7d0cd34c2af9d6d911083c8fb878820e46e3a9dfdbc8c847838b18efc7c1a93b.exe "C:\Users\Administrator\AppData\Local\Temp\7d0cd34c2af9d6d911083c8fb878820e46e3a9dfdbc8c847838b18efc7c1a93b.exe"
696reg.exe REG DELETE HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot /f
2812avscan.exe C:\Users\ADMINI~1\AppData\Local\Temp\avscan.exe
1272