%TEMP%\resbb53.tmp
%TEMP%\vbcbb43.tmp
%TEMP%\bban3tp0.cmdline
%TEMP%\resbf69.tmp
%TEMP%\bban3tp0.out
%TEMP%\resbd75.tmp
%TEMP%\vbcbd65.tmp
%TEMP%\zrmg0m2b.out
%TEMP%\zrmg0m2b.cmdline
%TEMP%\zrmg0m2b.0.vb
%TEMP%\vbcbf68.tmp
%TEMP%\zefncqtf.cmdline
%TEMP%\kx4x3qot.0.vb
%TEMP%\resc7c2.tmp
%TEMP%\sczzdone.out
%TEMP%\sczzdone.cmdline
%TEMP%\resd182.tmp
%TEMP%\vbcd181.tmp
%TEMP%\nr1b3q1x.out
%TEMP%\nr1b3q1x.0.vb
%TEMP%\resd3c3.tmp
%TEMP%\ywlxpiv3.0.vb
%TEMP%\vbcd3c2.tmp
%TEMP%\n4ryicsw.cmdline
%TEMP%\n4ryicsw.out
%TEMP%\n4ryicsw.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pdf.ico
%TEMP%\resd604.tmp
%TEMP%\sczzdone.0.vb
%TEMP%\resb970.tmp
%TEMP%\vbccf40.tmp
%TEMP%\zefncqtf.out
%TEMP%\vbcc7b1.tmp
%TEMP%\1cgrwvht.0.vb
%TEMP%\1cgrwvht.cmdline
%TEMP%\1cgrwvht.out
%TEMP%\rescadd.tmp
%TEMP%\vbccadc.tmp
%TEMP%\ywlxpiv3.cmdline
%TEMP%\kpinveg1.0.vb
%TEMP%\zefncqtf.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mp4.ico
%TEMP%\resccc1.tmp
%TEMP%\vbcccc0.tmp
%TEMP%\kpinveg1.out
%TEMP%\kpinveg1.cmdline
%TEMP%\rescf50.tmp
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.html.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpg.ico
%TEMP%\resb589.tmp
%TEMP%\res9cdb.tmp
%TEMP%\vbc9ccb.tmp
%TEMP%\ptwadq0j.0.vb
%TEMP%\ptwadq0j.cmdline
%TEMP%\ptwadq0j.out
%TEMP%\resa0d1.tmp
%TEMP%\roxzfkja.cmdline
%TEMP%\5qspzdc5.cmdline
%TEMP%\roxzfkja.out
%TEMP%\roxzfkja.0.vb
%TEMP%\resa525.tmp
%TEMP%\vbca524.tmp
%TEMP%\5qspzdc5.0.vb
%TEMP%\5qspzdc5.out
%TEMP%\4fmze1xr.cmdline
%TEMP%\vbca0d0.tmp
%TEMP%\4fmze1xr.0.vb
%TEMP%\qmnukrtu.cmdline
%TEMP%\ym3swhnf.0.vb
%TEMP%\ym3swhnf.out
%TEMP%\res90ca.tmp
%TEMP%\vbc90ba.tmp
%TEMP%\qmnukrtu.0.vb
%TEMP%\qmnukrtu.out
%TEMP%\res94ff.tmp
%TEMP%\vbc98e4.tmp
%TEMP%\vbc94fe.tmp
%TEMP%\1g5dnmfz.cmdline
%TEMP%\1g5dnmfz.0.vb
%TEMP%\1g5dnmfz.out
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.htm.ico
%TEMP%\res98e5.tmp
%TEMP%\4fmze1xr.out
%TEMP%\vbcd603.tmp
%TEMP%\wp4fnwi0.cmdline
%TEMP%\4sp4jc5w.0.vb
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpeg.ico
%TEMP%\resb377.tmp
%TEMP%\vbcb376.tmp
%TEMP%\it1bjaoc.0.vb
%TEMP%\it1bjaoc.out
%TEMP%\it1bjaoc.cmdline
%TEMP%\vbcb588.tmp
%TEMP%\vbcaa23.tmp
%TEMP%\4hyto151.out
%TEMP%\4hyto151.0.vb
%TEMP%\4hyto151.cmdline
%TEMP%\resb76d.tmp
%TEMP%\vbcb76c.tmp
%TEMP%\wp4fnwi0.0.vb
%TEMP%\n0bpvwal.cmdline
%TEMP%\wp4fnwi0.out
%TEMP%\n0bpvwal.0.vb
%TEMP%\lntts2dg.0.vb
%TEMP%\4sp4jc5w.cmdline
%TEMP%\4sp4jc5w.out
%TEMP%\resac27.tmp
%TEMP%\vbcac26.tmp
%TEMP%\lntts2dg.cmdline
%TEMP%\lntts2dg.out
%TEMP%\resaa24.tmp
%TEMP%\vbcb1b2.tmp
%TEMP%\resae39.tmp
%TEMP%\vbcae38.tmp
%TEMP%\fyor3gzz.out
%TEMP%\fyor3gzz.cmdline
%TEMP%\fyor3gzz.0.vb
%TEMP%\resb1b3.tmp
%TEMP%\n0bpvwal.out
%TEMP%\mlbil3nb.out

Substitutes the following executable files

<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\utorrent.exe

Substitutes the following files

%ALLUSERSPROFILE%\kcsbfeqsendn\!@.avi.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xls.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.wmv.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rtf.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.rdf.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pptx.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.ppt.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.png.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pem.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.pdf.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mp4.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.mov.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpg.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.jpeg.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.html.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.htm.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.exe.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.docx.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.doc.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.cer.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.xlsx.ico
%ALLUSERSPROFILE%\kcsbfeqsendn\!@.zip.ico

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ikupklca.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zpy5sqyw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF759.tmp" "%TEMP%\vbcF758.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\hk0ius0o.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF97B.tmp" "%TEMP%\vbcF97A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xrntvq13.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFB30.tmp" "%TEMP%\vbcFB2F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tflypaz2.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFD52.tmp" "%TEMP%\vbcFD42.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\r4lylq3y.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\w5rnysd4.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFF45.tmp" "%TEMP%\vbcFF44.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES187.tmp" "%TEMP%\vbc186.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o2tf1ula.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3A9.tmp" "%TEMP%\vbc398.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\q5i2h3lm.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES609.tmp" "%TEMP%\vbc5F8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ssfguvev.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES85A.tmp" "%TEMP%\vbc849.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vi2vffu3.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESABA.tmp" "%TEMP%\vbcAB9.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\flt3oj2m.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF344.tmp" "%TEMP%\vbcF343.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\y0dadha1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF576.tmp" "%TEMP%\vbcF575.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\f045yycw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zdsl0luj.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF180.tmp" "%TEMP%\vbcF16F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\3ojgv43q.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDC89.tmp" "%TEMP%\vbcDC88.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lwmiu52z.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDE4E.tmp" "%TEMP%\vbcDE4D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ehntrnao.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE070.tmp" "%TEMP%\vbcE05F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uo15jtti.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE253.tmp" "%TEMP%\vbcE252.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ti4uaral.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCDC.tmp" "%TEMP%\vbcCDB.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE456.tmp" "%TEMP%\vbcE455.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD884.tmp" "%TEMP%\vbcD883.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE61B.tmp" "%TEMP%\vbcE61A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE80E.tmp" "%TEMP%\vbcE80D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o02ritam.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE9E2.tmp" "%TEMP%\vbcE9E1.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pgys0fft.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESEBE5.tmp" "%TEMP%\vbcEBE4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vpm0gbzr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESED99.tmp" "%TEMP%\vbcED98.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2vkpmzka.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESEF5E.tmp" "%TEMP%\vbcEF4D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\admvar2d.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wg2vt2nx.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fymhwqfu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDA67.tmp" "%TEMP%\vbcDA66.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\hghqvtjq.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\33v1hmte.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ybilrjip.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES34D6.tmp" "%TEMP%\vbc34D5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0mtofxii.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3717.tmp" "%TEMP%\vbc3707.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tdt5g25u.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3997.tmp" "%TEMP%\vbc3996.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aamf1cpz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3BD8.tmp" "%TEMP%\vbc3BC7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fx4wo3yo.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3EE4.tmp" "%TEMP%\vbc3EE3.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\mehkckpp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o2js5vrj.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dxlnm5ze.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES43C4.tmp" "%TEMP%\vbc43C3.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5ixpl540.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4653.tmp" "%TEMP%\vbc4652.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\f5h4iqxf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4856.tmp" "%TEMP%\vbc4855.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zmuy1dka.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4AB6.tmp" "%TEMP%\vbc4AB5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\szddpyct.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CE8.tmp" "%TEMP%\vbc4CD7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ebwt0llf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3256.tmp" "%TEMP%\vbc3255.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3006.tmp" "%TEMP%\vbc3005.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2D19.tmp" "%TEMP%\vbc2D08.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4sp4jc5w.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1371.tmp" "%TEMP%\vbc1360.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cvxaclmf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1600.tmp" "%TEMP%\vbc1592.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pyilpne2.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1851.tmp" "%TEMP%\vbc1840.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\owfg3qpu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1AF0.tmp" "%TEMP%\vbc1ADF.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\snzlddem.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1CF3.tmp" "%TEMP%\vbc1CF2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF4C.tmp" "%TEMP%\vbcF3C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1120.tmp" "%TEMP%\vbc1110.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aeuoqdof.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\homvh1a3.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dilpm0k2.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2414.tmp" "%TEMP%\vbc2403.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\52xu1okq.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2655.tmp" "%TEMP%\vbc2654.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cq3nxsve.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2896.tmp" "%TEMP%\vbc2895.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ecnoyusg.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2A99.tmp" "%TEMP%\vbc2A89.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kbisce4g.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1F72.tmp" "%TEMP%\vbc1F62.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\514apegt.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2194.tmp" "%TEMP%\vbc2193.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vor2b2cw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD604.tmp" "%TEMP%\vbcD603.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kx4x3qot.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES54C4.tmp" "%TEMP%\vbc54C3.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wzqnxuo4.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5976.tmp" "%TEMP%\vbc5975.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fjyqqtrb.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5E36.tmp" "%TEMP%\vbc5E35.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\p5azjf2y.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES624C.tmp" "%TEMP%\vbc624B.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u0hkiw5a.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6622.tmp" "%TEMP%\vbc6621.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5x1ho333.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8739.tmp" "%TEMP%\vbc8738.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6A95.tmp" "%TEMP%\vbc6A85.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6F56.tmp" "%TEMP%\vbc6F45.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sfgg0kks.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES73B9.tmp" "%TEMP%\vbc73B8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a0papek4.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES78B8.tmp" "%TEMP%\vbc78B7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lgz13xmr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7E54.tmp" "%TEMP%\vbc7E53.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cy5d4wt3.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8305.tmp" "%TEMP%\vbc82F4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xz5evz2b.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CC9.tmp" "%TEMP%\vbc4CC8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\23numqbu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uxrcky4q.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4930.tmp" "%TEMP%\vbc492F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD49.tmp" "%TEMP%\vbcD48.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES119D.tmp" "%TEMP%\vbc119C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tjglzjjx.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1574.tmp" "%TEMP%\vbc1563.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\gxrfegdf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1A73.tmp" "%TEMP%\vbc1A72.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rciqddqk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1FA1.tmp" "%TEMP%\vbc1F90.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lgks0iqv.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES256B.tmp" "%TEMP%\vbc256A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\3edoo2v0.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5as3f3iu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dx5zfgzd.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\urkchps1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\c3ujuhgv.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3775.tmp" "%TEMP%\vbc3774.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1idjazg1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3D2F.tmp" "%TEMP%\vbc3D2E.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rhw5v3cu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES41D1.tmp" "%TEMP%\vbc41D0.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\yhndtuxr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES45C7.tmp" "%TEMP%\vbc45C6.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aetwrybm.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2C1F.tmp" "%TEMP%\vbc2C1E.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\evtb2wbw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3228.tmp" "%TEMP%\vbc3227.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5080.tmp" "%TEMP%\vbc507F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ym3swhnf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bban3tp0.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zrmg0m2b.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBD75.tmp" "%TEMP%\vbcBD65.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0rwri413.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBF69.tmp" "%TEMP%\vbcBF68.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0bhg4xvd.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC1B9.tmp" "%TEMP%\vbcC1A9.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\i1fhuc1j.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC3BC.tmp" "%TEMP%\vbcC3AC.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ywlxpiv3.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB970.tmp" "%TEMP%\vbcB96F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8C77.tmp" "%TEMP%\vbc8C76.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBB53.tmp" "%TEMP%\vbcBB43.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC5FD.tmp" "%TEMP%\vbcC5FC.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCADD.tmp" "%TEMP%\vbcCADC.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kpinveg1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCCC1.tmp" "%TEMP%\vbcCCC0.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sczzdone.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCF50.tmp" "%TEMP%\vbcCF40.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\nr1b3q1x.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD182.tmp" "%TEMP%\vbcD181.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\n4ryicsw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD3C3.tmp" "%TEMP%\vbcD3C2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1cgrwvht.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC7C2.tmp" "%TEMP%\vbcC7B1.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zefncqtf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES41A2.tmp" "%TEMP%\vbc41A1.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\mlbil3nb.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wp4fnwi0.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES90CA.tmp" "%TEMP%\vbc90BA.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1g5dnmfz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES94FF.tmp" "%TEMP%\vbc94FE.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4fmze1xr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES98E5.tmp" "%TEMP%\vbc98E4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ptwadq0j.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9CDB.tmp" "%TEMP%\vbc9CCB.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\roxzfkja.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA0D1.tmp" "%TEMP%\vbcA0D0.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5qspzdc5.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB76D.tmp" "%TEMP%\vbcB76C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rry4uutc.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA525.tmp" "%TEMP%\vbcA524.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lntts2dg.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAC27.tmp" "%TEMP%\vbcAC26.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fyor3gzz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAE39.tmp" "%TEMP%\vbcAE38.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\n0bpvwal.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB1B3.tmp" "%TEMP%\vbcB1B2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\it1bjaoc.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB377.tmp" "%TEMP%\vbcB376.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4hyto151.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB589.tmp" "%TEMP%\vbcB588.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qmnukrtu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAA24.tmp" "%TEMP%\vbcAA23.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4F68.tmp" "%TEMP%\vbc4F57.tmp"' (with hidden window)

Executes the following

'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ikupklca.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zpy5sqyw.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF759.tmp" "%TEMP%\vbcF758.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\hk0ius0o.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF97B.tmp" "%TEMP%\vbcF97A.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xrntvq13.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFB30.tmp" "%TEMP%\vbcFB2F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tflypaz2.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFD52.tmp" "%TEMP%\vbcFD42.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\r4lylq3y.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\w5rnysd4.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFF45.tmp" "%TEMP%\vbcFF44.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES187.tmp" "%TEMP%\vbc186.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o2tf1ula.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3A9.tmp" "%TEMP%\vbc398.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\q5i2h3lm.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES609.tmp" "%TEMP%\vbc5F8.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ssfguvev.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES85A.tmp" "%TEMP%\vbc849.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vi2vffu3.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESABA.tmp" "%TEMP%\vbcAB9.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\flt3oj2m.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF344.tmp" "%TEMP%\vbcF343.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\y0dadha1.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF576.tmp" "%TEMP%\vbcF575.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\f045yycw.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zdsl0luj.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF180.tmp" "%TEMP%\vbcF16F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\3ojgv43q.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDC89.tmp" "%TEMP%\vbcDC88.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lwmiu52z.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDE4E.tmp" "%TEMP%\vbcDE4D.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ehntrnao.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE070.tmp" "%TEMP%\vbcE05F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uo15jtti.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE253.tmp" "%TEMP%\vbcE252.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ti4uaral.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCDC.tmp" "%TEMP%\vbcCDB.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE456.tmp" "%TEMP%\vbcE455.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD884.tmp" "%TEMP%\vbcD883.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE61B.tmp" "%TEMP%\vbcE61A.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE80E.tmp" "%TEMP%\vbcE80D.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o02ritam.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE9E2.tmp" "%TEMP%\vbcE9E1.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pgys0fft.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESEBE5.tmp" "%TEMP%\vbcEBE4.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vpm0gbzr.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESED99.tmp" "%TEMP%\vbcED98.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2vkpmzka.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESEF5E.tmp" "%TEMP%\vbcEF4D.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\admvar2d.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wg2vt2nx.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fymhwqfu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDA67.tmp" "%TEMP%\vbcDA66.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\hghqvtjq.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\33v1hmte.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ybilrjip.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES34D6.tmp" "%TEMP%\vbc34D5.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0mtofxii.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3717.tmp" "%TEMP%\vbc3707.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tdt5g25u.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3997.tmp" "%TEMP%\vbc3996.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aamf1cpz.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3BD8.tmp" "%TEMP%\vbc3BC7.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fx4wo3yo.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3EE4.tmp" "%TEMP%\vbc3EE3.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\mehkckpp.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o2js5vrj.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dxlnm5ze.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES43C4.tmp" "%TEMP%\vbc43C3.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5ixpl540.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4653.tmp" "%TEMP%\vbc4652.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\f5h4iqxf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4856.tmp" "%TEMP%\vbc4855.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zmuy1dka.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4AB6.tmp" "%TEMP%\vbc4AB5.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\szddpyct.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CE8.tmp" "%TEMP%\vbc4CD7.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ebwt0llf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3256.tmp" "%TEMP%\vbc3255.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3006.tmp" "%TEMP%\vbc3005.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2D19.tmp" "%TEMP%\vbc2D08.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4sp4jc5w.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1371.tmp" "%TEMP%\vbc1360.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cvxaclmf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1600.tmp" "%TEMP%\vbc1592.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pyilpne2.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1851.tmp" "%TEMP%\vbc1840.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\owfg3qpu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1AF0.tmp" "%TEMP%\vbc1ADF.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\snzlddem.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1CF3.tmp" "%TEMP%\vbc1CF2.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF4C.tmp" "%TEMP%\vbcF3C.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1120.tmp" "%TEMP%\vbc1110.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aeuoqdof.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\homvh1a3.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dilpm0k2.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2414.tmp" "%TEMP%\vbc2403.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\52xu1okq.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2655.tmp" "%TEMP%\vbc2654.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cq3nxsve.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2896.tmp" "%TEMP%\vbc2895.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ecnoyusg.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2A99.tmp" "%TEMP%\vbc2A89.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kbisce4g.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1F72.tmp" "%TEMP%\vbc1F62.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\514apegt.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2194.tmp" "%TEMP%\vbc2193.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vor2b2cw.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD604.tmp" "%TEMP%\vbcD603.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kx4x3qot.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES54C4.tmp" "%TEMP%\vbc54C3.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wzqnxuo4.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5976.tmp" "%TEMP%\vbc5975.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fjyqqtrb.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5E36.tmp" "%TEMP%\vbc5E35.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\p5azjf2y.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES624C.tmp" "%TEMP%\vbc624B.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u0hkiw5a.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6622.tmp" "%TEMP%\vbc6621.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5x1ho333.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8739.tmp" "%TEMP%\vbc8738.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6A95.tmp" "%TEMP%\vbc6A85.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6F56.tmp" "%TEMP%\vbc6F45.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sfgg0kks.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES73B9.tmp" "%TEMP%\vbc73B8.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a0papek4.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES78B8.tmp" "%TEMP%\vbc78B7.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lgz13xmr.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7E54.tmp" "%TEMP%\vbc7E53.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cy5d4wt3.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8305.tmp" "%TEMP%\vbc82F4.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xz5evz2b.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CC9.tmp" "%TEMP%\vbc4CC8.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\23numqbu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uxrcky4q.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4930.tmp" "%TEMP%\vbc492F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD49.tmp" "%TEMP%\vbcD48.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES119D.tmp" "%TEMP%\vbc119C.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tjglzjjx.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1574.tmp" "%TEMP%\vbc1563.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\gxrfegdf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1A73.tmp" "%TEMP%\vbc1A72.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rciqddqk.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1FA1.tmp" "%TEMP%\vbc1F90.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lgks0iqv.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES256B.tmp" "%TEMP%\vbc256A.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\3edoo2v0.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5as3f3iu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dx5zfgzd.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\urkchps1.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\c3ujuhgv.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3775.tmp" "%TEMP%\vbc3774.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1idjazg1.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3D2F.tmp" "%TEMP%\vbc3D2E.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rhw5v3cu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES41D1.tmp" "%TEMP%\vbc41D0.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\yhndtuxr.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES45C7.tmp" "%TEMP%\vbc45C6.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\aetwrybm.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2C1F.tmp" "%TEMP%\vbc2C1E.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\evtb2wbw.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3228.tmp" "%TEMP%\vbc3227.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5080.tmp" "%TEMP%\vbc507F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ym3swhnf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bban3tp0.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zrmg0m2b.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBD75.tmp" "%TEMP%\vbcBD65.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0rwri413.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBF69.tmp" "%TEMP%\vbcBF68.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0bhg4xvd.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC1B9.tmp" "%TEMP%\vbcC1A9.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\i1fhuc1j.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC3BC.tmp" "%TEMP%\vbcC3AC.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ywlxpiv3.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB970.tmp" "%TEMP%\vbcB96F.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8C77.tmp" "%TEMP%\vbc8C76.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBB53.tmp" "%TEMP%\vbcBB43.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC5FD.tmp" "%TEMP%\vbcC5FC.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCADD.tmp" "%TEMP%\vbcCADC.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kpinveg1.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCCC1.tmp" "%TEMP%\vbcCCC0.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sczzdone.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCF50.tmp" "%TEMP%\vbcCF40.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\nr1b3q1x.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD182.tmp" "%TEMP%\vbcD181.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\n4ryicsw.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD3C3.tmp" "%TEMP%\vbcD3C2.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1cgrwvht.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC7C2.tmp" "%TEMP%\vbcC7B1.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zefncqtf.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES41A2.tmp" "%TEMP%\vbc41A1.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\mlbil3nb.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wp4fnwi0.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES90CA.tmp" "%TEMP%\vbc90BA.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1g5dnmfz.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES94FF.tmp" "%TEMP%\vbc94FE.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4fmze1xr.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES98E5.tmp" "%TEMP%\vbc98E4.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ptwadq0j.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9CDB.tmp" "%TEMP%\vbc9CCB.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\roxzfkja.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA0D1.tmp" "%TEMP%\vbcA0D0.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\5qspzdc5.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB76D.tmp" "%TEMP%\vbcB76C.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rry4uutc.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA525.tmp" "%TEMP%\vbcA524.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lntts2dg.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAC27.tmp" "%TEMP%\vbcAC26.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fyor3gzz.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAE39.tmp" "%TEMP%\vbcAE38.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\n0bpvwal.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB1B3.tmp" "%TEMP%\vbcB1B2.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\it1bjaoc.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB377.tmp" "%TEMP%\vbcB376.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4hyto151.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB589.tmp" "%TEMP%\vbcB588.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qmnukrtu.cmdline"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAA24.tmp" "%TEMP%\vbcAA23.tmp"
'%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4F68.tmp" "%TEMP%\vbc4F57.tmp"

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial