cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "lVOeyLavK" C:\Users\ADMINI~1\AppData\Local\Temp\34b34cfb292d2d88_7WvRI.xml
1148MSOXMLED.EXE "C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\ADMINI~1\AppData\Local\Temp\34b34cfb292d2d88_7WvRI.xml"
2344iexplore.exe "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
2916