Trojan.DownLoader23.46975

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\revengerat\msflogs.exe
<Drive name for removable media>:\writingcompletesarnarrative_1103.ppt
<Drive name for removable media>:\sim_gametheory_to_finance.ppt
<Drive name for removable media>:\metac.ppt
<Drive name for removable media>:\ppswamp.ppt
<Drive name for removable media>:\file1.ppt
<Drive name for removable media>:\breakpoint.png
<Drive name for removable media>:\asm.png
<Drive name for removable media>:\calibre.png
<Drive name for removable media>:\block.png
<Drive name for removable media>:\tunpersonalca1.pem
<Drive name for removable media>:\irgeek.pem
<Drive name for removable media>:\investmentbankca_ca8.pem
<Drive name for removable media>:\ck.pem
<Drive name for removable media>:\delongcacert.pem
<Drive name for removable media>:\1189.jpg
<Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf
<Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf
<Drive name for removable media>:\7790_preview.pdf
<Drive name for removable media>:\spib_pima.pdf
<Drive name for removable media>:\clip_480_5sec_6mbps_h264.mp4
<Drive name for removable media>:\video.mp4
<Drive name for removable media>:\51.mp4
<Drive name for removable media>:\spanner.mov
<Drive name for removable media>:\dag2_panel1_320_ref.mov
<Drive name for removable media>:\scan.mov
<Drive name for removable media>:\etc6_m_1.mov
<Drive name for removable media>:\parnas_01.jpg
<Drive name for removable media>:\2.jpg
<Drive name for removable media>:\210252809.jpg
<Drive name for removable media>:\168.jpg
<Drive name for removable media>:\10thingscondoms.pdf
<Drive name for removable media>:\3.jpg
<Drive name for removable media>:\mappingconcepthubberlin.ppt
<Drive name for removable media>:\military_callsigns_0311.rtf
<Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
<Drive name for removable media>:\router_manual.rtf
<Drive name for removable media>:\babyboymaintoscenesbackground_pal.wmv
<Drive name for removable media>:\babyboymaintonotesbackground_pal.wmv
<Drive name for removable media>:\babyboymaintoscenesbackground.wmv
<Drive name for removable media>:\excel_example.xls
<Drive name for removable media>:\productos.xls
<Drive name for removable media>:\thlps_keeper_mayer_1965.docx
<Drive name for removable media>:\2013_smccc_competition_points_jul2013.xlsx
<Drive name for removable media>:\2013_finalsummaryforweb.xlsx
<Drive name for removable media>:\al.xlsx
<Drive name for removable media>:\highly_cited_2001.xlsx
<Drive name for removable media>:\suspendedcompanies.xlsx
<Drive name for removable media>:\national_autism_preparation_programs.xlsx
<Drive name for removable media>:\proposaltemplates.ppt
<Drive name for removable media>:\accountsreceivable.ppt
<Drive name for removable media>:\waterlandhealthkano.rtf
<Drive name for removable media>:\taxus_baccata.rdf
<Drive name for removable media>:\sioc.rdf
<Drive name for removable media>:\20140114.rdf
<Drive name for removable media>:\schema.rdf
<Drive name for removable media>:\elvisimp.rdf
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.exe
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx.exe
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx
<Drive name for removable media>:\indogerman2010.pptx.exe
<Drive name for removable media>:\indogerman2010.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx.exe
<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\pandp.rtf
<Drive name for removable media>:\4f0bf7ff71f28.jpg
<Drive name for removable media>:\1189.jpeg
<Drive name for removable media>:\region-north-karelia.jpeg
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\contosoroot_1.cer.exe
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\sdksampleunprivdeveloper.cer.exe
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer.exe
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\contoso.cer.exe
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\testcertificate.cer.exe
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\dashborder_96.bmp.exe
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\dialmap.bmp.exe
<Drive name for removable media>:\default.bmp.exe
<Drive name for removable media>:\default.bmp
<Drive name for removable media>:\dashborder_192.bmp.exe
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\000814251_video_01.avi.exe
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\split.avi.exe
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\delete.avi.exe
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\join.avi.exe
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\correct.avi.exe
<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\contosoroot.cer.exe
<Drive name for removable media>:\sdkfailsafeemulator.cer.exe
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\13.jpeg
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\4f0bf7ff71f28.jpeg
<Drive name for removable media>:\3.jpeg
<Drive name for removable media>:\api-hashmap.html
<Drive name for removable media>:\trivial-merge.html
<Drive name for removable media>:\browse.html
<Drive name for removable media>:\howto-index.html
<Drive name for removable media>:\alert.html
<Drive name for removable media>:\about.html
<Drive name for removable media>:\ituneshelpunavailable.htm
<Drive name for removable media>:\browse.htm
<Drive name for removable media>:\tree_view.htm
<Drive name for removable media>:\alert.htm
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe
<Drive name for removable media>:\applicantform_en.doc.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\glidescope_review_rev_010.docx
<Drive name for removable media>:\file_p_00000000_1371597592.docx
<Drive name for removable media>:\issi2013_template_for_posters.docx
<Drive name for removable media>:\hadac_newsletter_july_2010_final.docx
<Drive name for removable media>:\aoc_saq_d_v3_merchant.docx
<Drive name for removable media>:\contractualdeadlines.xls
<Drive name for removable media>:\holycrosschurchinstructions.docx
<Drive name for removable media>:\508softwareandos.doc.exe
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\hanni_umami_chapter.doc.exe
<Drive name for removable media>:\hanni_umami_chapter.doc
<Drive name for removable media>:\weeklysheet1215.doc.exe
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\1sm_price.zip
<Drive name for removable media>:\contractualdeadlines.zip

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\revengerat\correct.ico
%ALLUSERSPROFILE%\revengerat\breakpoint.ico
%TEMP%\i-x8ynz1.0.vb
%TEMP%\i-x8ynz1.cmdline
%TEMP%\i-x8ynz1.out
%TEMP%\40sq952h.cmdline
%TEMP%\vbc4614.tmp
%ALLUSERSPROFILE%\revengerat\file1.ico
%TEMP%\res4441.tmp
%TEMP%\lllu4j4w.0.vb
%TEMP%\lllu4j4w.out
%TEMP%\vbc47b9.tmp
%TEMP%\res47ca.tmp
%ALLUSERSPROFILE%\revengerat\ppswamp.ico
%TEMP%\res4615.tmp
%TEMP%\whxq7cuk.0.vb
%TEMP%\res3d20.tmp
%TEMP%\lllu4j4w.cmdline
%TEMP%\vbc43f2.tmp
%TEMP%\40sq952h.out
%TEMP%\40sq952h.0.vb
%TEMP%\q3dwsrzr.out
%TEMP%\vbc3ed4.tmp
%TEMP%\res3ed5.tmp
%ALLUSERSPROFILE%\revengerat\block.ico
%TEMP%\owiywree.0.vb
%ALLUSERSPROFILE%\revengerat\tunpersonalca1.ico
%TEMP%\owiywree.cmdline
%TEMP%\vbc4098.tmp
%TEMP%\res4099.tmp
%ALLUSERSPROFILE%\revengerat\calibre.ico
%TEMP%\thwk7adi.0.vb
%TEMP%\thwk7adi.cmdline
%TEMP%\thwk7adi.out
%TEMP%\vbc424d.tmp
%TEMP%\owiywree.out
%TEMP%\res424e.tmp
%ALLUSERSPROFILE%\revengerat\asm.ico
%TEMP%\whxq7cuk.cmdline
%TEMP%\q3dwsrzr.cmdline
%TEMP%\vbc496e.tmp
%TEMP%\2_gkj8dc.0.vb
%TEMP%\vbc5032.tmp
%TEMP%\res5033.tmp
%ALLUSERSPROFILE%\revengerat\accountsreceivable.ico
%TEMP%\66pbsgmg.0.vb
%TEMP%\66pbsgmg.cmdline
%TEMP%\976soqlj.0.vb
%TEMP%\66pbsgmg.out
%TEMP%\976soqlj.out
%TEMP%\res51d8.tmp
%TEMP%\z2eabspn.0.vb
%TEMP%\z2eabspn.cmdline
%TEMP%\z2eabspn.out
%TEMP%\vbc535d.tmp
%TEMP%\res535e.tmp
%TEMP%\vbc51d7.tmp
%TEMP%\res4e8d.tmp
%ALLUSERSPROFILE%\revengerat\proposaltemplates.ico
%TEMP%\976soqlj.cmdline
%ALLUSERSPROFILE%\revengerat\mappingconcepthubberlin.ico
%TEMP%\vbc4e8c.tmp
%TEMP%\2_gkj8dc.cmdline
%TEMP%\2_gkj8dc.out
%TEMP%\vbc4b23.tmp
%TEMP%\res4b24.tmp
%ALLUSERSPROFILE%\revengerat\sim_gametheory_to_finance.ico
%TEMP%\kbvjfo0m.0.vb
%TEMP%\kbvjfo0m.cmdline
%TEMP%\kbvjfo0m.out
%TEMP%\vbc4cb8.tmp
%TEMP%\res4cc9.tmp
%ALLUSERSPROFILE%\revengerat\writingcompletesarnarrative_1103.ico
%TEMP%\08qh8z-o.0.vb
%TEMP%\08qh8z-o.cmdline
%TEMP%\08qh8z-o.out
%TEMP%\whxq7cuk.out
%TEMP%\res496f.tmp
%ALLUSERSPROFILE%\revengerat\delongcacert.ico
%ALLUSERSPROFILE%\revengerat\metac.ico
%TEMP%\q3dwsrzr.0.vb
%TEMP%\vbc3d1f.tmp
%TEMP%\bjbqzgbp.out
%TEMP%\ivfjlawp.0.vb
%TEMP%\ivfjlawp.cmdline
%TEMP%\ivfjlawp.out
%TEMP%\vbc2d85.tmp
%TEMP%\lxxgpo2q.out
%TEMP%\res2d86.tmp
%TEMP%\ze__tbe7.0.vb
%ALLUSERSPROFILE%\revengerat\clip_480_5sec_6mbps_h264.ico
%TEMP%\ze__tbe7.cmdline
%TEMP%\vbc2f2a.tmp
%TEMP%\res2f2b.tmp
%ALLUSERSPROFILE%\revengerat\7790_preview.ico
%TEMP%\0p4r1hnt.0.vb
%ALLUSERSPROFILE%\revengerat\spib_pima.ico
%TEMP%\lxxgpo2q.cmdline
%TEMP%\0p4r1hnt.out
%TEMP%\ze__tbe7.out
%TEMP%\res2bf1.tmp
%TEMP%\lxxgpo2q.0.vb
%ALLUSERSPROFILE%\revengerat\video.ico
%TEMP%\vbc271f.tmp
%TEMP%\res2720.tmp
%ALLUSERSPROFILE%\revengerat\spanner.ico
%TEMP%\vl0xnkn4.0.vb
%TEMP%\vl0xnkn4.cmdline
%TEMP%\vl0xnkn4.out
%TEMP%\u3jbn2fk.cmdline
%TEMP%\vbc28b5.tmp
%ALLUSERSPROFILE%\revengerat\51.ico
%TEMP%\cq2k-s4d.0.vb
%TEMP%\cq2k-s4d.cmdline
%TEMP%\cq2k-s4d.out
%TEMP%\vbc2a5a.tmp
%TEMP%\res2a5b.tmp
%TEMP%\0p4r1hnt.cmdline
%TEMP%\res28b6.tmp
%TEMP%\u3jbn2fk.0.vb
%TEMP%\vbc2be0.tmp
%TEMP%\vbc312d.tmp
%TEMP%\-33viaak.out
%TEMP%\08ntbu0k.0.vb
%ALLUSERSPROFILE%\revengerat\ck.ico
%TEMP%\pj8ch_ay.0.vb
%TEMP%\pj8ch_ay.cmdline
%TEMP%\pj8ch_ay.out
%TEMP%\vbc39d4.tmp
%TEMP%\res39d5.tmp
%ALLUSERSPROFILE%\revengerat\investmentbankca_ca8.ico
%TEMP%\njpj1kjc.0.vb
%TEMP%\njpj1kjc.cmdline
%TEMP%\njpj1kjc.out
%TEMP%\vbc3b7a.tmp
%TEMP%\res3b8a.tmp
%ALLUSERSPROFILE%\revengerat\irgeek.ico
%TEMP%\bjbqzgbp.0.vb
%TEMP%\-33viaak.cmdline
%TEMP%\res313e.tmp
%TEMP%\bjbqzgbp.cmdline
%TEMP%\res3821.tmp
%ALLUSERSPROFILE%\revengerat\dag2_panel1_320_ref.ico
%TEMP%\vbc3820.tmp
%TEMP%\-33viaak.0.vb
%TEMP%\08ntbu0k.cmdline
%TEMP%\08ntbu0k.out
%TEMP%\vbc32e2.tmp
%TEMP%\res32e3.tmp
%ALLUSERSPROFILE%\revengerat\10thingscondoms.ico
%TEMP%\nvxror5j.0.vb
%ALLUSERSPROFILE%\revengerat\2015-02-patients-topic-work-related-asthma-jobs.ico
%TEMP%\nvxror5j.cmdline
%TEMP%\vbc3487.tmp
%TEMP%\res3488.tmp
%ALLUSERSPROFILE%\revengerat\2015-02-worms-nanoparticle-toxicity.ico
%TEMP%\blnfzfco.0.vb
%TEMP%\blnfzfco.cmdline
%TEMP%\blnfzfco.out
%TEMP%\vbc363c.tmp
%TEMP%\nvxror5j.out
%TEMP%\res363d.tmp
%ALLUSERSPROFILE%\revengerat\gruenspecht_02172016.ico
%TEMP%\u3jbn2fk.out
%TEMP%\klvx7_zn.0.vb
%ALLUSERSPROFILE%\revengerat\indogerman2010.ico
%TEMP%\cxa0gozf.cmdline
%TEMP%\cxa0gozf.out
%TEMP%\vbc7406.tmp
%TEMP%\res7417.tmp
%ALLUSERSPROFILE%\revengerat\productos.ico
%TEMP%\res7205.tmp
%TEMP%\a0aiftbv.0.vb
%TEMP%\cxa0gozf.0.vb
%TEMP%\a0aiftbv.out
%TEMP%\res7639.tmp
%ALLUSERSPROFILE%\revengerat\2013_smccc_competition_points_jul2013.ico
%TEMP%\15c4xtza.0.vb
%TEMP%\15c4xtza.cmdline
%TEMP%\15c4xtza.out
%TEMP%\a0aiftbv.cmdline
%TEMP%\vbc77be.tmp
%TEMP%\vbc7628.tmp
%ALLUSERSPROFILE%\revengerat\contractualdeadlines.ico
%TEMP%\vbc7204.tmp
%TEMP%\6qylxrl_.out
%TEMP%\res6cc7.tmp
%ALLUSERSPROFILE%\revengerat\babyboymaintonotesbackground_pal.ico
%TEMP%\rhxidxts.0.vb
%TEMP%\rhxidxts.cmdline
%TEMP%\rhxidxts.out
%TEMP%\vbc6e6b.tmp
%TEMP%\9egi9mzk.out
%TEMP%\res6e6c.tmp
%TEMP%\qaxxbg5c.0.vb
%TEMP%\qaxxbg5c.cmdline
%TEMP%\qaxxbg5c.out
%TEMP%\vbc7020.tmp
%TEMP%\res7021.tmp
%ALLUSERSPROFILE%\revengerat\excel_example.ico
%TEMP%\6qylxrl_.0.vb
%ALLUSERSPROFILE%\revengerat\babyboymaintoscenesbackground.ico
%TEMP%\6qylxrl_.cmdline
%TEMP%\9egi9mzk.cmdline
%TEMP%\vbc6cc6.tmp
%TEMP%\res77bf.tmp
%TEMP%\uv6qgnvz.out
%ALLUSERSPROFILE%\revengerat\national_autism_preparation_programs.ico
%TEMP%\jmi1owsk.0.vb
%TEMP%\jmi1owsk.cmdline
%TEMP%\jmi1owsk.out
%TEMP%\vbc7fe8.tmp
%TEMP%\res7ff9.tmp
%TEMP%\vbc7e62.tmp
%TEMP%\res7e63.tmp
%ALLUSERSPROFILE%\revengerat\1sm_price.ico
%TEMP%\t-_c69fp.out
%TEMP%\vbc819d.tmp
%TEMP%\res819e.tmp
%TEMP%\ng9lhyc8.0.vb
%TEMP%\ng9lhyc8.cmdline
%TEMP%\ng9lhyc8.out
%TEMP%\t-_c69fp.0.vb
%TEMP%\t-_c69fp.cmdline
%TEMP%\v8khbajh.out
%TEMP%\v8khbajh.0.vb
%ALLUSERSPROFILE%\revengerat\babyboymaintoscenesbackground_pal.ico
%TEMP%\vbc7963.tmp
%TEMP%\res7964.tmp
%ALLUSERSPROFILE%\revengerat\al.ico
%TEMP%\4slufe-q.0.vb
%TEMP%\4slufe-q.cmdline
%TEMP%\4slufe-q.out
%TEMP%\vbc7af9.tmp
%TEMP%\res7b09.tmp
%ALLUSERSPROFILE%\revengerat\highly_cited_2001.ico
%TEMP%\lypk_yt4.0.vb
%TEMP%\lypk_yt4.cmdline
%TEMP%\lypk_yt4.out
%TEMP%\vbc7c9e.tmp
%TEMP%\res7c9f.tmp
%ALLUSERSPROFILE%\revengerat\suspendedcompanies.ico
%ALLUSERSPROFILE%\revengerat\2013_finalsummaryforweb.ico
%TEMP%\uv6qgnvz.cmdline
%TEMP%\uv6qgnvz.0.vb
%TEMP%\9egi9mzk.0.vb
%TEMP%\res6af3.tmp
%TEMP%\vbc6b4.tmp
%TEMP%\vbc5b87.tmp
%TEMP%\res5b88.tmp
%ALLUSERSPROFILE%\revengerat\schema.ico
%TEMP%\ghsvjqzy.0.vb
%ALLUSERSPROFILE%\revengerat\elvisimp.ico
%TEMP%\ghsvjqzy.cmdline
%TEMP%\vbc5d1d.tmp
%TEMP%\xk_ibupl.out
%TEMP%\res5d2d.tmp
%TEMP%\up3hr6go.0.vb
%TEMP%\up3hr6go.cmdline
%TEMP%\up3hr6go.out
%TEMP%\vbc5ed2.tmp
%TEMP%\ghsvjqzy.out
%TEMP%\res5a02.tmp
%ALLUSERSPROFILE%\revengerat\sioc.ico
%ALLUSERSPROFILE%\revengerat\20140114.ico
%TEMP%\xk_ibupl.cmdline
%TEMP%\vbc59f2.tmp
%TEMP%\fwe1hi_n.out
%TEMP%\epm0-d0g.0.vb
%TEMP%\epm0-d0g.cmdline
%TEMP%\epm0-d0g.out
%TEMP%\vbc56a7.tmp
%TEMP%\res56a8.tmp
%ALLUSERSPROFILE%\revengerat\stoc13_ml_quoc_le.ico
%TEMP%\res5503.tmp
%TEMP%\tfxqanyq.0.vb
%TEMP%\tfxqanyq.out
%TEMP%\vbc584c.tmp
%TEMP%\res584d.tmp
%ALLUSERSPROFILE%\revengerat\iso27k_isms_implementation_and_certification_process_overview_v2.ico
%TEMP%\fwe1hi_n.0.vb
%TEMP%\fwe1hi_n.cmdline
%TEMP%\res5ee2.tmp
%TEMP%\tfxqanyq.cmdline
%TEMP%\vbc5502.tmp
%TEMP%\a5jkfoif.0.vb
%TEMP%\a5jkfoif.cmdline
%ALLUSERSPROFILE%\revengerat\pandp.ico
%TEMP%\vbc60c5.tmp
%TEMP%\efbvxigg.cmdline
%TEMP%\efbvxigg.out
%TEMP%\vbc6798.tmp
%TEMP%\res67a9.tmp
%ALLUSERSPROFILE%\revengerat\myhrvoldhanssenbiharfamine.ico
%TEMP%\oqikepxt.0.vb
%TEMP%\oqikepxt.cmdline
%TEMP%\oqikepxt.out
%TEMP%\vbc693d.tmp
%TEMP%\res693e.tmp
%ALLUSERSPROFILE%\revengerat\router_manual.ico
%TEMP%\u8aqid5x.0.vb
%TEMP%\u8aqid5x.cmdline
%TEMP%\u8aqid5x.out
%TEMP%\vbc6af2.tmp
%TEMP%\res6613.tmp
%TEMP%\vbc6602.tmp
%TEMP%\efbvxigg.0.vb
%TEMP%\klvx7_zn.out
%TEMP%\klvx7_zn.cmdline
%TEMP%\xk_ibupl.0.vb
%TEMP%\res60d5.tmp
%ALLUSERSPROFILE%\revengerat\taxus_baccata.ico
%TEMP%\pwpzedb-.0.vb
%TEMP%\pwpzedb-.cmdline
%TEMP%\pwpzedb-.out
%TEMP%\vbc62a8.tmp
%TEMP%\res62b9.tmp
%ALLUSERSPROFILE%\revengerat\waterlandhealthkano.ico
%TEMP%\lkhlmjcm.0.vb
%TEMP%\lkhlmjcm.cmdline
%TEMP%\lkhlmjcm.out
%TEMP%\vbc645d.tmp
%TEMP%\res645e.tmp
%ALLUSERSPROFILE%\revengerat\military_callsigns_0311.ico
%TEMP%\vfbqcpzn.0.vb
%TEMP%\vfbqcpzn.out
%TEMP%\a5jkfoif.out
%TEMP%\vfbqcpzn.cmdline
%TEMP%\res257b.tmp
%TEMP%\vbc257a.tmp
%TEMP%\j-z_lid1.out
%ALLUSERSPROFILE%\revengerat\hanni_umami_chapter.ico
%TEMP%\raeajiou.0.vb
%TEMP%\raeajiou.cmdline
%TEMP%\raeajiou.out
%TEMP%\bbu2u-8i.cmdline
%TEMP%\vbcc8ab.tmp
%ALLUSERSPROFILE%\revengerat\508softwareandos.ico
%TEMP%\resc533.tmp
%TEMP%\dbk-j4ru.0.vb
%TEMP%\dbk-j4ru.out
%TEMP%\vbccc53.tmp
%TEMP%\rescc54.tmp
%ALLUSERSPROFILE%\revengerat\holycrosschurchinstructions.ico
%TEMP%\resc8ac.tmp
%TEMP%\bbu2u-8i.0.vb
%TEMP%\resb6e1.tmp
%TEMP%\dbk-j4ru.cmdline
%TEMP%\vbcc532.tmp
%ALLUSERSPROFILE%\revengerat\weeklysheet1215.ico
%TEMP%\resc18b.tmp
%TEMP%\lr4lsltr.out
%TEMP%\vbcba59.tmp
%TEMP%\resba5a.tmp
%ALLUSERSPROFILE%\revengerat\contosoroot.ico
%TEMP%\u2qqkk20.0.vb
%TEMP%\u2qqkk20.cmdline
%TEMP%\lr4lsltr.0.vb
%TEMP%\u2qqkk20.out
%TEMP%\resbdd3.tmp
%ALLUSERSPROFILE%\revengerat\applicantform_en.ico
%TEMP%\m0nvqt7t.0.vb
%TEMP%\m0nvqt7t.cmdline
%TEMP%\m0nvqt7t.out
%TEMP%\vbcc18a.tmp
%TEMP%\cvss6h1g.0.vb
%TEMP%\vbcbdd2.tmp
%ALLUSERSPROFILE%\revengerat\sdkfailsafeemulator.ico
%TEMP%\cvss6h1g.cmdline
%TEMP%\lr4lsltr.cmdline
%TEMP%\vbccfbd.tmp
%TEMP%\1pp_jljw.0.vb
%TEMP%\vbcde4d.tmp
%TEMP%\resde4e.tmp
%ALLUSERSPROFILE%\revengerat\file_p_00000000_1371597592.ico
%TEMP%\k0fpbohl.0.vb
%TEMP%\k0fpbohl.cmdline
%TEMP%\sffdzhzl.0.vb
%TEMP%\k0fpbohl.out
%TEMP%\sffdzhzl.out
%TEMP%\rese1c7.tmp
%TEMP%\kths2cso.0.vb
%TEMP%\kths2cso.cmdline
%TEMP%\kths2cso.out
%TEMP%\vbce55f.tmp
%TEMP%\rese560.tmp
%TEMP%\vbce1c6.tmp
%ALLUSERSPROFILE%\revengerat\issi2013_template_for_posters.ico
%ALLUSERSPROFILE%\revengerat\glidescope_review_rev_010.ico
%TEMP%\resdac5.tmp
%TEMP%\rescfcd.tmp
%TEMP%\tikzwezd.0.vb
%TEMP%\1pp_jljw.cmdline
%TEMP%\1pp_jljw.out
%TEMP%\vbcd384.tmp
%TEMP%\resd385.tmp
%ALLUSERSPROFILE%\revengerat\aoc_saq_d_v3_merchant.ico
%TEMP%\wbpd0lsp.0.vb
%TEMP%\wbpd0lsp.cmdline
%TEMP%\wbpd0lsp.out
%TEMP%\vbcd73b.tmp
%TEMP%\resd73c.tmp
%ALLUSERSPROFILE%\revengerat\hadac_newsletter_july_2010_final.ico
%TEMP%\v3tjunqu.0.vb
%TEMP%\v3tjunqu.cmdline
%TEMP%\v3tjunqu.out
%TEMP%\cvss6h1g.out
%TEMP%\vbcb6e0.tmp
%ALLUSERSPROFILE%\revengerat\thlps_keeper_mayer_1965.ico
%TEMP%\sffdzhzl.cmdline
%TEMP%\zxootpl0.out
%TEMP%\zxootpl0.cmdline
%TEMP%\vbc931a.tmp
%TEMP%\z6e3sps0.0.vb
%TEMP%\z6e3sps0.cmdline
%TEMP%\z6e3sps0.out
%TEMP%\vbc9674.tmp
%TEMP%\g7punev6.out
%TEMP%\res9675.tmp
%TEMP%\wfp801tl.0.vb
%ALLUSERSPROFILE%\revengerat\000814251_video_01.ico
%TEMP%\wfp801tl.cmdline
%TEMP%\vbc99bf.tmp
%TEMP%\res99cf.tmp
%ALLUSERSPROFILE%\revengerat\default.ico
%TEMP%\8beege5u.0.vb
%ALLUSERSPROFILE%\revengerat\dashborder_192.ico
%TEMP%\g7punev6.cmdline
%TEMP%\g7punev6.0.vb
%TEMP%\wfp801tl.out
%ALLUSERSPROFILE%\revengerat\split.ico
%TEMP%\ed5davcr.0.vb
%TEMP%\ed5davcr.cmdline
%TEMP%\vbc8861.tmp
%TEMP%\res8862.tmp
%ALLUSERSPROFILE%\revengerat\join.ico
%TEMP%\y2u7welj.0.vb
%TEMP%\y2u7welj.cmdline
%TEMP%\y2u7welj.out
%TEMP%\vbc8c28.tmp
%TEMP%\ed5davcr.out
%TEMP%\res8c29.tmp
%TEMP%\v_gqwizk.0.vb
%TEMP%\v_gqwizk.cmdline
%TEMP%\v_gqwizk.out
%TEMP%\vbc8fa1.tmp
%TEMP%\res8fb2.tmp
%TEMP%\8beege5u.cmdline
%TEMP%\8beege5u.out
%ALLUSERSPROFILE%\revengerat\delete.ico
%TEMP%\vbc9d28.tmp
%TEMP%\res931b.tmp
%TEMP%\res9d39.tmp
%TEMP%\vbcaa71.tmp
%ALLUSERSPROFILE%\revengerat\sdksampleprivdeveloper.ico
%TEMP%\yg97btfu.0.vb
%TEMP%\yg97btfu.cmdline
%TEMP%\yg97btfu.out
%TEMP%\vbcadcb.tmp
%TEMP%\resadcc.tmp
%ALLUSERSPROFILE%\revengerat\sdksampleunprivdeveloper.ico
%TEMP%\2lmpiorl.0.vb
%TEMP%\2lmpiorl.cmdline
%TEMP%\2lmpiorl.out
%TEMP%\vbcb347.tmp
%TEMP%\resb358.tmp
%ALLUSERSPROFILE%\revengerat\contosoroot_1.ico
%TEMP%\zxootpl0.0.vb
%TEMP%\dtine_at.cmdline
%ALLUSERSPROFILE%\revengerat\utorrent.ico
%TEMP%\dtine_at.out
%TEMP%\resaa82.tmp
%TEMP%\vbcdac4.tmp
%TEMP%\dtine_at.0.vb
%ALLUSERSPROFILE%\revengerat\dialmap.ico
%TEMP%\smgc11qh.cmdline
%TEMP%\smgc11qh.out
%TEMP%\vbca073.tmp
%TEMP%\resa083.tmp
%ALLUSERSPROFILE%\revengerat\dashborder_96.ico
%TEMP%\qhjgqpqr.0.vb
%TEMP%\qhjgqpqr.cmdline
%TEMP%\smgc11qh.0.vb
%TEMP%\qhjgqpqr.out
%TEMP%\resa3dd.tmp
%ALLUSERSPROFILE%\revengerat\testcertificate.ico
%TEMP%\6amzrpou.0.vb
%TEMP%\6amzrpou.cmdline
%TEMP%\6amzrpou.out
%TEMP%\vbca727.tmp
%ALLUSERSPROFILE%\revengerat\contoso.ico
%TEMP%\vbca3cd.tmp
%TEMP%\resa728.tmp
%TEMP%\bbu2u-8i.out
%TEMP%\tikzwezd.cmdline
%TEMP%\ialfxq1f.cmdline
%TEMP%\res14b9.tmp
%ALLUSERSPROFILE%\revengerat\1189.ico
%TEMP%\tbo_hn9m.0.vb
%TEMP%\tbo_hn9m.cmdline
%TEMP%\ialfxq1f.0.vb
%TEMP%\tbo_hn9m.out
%TEMP%\res166e.tmp
%TEMP%\vbc14b8.tmp
%TEMP%\-basa4zu.0.vb
%TEMP%\-basa4zu.out
%TEMP%\vbc1831.tmp
%TEMP%\res1832.tmp
%TEMP%\u-os-o0l.0.vb
%TEMP%\vbc166d.tmp
%ALLUSERSPROFILE%\revengerat\region-north-karelia.ico
%TEMP%\u-os-o0l.out
%TEMP%\-basa4zu.cmdline
%TEMP%\ialfxq1f.out
%TEMP%\res1314.tmp
%TEMP%\vbc1303.tmp
%TEMP%\jy3tsgns.cmdline
%TEMP%\jy3tsgns.out
%TEMP%\vbcf99.tmp
%TEMP%\resf9a.tmp
%ALLUSERSPROFILE%\revengerat\4f0bf7ff71f28.ico
%TEMP%\h8_az9zy.0.vb
%ALLUSERSPROFILE%\revengerat\3.ico
%TEMP%\h8_az9zy.cmdline
%TEMP%\vbc113f.tmp
%TEMP%\res115f.tmp
%ALLUSERSPROFILE%\revengerat\13.ico
%TEMP%\v7yxgt_z.0.vb
%TEMP%\v7yxgt_z.cmdline
%TEMP%\v7yxgt_z.out
%TEMP%\u-os-o0l.cmdline
%TEMP%\h8_az9zy.out
%TEMP%\resdd6.tmp
%TEMP%\vbc19e6.tmp
%TEMP%\res19e7.tmp
%TEMP%\vbc208a.tmp
%TEMP%\ufyumrw3.cmdline
%ALLUSERSPROFILE%\revengerat\parnas_01.ico
%TEMP%\l0jzz1bv.0.vb
%TEMP%\l0jzz1bv.cmdline
%TEMP%\l0jzz1bv.out
%TEMP%\vbc222f.tmp
%TEMP%\res2230.tmp
%ALLUSERSPROFILE%\revengerat\etc6_m_1.ico
%TEMP%\klqgmw1u.0.vb
%TEMP%\klqgmw1u.cmdline
%TEMP%\klqgmw1u.out
%TEMP%\vbc23e4.tmp
%TEMP%\res23e5.tmp
%ALLUSERSPROFILE%\revengerat\scan.ico
%TEMP%\j-z_lid1.0.vb
%TEMP%\j-z_lid1.cmdline
%TEMP%\cqsq1bpo.out
%TEMP%\cqsq1bpo.cmdline
%TEMP%\res208b.tmp
%TEMP%\jy3tsgns.0.vb
%TEMP%\vbcdc5.tmp
%TEMP%\tikzwezd.out
%TEMP%\ufyumrw3.out
%TEMP%\vbc1b8b.tmp
%TEMP%\res1b8c.tmp
%ALLUSERSPROFILE%\revengerat\168.ico
%TEMP%\prpaq03h.0.vb
%TEMP%\prpaq03h.cmdline
%TEMP%\prpaq03h.out
%TEMP%\vbc1d21.tmp
%TEMP%\res1d31.tmp
%ALLUSERSPROFILE%\revengerat\210252809.ico
%TEMP%\rgnmlvwx.0.vb
%TEMP%\rgnmlvwx.cmdline
%TEMP%\rgnmlvwx.out
%TEMP%\vbc1ee5.tmp
%TEMP%\res1ee6.tmp
%TEMP%\cqsq1bpo.0.vb
%TEMP%\ufyumrw3.0.vb
%ALLUSERSPROFILE%\revengerat\2.ico
%TEMP%\v8khbajh.cmdline
%TEMP%\vbc8362.tmp
%TEMP%\sexko4le.0.vb
%TEMP%\ibiu9zva.out
%TEMP%\vbcf7a7.tmp
%TEMP%\resf7a8.tmp
%ALLUSERSPROFILE%\revengerat\alert.ico
%TEMP%\fl66fimz.0.vb
%ALLUSERSPROFILE%\revengerat\chromesetup.ico
%TEMP%\fl66fimz.cmdline
%TEMP%\ibiu9zva.cmdline
%TEMP%\vbcfb8d.tmp
%ALLUSERSPROFILE%\revengerat\tree_view.ico
%TEMP%\tijkaoeh.0.vb
%TEMP%\tijkaoeh.cmdline
%TEMP%\tijkaoeh.out
%TEMP%\vbcff16.tmp
%TEMP%\fl66fimz.out
%TEMP%\resf41f.tmp
%TEMP%\resfb8e.tmp
%TEMP%\vbcf40e.tmp
%TEMP%\ialgw9w6.out
%TEMP%\vbce935.tmp
%ALLUSERSPROFILE%\revengerat\dotnetfx45_full_setup.ico
%TEMP%\o5cdjodv.0.vb
%TEMP%\o5cdjodv.cmdline
%TEMP%\o5cdjodv.out
%TEMP%\vbcecaf.tmp
%TEMP%\resecb0.tmp
%ALLUSERSPROFILE%\revengerat\winmine.ico
%TEMP%\rese936.tmp
%TEMP%\zb-edpwp.0.vb
%TEMP%\zb-edpwp.out
%TEMP%\vbcf066.tmp
%TEMP%\resf077.tmp
%ALLUSERSPROFILE%\revengerat\jre-7u75-windows-i586-iftw.ico
%TEMP%\ialgw9w6.0.vb
%TEMP%\ialgw9w6.cmdline
%TEMP%\resff17.tmp
%TEMP%\zb-edpwp.cmdline
%ALLUSERSPROFILE%\revengerat\browse.ico
%TEMP%\ibiu9zva.0.vb
%TEMP%\vjamxwiw.0.vb
%TEMP%\okyg-1y5.0.vb
%TEMP%\okyg-1y5.out
%TEMP%\vbc888.tmp
%TEMP%\res889.tmp
%TEMP%\1hceootj.0.vb
%TEMP%\1hceootj.cmdline
%TEMP%\1hceootj.out
%TEMP%\vbca5c.tmp
%TEMP%\resa5d.tmp
%ALLUSERSPROFILE%\revengerat\trivial-merge.ico
%TEMP%\vixfksbq.0.vb
%TEMP%\vixfksbq.cmdline
%TEMP%\vixfksbq.out
%TEMP%\vbcc01.tmp
%TEMP%\resc02.tmp
%ALLUSERSPROFILE%\revengerat\api-hashmap.ico
%ALLUSERSPROFILE%\revengerat\howto-index.ico
%TEMP%\vjamxwiw.cmdline
%TEMP%\okyg-1y5.cmdline
%TEMP%\sexko4le.out
%TEMP%\sexko4le.cmdline
%TEMP%\kqyugegz.out
%TEMP%\vbc167.tmp
%TEMP%\res177.tmp
%ALLUSERSPROFILE%\revengerat\ituneshelpunavailable.ico
%TEMP%\4fxv56g5.0.vb
%TEMP%\4fxv56g5.cmdline
%TEMP%\4fxv56g5.out
%TEMP%\vbc32b.tmp
%TEMP%\vjamxwiw.out
%TEMP%\res32c.tmp
%TEMP%\c1sushof.0.vb
%TEMP%\c1sushof.cmdline
%TEMP%\c1sushof.out
%TEMP%\vbc4ef.tmp
%TEMP%\res4f0.tmp
%TEMP%\kqyugegz.0.vb
%TEMP%\kqyugegz.cmdline
%ALLUSERSPROFILE%\revengerat\about.ico
%TEMP%\res6c4.tmp
%TEMP%\res8372.tmp

Sets the 'hidden' attribute to the following files

<Drive name for removable media>:\revengerat\msflogs.exe

Deletes the following files

%TEMP%\res8862.tmp
%TEMP%\res4441.tmp
%TEMP%\vbc43f2.tmp
%TEMP%\40sq952h.cmdline
%TEMP%\40sq952h.0.vb
%TEMP%\40sq952h.out
%TEMP%\res4615.tmp
%TEMP%\i-x8ynz1.0.vb
%TEMP%\res496f.tmp
%TEMP%\i-x8ynz1.cmdline
%TEMP%\i-x8ynz1.out
%TEMP%\res47ca.tmp
%TEMP%\vbc47b9.tmp
%TEMP%\lllu4j4w.0.vb
%TEMP%\lllu4j4w.out
%TEMP%\vbc4614.tmp
%TEMP%\lllu4j4w.cmdline
%TEMP%\thwk7adi.0.vb
%TEMP%\vbc424d.tmp
%TEMP%\res424e.tmp
%TEMP%\owiywree.0.vb
%TEMP%\owiywree.out
%TEMP%\owiywree.cmdline
%TEMP%\vbc4098.tmp
%TEMP%\res4099.tmp
%TEMP%\q3dwsrzr.cmdline
%TEMP%\q3dwsrzr.0.vb
%TEMP%\q3dwsrzr.out
%TEMP%\vbc3ed4.tmp
%TEMP%\res3ed5.tmp
%TEMP%\bjbqzgbp.out
%TEMP%\thwk7adi.out
%TEMP%\vbc3487.tmp
%TEMP%\vbc496e.tmp
%TEMP%\z2eabspn.cmdline
%TEMP%\08qh8z-o.out
%TEMP%\res5033.tmp
%TEMP%\vbc5032.tmp
%TEMP%\976soqlj.out
%TEMP%\976soqlj.0.vb
%TEMP%\976soqlj.cmdline
%TEMP%\vbc51d7.tmp
%TEMP%\whxq7cuk.out
%TEMP%\66pbsgmg.out
%TEMP%\66pbsgmg.0.vb
%TEMP%\66pbsgmg.cmdline
%TEMP%\res535e.tmp
%TEMP%\vbc535d.tmp
%TEMP%\z2eabspn.0.vb
%TEMP%\08qh8z-o.0.vb
%TEMP%\08qh8z-o.cmdline
%TEMP%\whxq7cuk.cmdline
%TEMP%\res4cc9.tmp
%TEMP%\vbc4e8c.tmp
%TEMP%\res4e8d.tmp
%TEMP%\kbvjfo0m.out
%TEMP%\kbvjfo0m.0.vb
%TEMP%\kbvjfo0m.cmdline
%TEMP%\thwk7adi.cmdline
%TEMP%\vbc4cb8.tmp
%TEMP%\bjbqzgbp.0.vb
%TEMP%\2_gkj8dc.cmdline
%TEMP%\2_gkj8dc.0.vb
%TEMP%\vbc4b23.tmp
%TEMP%\res4b24.tmp
%TEMP%\whxq7cuk.0.vb
%TEMP%\2_gkj8dc.out
%TEMP%\bjbqzgbp.cmdline
%TEMP%\vbc3d1f.tmp
%TEMP%\res3d20.tmp
%TEMP%\cq2k-s4d.0.vb
%TEMP%\ze__tbe7.cmdline
%TEMP%\ze__tbe7.0.vb
%TEMP%\vbc2f2a.tmp
%TEMP%\res2f2b.tmp
%TEMP%\ivfjlawp.cmdline
%TEMP%\ivfjlawp.out
%TEMP%\ivfjlawp.0.vb
%TEMP%\vbc2d85.tmp
%TEMP%\res2d86.tmp
%TEMP%\lxxgpo2q.0.vb
%TEMP%\lxxgpo2q.cmdline
%TEMP%\lxxgpo2q.out
%TEMP%\vbc2be0.tmp
%TEMP%\res2bf1.tmp
%TEMP%\cq2k-s4d.cmdline
%TEMP%\vbc28b5.tmp
%TEMP%\cq2k-s4d.out
%TEMP%\vbc2a5a.tmp
%TEMP%\res2a5b.tmp
%TEMP%\vl0xnkn4.0.vb
%TEMP%\vl0xnkn4.out
%TEMP%\vl0xnkn4.cmdline
%TEMP%\z2eabspn.out
%TEMP%\res28b6.tmp
%TEMP%\u3jbn2fk.cmdline
%TEMP%\u3jbn2fk.out
%TEMP%\u3jbn2fk.0.vb
%TEMP%\vbc271f.tmp
%TEMP%\res2720.tmp
%TEMP%\j-z_lid1.cmdline
%TEMP%\res313e.tmp
%TEMP%\res51d8.tmp
%TEMP%\vbc312d.tmp
%TEMP%\blnfzfco.out
%TEMP%\pj8ch_ay.cmdline
%TEMP%\vbc3820.tmp
%TEMP%\-33viaak.out
%TEMP%\-33viaak.cmdline
%TEMP%\-33viaak.0.vb
%TEMP%\res39d5.tmp
%TEMP%\vbc39d4.tmp
%TEMP%\pj8ch_ay.0.vb
%TEMP%\ze__tbe7.out
%TEMP%\pj8ch_ay.out
%TEMP%\res3b8a.tmp
%TEMP%\vbc3b7a.tmp
%TEMP%\njpj1kjc.out
%TEMP%\njpj1kjc.0.vb
%TEMP%\njpj1kjc.cmdline
%TEMP%\res3821.tmp
%TEMP%\blnfzfco.cmdline
%TEMP%\vbc363c.tmp
%TEMP%\res363d.tmp
%TEMP%\nvxror5j.out
%TEMP%\nvxror5j.cmdline
%TEMP%\nvxror5j.0.vb
%TEMP%\res3488.tmp
%TEMP%\0p4r1hnt.out
%TEMP%\0p4r1hnt.0.vb
%TEMP%\08ntbu0k.out
%TEMP%\08ntbu0k.cmdline
%TEMP%\vbc32e2.tmp
%TEMP%\res32e3.tmp
%TEMP%\0p4r1hnt.cmdline
%TEMP%\blnfzfco.0.vb
%TEMP%\08ntbu0k.0.vb
%TEMP%\res645e.tmp
%TEMP%\ng9lhyc8.cmdline
%TEMP%\klvx7_zn.out
%TEMP%\6qylxrl_.out
%TEMP%\res7417.tmp
%TEMP%\vbc7406.tmp
%TEMP%\cxa0gozf.cmdline
%TEMP%\cxa0gozf.0.vb
%TEMP%\cxa0gozf.out
%TEMP%\vbc7628.tmp
%TEMP%\15c4xtza.cmdline
%TEMP%\a0aiftbv.cmdline
%TEMP%\a0aiftbv.out
%TEMP%\a0aiftbv.0.vb
%TEMP%\res77bf.tmp
%TEMP%\vbc77be.tmp
%TEMP%\15c4xtza.out
%TEMP%\res7639.tmp
%TEMP%\15c4xtza.0.vb
%TEMP%\vbc7204.tmp
%TEMP%\res7205.tmp
%TEMP%\qaxxbg5c.cmdline
%TEMP%\qaxxbg5c.out
%TEMP%\qaxxbg5c.0.vb
%TEMP%\vbc7020.tmp
%TEMP%\res7021.tmp
%TEMP%\rhxidxts.cmdline
%TEMP%\rhxidxts.0.vb
%TEMP%\rhxidxts.out
%TEMP%\vbc6e6b.tmp
%TEMP%\res6e6c.tmp
%TEMP%\9egi9mzk.cmdline
%TEMP%\9egi9mzk.0.vb
%TEMP%\6qylxrl_.0.vb
%TEMP%\res5503.tmp
%TEMP%\res7964.tmp
%TEMP%\ng9lhyc8.out
%TEMP%\v8khbajh.out
%TEMP%\v8khbajh.cmdline
%TEMP%\res7ff9.tmp
%TEMP%\vbc7fe8.tmp
%TEMP%\jmi1owsk.cmdline
%TEMP%\jmi1owsk.0.vb
%TEMP%\res819e.tmp
%TEMP%\vbc7963.tmp
%TEMP%\vbc819d.tmp
%TEMP%\t-_c69fp.cmdline
%TEMP%\t-_c69fp.out
%TEMP%\t-_c69fp.0.vb
%TEMP%\res8372.tmp
%TEMP%\vbc8362.tmp
%TEMP%\v8khbajh.0.vb
%TEMP%\vbc7e62.tmp
%TEMP%\uv6qgnvz.cmdline
%TEMP%\4slufe-q.0.vb
%TEMP%\res7e63.tmp
%TEMP%\lypk_yt4.0.vb
%TEMP%\lypk_yt4.cmdline
%TEMP%\lypk_yt4.out
%TEMP%\vbc7c9e.tmp
%TEMP%\6qylxrl_.cmdline
%TEMP%\res7c9f.tmp
%TEMP%\9egi9mzk.out
%TEMP%\4slufe-q.cmdline
%TEMP%\vbc7af9.tmp
%TEMP%\res7b09.tmp
%TEMP%\uv6qgnvz.out
%TEMP%\uv6qgnvz.0.vb
%TEMP%\4slufe-q.out
%TEMP%\vbc6cc6.tmp
%TEMP%\res6cc7.tmp
%TEMP%\u8aqid5x.cmdline
%TEMP%\fwe1hi_n.cmdline
%TEMP%\up3hr6go.0.vb
%TEMP%\vbc5ed2.tmp
%TEMP%\res5ee2.tmp
%TEMP%\ghsvjqzy.0.vb
%TEMP%\ghsvjqzy.out
%TEMP%\ghsvjqzy.cmdline
%TEMP%\vbc5d1d.tmp
%TEMP%\res5d2d.tmp
%TEMP%\xk_ibupl.0.vb
%TEMP%\xk_ibupl.out
%TEMP%\xk_ibupl.cmdline
%TEMP%\vbc5b87.tmp
%TEMP%\res5b88.tmp
%TEMP%\fwe1hi_n.0.vb
%TEMP%\fwe1hi_n.out
%TEMP%\res584d.tmp
%TEMP%\vbc59f2.tmp
%TEMP%\res5a02.tmp
%TEMP%\tfxqanyq.0.vb
%TEMP%\tfxqanyq.cmdline
%TEMP%\tfxqanyq.out
%TEMP%\vbc584c.tmp
%TEMP%\vbc5502.tmp
%TEMP%\epm0-d0g.out
%TEMP%\epm0-d0g.0.vb
%TEMP%\epm0-d0g.cmdline
%TEMP%\vbc56a7.tmp
%TEMP%\res56a8.tmp
%TEMP%\klvx7_zn.cmdline
%TEMP%\klvx7_zn.0.vb
%TEMP%\up3hr6go.cmdline
%TEMP%\j-z_lid1.out
%TEMP%\res60d5.tmp
%TEMP%\vbc6602.tmp
%TEMP%\vbc693d.tmp
%TEMP%\res67a9.tmp
%TEMP%\vbc6798.tmp
%TEMP%\efbvxigg.out
%TEMP%\efbvxigg.0.vb
%TEMP%\efbvxigg.cmdline
%TEMP%\res693e.tmp
%TEMP%\oqikepxt.out
%TEMP%\up3hr6go.out
%TEMP%\oqikepxt.cmdline
%TEMP%\oqikepxt.0.vb
%TEMP%\res6af3.tmp
%TEMP%\vbc6af2.tmp
%TEMP%\u8aqid5x.out
%TEMP%\u8aqid5x.0.vb
%TEMP%\vfbqcpzn.out
%TEMP%\vfbqcpzn.0.vb
%TEMP%\res6613.tmp
%TEMP%\lkhlmjcm.0.vb
%TEMP%\lkhlmjcm.cmdline
%TEMP%\lkhlmjcm.out
%TEMP%\vbc645d.tmp
%TEMP%\pwpzedb-.cmdline
%TEMP%\a5jkfoif.out
%TEMP%\vbc60c5.tmp
%TEMP%\pwpzedb-.out
%TEMP%\vbc62a8.tmp
%TEMP%\res62b9.tmp
%TEMP%\a5jkfoif.0.vb
%TEMP%\a5jkfoif.cmdline
%TEMP%\vfbqcpzn.cmdline
%TEMP%\pwpzedb-.0.vb
%TEMP%\jmi1owsk.out
%TEMP%\j-z_lid1.0.vb
%TEMP%\vbc222f.tmp
%TEMP%\bbu2u-8i.0.vb
%TEMP%\bbu2u-8i.out
%TEMP%\bbu2u-8i.cmdline
%TEMP%\resc8ac.tmp
%TEMP%\vbcc8ab.tmp
%TEMP%\raeajiou.cmdline
%TEMP%\raeajiou.0.vb
%TEMP%\cvss6h1g.out
%TEMP%\rescc54.tmp
%TEMP%\vbccc53.tmp
%TEMP%\dbk-j4ru.out
%TEMP%\dbk-j4ru.0.vb
%TEMP%\dbk-j4ru.cmdline
%TEMP%\rescfcd.tmp
%TEMP%\raeajiou.out
%TEMP%\vbccfbd.tmp
%TEMP%\m0nvqt7t.out
%TEMP%\m0nvqt7t.cmdline
%TEMP%\m0nvqt7t.0.vb
%TEMP%\vbcc18a.tmp
%TEMP%\resc18b.tmp
%TEMP%\u2qqkk20.cmdline
%TEMP%\u2qqkk20.out
%TEMP%\u2qqkk20.0.vb
%TEMP%\vbcbdd2.tmp
%TEMP%\resbdd3.tmp
%TEMP%\lr4lsltr.out
%TEMP%\lr4lsltr.cmdline
%TEMP%\lr4lsltr.0.vb
%TEMP%\vbcba59.tmp
%TEMP%\vbcc532.tmp
%TEMP%\qhjgqpqr.cmdline
%TEMP%\cvss6h1g.cmdline
%TEMP%\rese936.tmp
%TEMP%\vbcde4d.tmp
%TEMP%\sffdzhzl.out
%TEMP%\sffdzhzl.0.vb
%TEMP%\sffdzhzl.cmdline
%TEMP%\rese1c7.tmp
%TEMP%\vbce1c6.tmp
%TEMP%\k0fpbohl.cmdline
%TEMP%\cvss6h1g.0.vb
%TEMP%\k0fpbohl.0.vb
%TEMP%\rese560.tmp
%TEMP%\vbce55f.tmp
%TEMP%\kths2cso.out
%TEMP%\kths2cso.cmdline
%TEMP%\kths2cso.0.vb
%TEMP%\resde4e.tmp
%TEMP%\v3tjunqu.0.vb
%TEMP%\resd385.tmp
%TEMP%\wbpd0lsp.cmdline
%TEMP%\v3tjunqu.out
%TEMP%\v3tjunqu.cmdline
%TEMP%\vbcdac4.tmp
%TEMP%\resdac5.tmp
%TEMP%\wbpd0lsp.out
%TEMP%\resc533.tmp
%TEMP%\wbpd0lsp.0.vb
%TEMP%\resba5a.tmp
%TEMP%\resd73c.tmp
%TEMP%\1pp_jljw.cmdline
%TEMP%\1pp_jljw.out
%TEMP%\1pp_jljw.0.vb
%TEMP%\vbcd384.tmp
%TEMP%\vbcd73b.tmp
%TEMP%\zxootpl0.cmdline
%TEMP%\zxootpl0.0.vb
%TEMP%\zxootpl0.out
%TEMP%\vbc931a.tmp
%TEMP%\res9d39.tmp
%TEMP%\wfp801tl.cmdline
%TEMP%\wfp801tl.0.vb
%TEMP%\wfp801tl.out
%TEMP%\vbc99bf.tmp
%TEMP%\res99cf.tmp
%TEMP%\z6e3sps0.out
%TEMP%\z6e3sps0.0.vb
%TEMP%\z6e3sps0.cmdline
%TEMP%\vbc9674.tmp
%TEMP%\res9675.tmp
%TEMP%\g7punev6.cmdline
%TEMP%\g7punev6.out
%TEMP%\g7punev6.0.vb
%TEMP%\res931b.tmp
%TEMP%\y2u7welj.0.vb
%TEMP%\v_gqwizk.out
%TEMP%\v_gqwizk.0.vb
%TEMP%\v_gqwizk.cmdline
%TEMP%\vbc8fa1.tmp
%TEMP%\res8fb2.tmp
%TEMP%\y2u7welj.out
%TEMP%\vbce935.tmp
%TEMP%\y2u7welj.cmdline
%TEMP%\vbc8c28.tmp
%TEMP%\res8c29.tmp
%TEMP%\ed5davcr.cmdline
%TEMP%\ed5davcr.out
%TEMP%\ed5davcr.0.vb
%TEMP%\vbc8861.tmp
%TEMP%\8beege5u.out
%TEMP%\k0fpbohl.out
%TEMP%\8beege5u.0.vb
%TEMP%\6amzrpou.cmdline
%TEMP%\yg97btfu.out
%TEMP%\dtine_at.cmdline
%TEMP%\dtine_at.out
%TEMP%\resadcc.tmp
%TEMP%\vbcadcb.tmp
%TEMP%\yg97btfu.0.vb
%TEMP%\yg97btfu.cmdline
%TEMP%\resb358.tmp
%TEMP%\vbc9d28.tmp
%TEMP%\vbcb347.tmp
%TEMP%\2lmpiorl.cmdline
%TEMP%\2lmpiorl.0.vb
%TEMP%\2lmpiorl.out
%TEMP%\resb6e1.tmp
%TEMP%\vbcb6e0.tmp
%TEMP%\dtine_at.0.vb
%TEMP%\vbcaa71.tmp
%TEMP%\6amzrpou.out
%TEMP%\6amzrpou.0.vb
%TEMP%\vbca727.tmp
%TEMP%\resa728.tmp
%TEMP%\qhjgqpqr.out
%TEMP%\qhjgqpqr.0.vb
%TEMP%\resa083.tmp
%TEMP%\8beege5u.cmdline
%TEMP%\resa3dd.tmp
%TEMP%\smgc11qh.out
%TEMP%\smgc11qh.cmdline
%TEMP%\smgc11qh.0.vb
%TEMP%\vbca073.tmp
%TEMP%\resaa82.tmp
%TEMP%\vbca3cd.tmp
%TEMP%\c1sushof.cmdline
%TEMP%\res257b.tmp
%TEMP%\tikzwezd.cmdline
%TEMP%\vbc14b8.tmp
%TEMP%\ialfxq1f.out
%TEMP%\ialfxq1f.0.vb
%TEMP%\ialfxq1f.cmdline
%TEMP%\res166e.tmp
%TEMP%\vbc166d.tmp
%TEMP%\tbo_hn9m.out
%TEMP%\vbc19e6.tmp
%TEMP%\tbo_hn9m.0.vb
%TEMP%\res1832.tmp
%TEMP%\vbc1831.tmp
%TEMP%\-basa4zu.cmdline
%TEMP%\-basa4zu.out
%TEMP%\-basa4zu.0.vb
%TEMP%\tbo_hn9m.cmdline
%TEMP%\res19e7.tmp
%TEMP%\v7yxgt_z.cmdline
%TEMP%\v7yxgt_z.0.vb
%TEMP%\vbc1303.tmp
%TEMP%\res1314.tmp
%TEMP%\h8_az9zy.0.vb
%TEMP%\h8_az9zy.out
%TEMP%\h8_az9zy.cmdline
%TEMP%\vbc113f.tmp
%TEMP%\res115f.tmp
%TEMP%\jy3tsgns.cmdline
%TEMP%\jy3tsgns.0.vb
%TEMP%\jy3tsgns.out
%TEMP%\vbcf99.tmp
%TEMP%\resf9a.tmp
%TEMP%\res14b9.tmp
%TEMP%\tikzwezd.0.vb
%TEMP%\u-os-o0l.0.vb
%TEMP%\klqgmw1u.cmdline
%TEMP%\res208b.tmp
%TEMP%\vbc208a.tmp
%TEMP%\cqsq1bpo.0.vb
%TEMP%\cqsq1bpo.out
%TEMP%\cqsq1bpo.cmdline
%TEMP%\res2230.tmp
%TEMP%\l0jzz1bv.cmdline
%TEMP%\u-os-o0l.cmdline
%TEMP%\l0jzz1bv.out
%TEMP%\l0jzz1bv.0.vb
%TEMP%\res23e5.tmp
%TEMP%\vbc23e4.tmp
%TEMP%\klqgmw1u.out
%TEMP%\klqgmw1u.0.vb
%TEMP%\rgnmlvwx.0.vb
%TEMP%\rgnmlvwx.out
%TEMP%\u-os-o0l.out
%TEMP%\vbc1d21.tmp
%TEMP%\rgnmlvwx.cmdline
%TEMP%\vbc1ee5.tmp
%TEMP%\res1ee6.tmp
%TEMP%\prpaq03h.cmdline
%TEMP%\prpaq03h.0.vb
%TEMP%\v7yxgt_z.out
%TEMP%\prpaq03h.out
%TEMP%\sexko4le.out
%TEMP%\ufyumrw3.0.vb
%TEMP%\ufyumrw3.cmdline
%TEMP%\ufyumrw3.out
%TEMP%\vbc1b8b.tmp
%TEMP%\res1b8c.tmp
%TEMP%\res1d31.tmp
%TEMP%\sexko4le.cmdline
%TEMP%\sexko4le.0.vb
%TEMP%\vbcdc5.tmp
%TEMP%\resf7a8.tmp
%TEMP%\tijkaoeh.out
%TEMP%\tijkaoeh.cmdline
%TEMP%\tijkaoeh.0.vb
%TEMP%\vbcff16.tmp
%TEMP%\resff17.tmp
%TEMP%\fl66fimz.0.vb
%TEMP%\fl66fimz.out
%TEMP%\fl66fimz.cmdline
%TEMP%\vbcfb8d.tmp
%TEMP%\resfb8e.tmp
%TEMP%\ibiu9zva.0.vb
%TEMP%\ibiu9zva.cmdline
%TEMP%\ibiu9zva.out
%TEMP%\vbcf7a7.tmp
%TEMP%\ialgw9w6.0.vb
%TEMP%\zb-edpwp.cmdline
%TEMP%\ialgw9w6.cmdline
%TEMP%\ialgw9w6.out
%TEMP%\vbcf40e.tmp
%TEMP%\resf41f.tmp
%TEMP%\zb-edpwp.out
%TEMP%\zb-edpwp.0.vb
%TEMP%\tikzwezd.out
%TEMP%\vbcf066.tmp
%TEMP%\resf077.tmp
%TEMP%\o5cdjodv.out
%TEMP%\o5cdjodv.cmdline
%TEMP%\o5cdjodv.0.vb
%TEMP%\vbcecaf.tmp
%TEMP%\resecb0.tmp
%TEMP%\vbc167.tmp
%TEMP%\vbc257a.tmp
%TEMP%\vjamxwiw.cmdline
%TEMP%\kqyugegz.out
%TEMP%\1hceootj.0.vb
%TEMP%\okyg-1y5.out
%TEMP%\okyg-1y5.0.vb
%TEMP%\okyg-1y5.cmdline
%TEMP%\resa5d.tmp
%TEMP%\vbca5c.tmp
%TEMP%\1hceootj.cmdline
%TEMP%\1hceootj.out
%TEMP%\res177.tmp
%TEMP%\resc02.tmp
%TEMP%\vbcc01.tmp
%TEMP%\vixfksbq.out
%TEMP%\vixfksbq.0.vb
%TEMP%\vixfksbq.cmdline
%TEMP%\resdd6.tmp
%TEMP%\vbc888.tmp
%TEMP%\res889.tmp
%TEMP%\kqyugegz.cmdline
%TEMP%\vbc6b4.tmp
%TEMP%\res6c4.tmp
%TEMP%\c1sushof.0.vb
%TEMP%\c1sushof.out
%TEMP%\vbc4ef.tmp
%TEMP%\vjamxwiw.out
%TEMP%\vjamxwiw.0.vb
%TEMP%\4fxv56g5.out
%TEMP%\4fxv56g5.0.vb
%TEMP%\4fxv56g5.cmdline
%TEMP%\vbc32b.tmp
%TEMP%\res32c.tmp
%TEMP%\kqyugegz.0.vb
%TEMP%\res4f0.tmp
%TEMP%\ng9lhyc8.0.vb

Substitutes the following executable files

<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\chromesetup.exe

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'xz#####0774.portmap.io':20774

UDP

DNS ASK xz#####0774.portmap.io

Miscellaneous

Creates and executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ed5davcr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\owiywree.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4099.tmp" "%TEMP%\vbc4098.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\thwk7adi.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES424E.tmp" "%TEMP%\vbc424D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\40sq952h.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4441.tmp" "%TEMP%\vbc43F2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\i-x8ynz1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4615.tmp" "%TEMP%\vbc4614.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lllu4j4w.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES47CA.tmp" "%TEMP%\vbc47B9.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bjbqzgbp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\whxq7cuk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2_gkj8dc.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4B24.tmp" "%TEMP%\vbc4B23.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kbvjfo0m.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CC9.tmp" "%TEMP%\vbc4CB8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\08qh8z-o.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4E8D.tmp" "%TEMP%\vbc4E8C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\976soqlj.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5033.tmp" "%TEMP%\vbc5032.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\66pbsgmg.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES51D8.tmp" "%TEMP%\vbc51D7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\q3dwsrzr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3ED5.tmp" "%TEMP%\vbc3ED4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3D20.tmp" "%TEMP%\vbc3D1F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3B8A.tmp" "%TEMP%\vbc3B7A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES535E.tmp" "%TEMP%\vbc535D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES28B6.tmp" "%TEMP%\vbc28B5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cq2k-s4d.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2A5B.tmp" "%TEMP%\vbc2A5A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lxxgpo2q.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2BF1.tmp" "%TEMP%\vbc2BE0.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ivfjlawp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2D86.tmp" "%TEMP%\vbc2D85.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ze__tbe7.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2F2B.tmp" "%TEMP%\vbc2F2A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\z2eabspn.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2720.tmp" "%TEMP%\vbc271F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES496F.tmp" "%TEMP%\vbc496E.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0p4r1hnt.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\nvxror5j.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3488.tmp" "%TEMP%\vbc3487.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\blnfzfco.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES363D.tmp" "%TEMP%\vbc363C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\-33viaak.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3821.tmp" "%TEMP%\vbc3820.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pj8ch_ay.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES39D5.tmp" "%TEMP%\vbc39D4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\njpj1kjc.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES313E.tmp" "%TEMP%\vbc312D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\08ntbu0k.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES32E3.tmp" "%TEMP%\vbc32E2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES177.tmp" "%TEMP%\vbc167.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\klvx7_zn.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rhxidxts.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6E6C.tmp" "%TEMP%\vbc6E6B.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qaxxbg5c.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7021.tmp" "%TEMP%\vbc7020.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\6qylxrl_.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7205.tmp" "%TEMP%\vbc7204.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cxa0gozf.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7417.tmp" "%TEMP%\vbc7406.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a0aiftbv.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7639.tmp" "%TEMP%\vbc7628.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\15c4xtza.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6CC7.tmp" "%TEMP%\vbc6CC6.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u3jbn2fk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\9egi9mzk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4slufe-q.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7B09.tmp" "%TEMP%\vbc7AF9.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lypk_yt4.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7C9F.tmp" "%TEMP%\vbc7C9E.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v8khbajh.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7E63.tmp" "%TEMP%\vbc7E62.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\jmi1owsk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7FF9.tmp" "%TEMP%\vbc7FE8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\t-_c69fp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES819E.tmp" "%TEMP%\vbc819D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uv6qgnvz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES77BF.tmp" "%TEMP%\vbc77BE.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vl0xnkn4.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u8aqid5x.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES60D5.tmp" "%TEMP%\vbc60C5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES56A8.tmp" "%TEMP%\vbc56A7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tfxqanyq.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES584D.tmp" "%TEMP%\vbc584C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fwe1hi_n.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5A02.tmp" "%TEMP%\vbc59F2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xk_ibupl.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5B88.tmp" "%TEMP%\vbc5B87.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ghsvjqzy.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5D2D.tmp" "%TEMP%\vbc5D1D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\up3hr6go.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6AF3.tmp" "%TEMP%\vbc6AF2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5503.tmp" "%TEMP%\vbc5502.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\epm0-d0g.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pwpzedb-.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES62B9.tmp" "%TEMP%\vbc62A8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lkhlmjcm.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES645E.tmp" "%TEMP%\vbc645D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vfbqcpzn.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6613.tmp" "%TEMP%\vbc6602.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\efbvxigg.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES67A9.tmp" "%TEMP%\vbc6798.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\oqikepxt.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES693E.tmp" "%TEMP%\vbc693D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a5jkfoif.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5EE2.tmp" "%TEMP%\vbc5ED2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES257B.tmp" "%TEMP%\vbc257A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\j-z_lid1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES23E5.tmp" "%TEMP%\vbc23E4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBDD3.tmp" "%TEMP%\vbcBDD2.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\m0nvqt7t.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC18B.tmp" "%TEMP%\vbcC18A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bbu2u-8i.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC533.tmp" "%TEMP%\vbcC532.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\raeajiou.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC8AC.tmp" "%TEMP%\vbcC8AB.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dbk-j4ru.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCC54.tmp" "%TEMP%\vbcCC53.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lr4lsltr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9D39.tmp" "%TEMP%\vbc9D28.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u2qqkk20.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cvss6h1g.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wbpd0lsp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD73C.tmp" "%TEMP%\vbcD73B.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v3tjunqu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDAC5.tmp" "%TEMP%\vbcDAC4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sffdzhzl.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDE4E.tmp" "%TEMP%\vbcDE4D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\k0fpbohl.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE1C7.tmp" "%TEMP%\vbcE1C6.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kths2cso.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCFCD.tmp" "%TEMP%\vbcCFBD.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1pp_jljw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD385.tmp" "%TEMP%\vbcD384.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ng9lhyc8.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE560.tmp" "%TEMP%\vbcE55F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB358.tmp" "%TEMP%\vbcB347.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\y2u7welj.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8C29.tmp" "%TEMP%\vbc8C28.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v_gqwizk.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8FB2.tmp" "%TEMP%\vbc8FA1.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\g7punev6.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES931B.tmp" "%TEMP%\vbc931A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\z6e3sps0.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9675.tmp" "%TEMP%\vbc9674.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wfp801tl.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES99CF.tmp" "%TEMP%\vbc99BF.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zxootpl0.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB6E1.tmp" "%TEMP%\vbcB6E0.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\8beege5u.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA083.tmp" "%TEMP%\vbcA073.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qhjgqpqr.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA3DD.tmp" "%TEMP%\vbcA3CD.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\6amzrpou.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA728.tmp" "%TEMP%\vbcA727.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dtine_at.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAA82.tmp" "%TEMP%\vbcAA71.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\yg97btfu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESADCC.tmp" "%TEMP%\vbcADCB.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2lmpiorl.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8862.tmp" "%TEMP%\vbc8861.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\smgc11qh.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7964.tmp" "%TEMP%\vbc7963.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tikzwezd.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESECB0.tmp" "%TEMP%\vbcECAF.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\h8_az9zy.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES115F.tmp" "%TEMP%\vbc113F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v7yxgt_z.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1314.tmp" "%TEMP%\vbc1303.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ialfxq1f.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES14B9.tmp" "%TEMP%\vbc14B8.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tbo_hn9m.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES166E.tmp" "%TEMP%\vbc166D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\-basa4zu.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1832.tmp" "%TEMP%\vbc1831.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE936.tmp" "%TEMP%\vbcE935.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF9A.tmp" "%TEMP%\vbcF99.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\jy3tsgns.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1B8C.tmp" "%TEMP%\vbc1B8B.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\prpaq03h.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1D31.tmp" "%TEMP%\vbc1D21.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rgnmlvwx.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1EE6.tmp" "%TEMP%\vbc1EE5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cqsq1bpo.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES208B.tmp" "%TEMP%\vbc208A.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\l0jzz1bv.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2230.tmp" "%TEMP%\vbc222F.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\klqgmw1u.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u-os-o0l.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ufyumrw3.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o5cdjodv.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES19E7.tmp" "%TEMP%\vbc19E6.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA5A.tmp" "%TEMP%\vbcBA59.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zb-edpwp.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF077.tmp" "%TEMP%\vbcF066.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ialgw9w6.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF41F.tmp" "%TEMP%\vbcF40E.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ibiu9zva.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF7A8.tmp" "%TEMP%\vbcF7A7.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fl66fimz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFB8E.tmp" "%TEMP%\vbcFB8D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tijkaoeh.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFF17.tmp" "%TEMP%\vbcFF16.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC02.tmp" "%TEMP%\vbcC01.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDD6.tmp" "%TEMP%\vbcDC5.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sexko4le.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES32C.tmp" "%TEMP%\vbc32B.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\c1sushof.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4F0.tmp" "%TEMP%\vbc4EF.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kqyugegz.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6C4.tmp" "%TEMP%\vbc6B4.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\okyg-1y5.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES889.tmp" "%TEMP%\vbc888.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1hceootj.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA5D.tmp" "%TEMP%\vbcA5C.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vixfksbq.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vjamxwiw.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4fxv56g5.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8372.tmp" "%TEMP%\vbc8362.tmp"' (with hidden window)

Executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ed5davcr.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\owiywree.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4099.tmp" "%TEMP%\vbc4098.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\thwk7adi.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES424E.tmp" "%TEMP%\vbc424D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\40sq952h.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4441.tmp" "%TEMP%\vbc43F2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\i-x8ynz1.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4615.tmp" "%TEMP%\vbc4614.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lllu4j4w.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES47CA.tmp" "%TEMP%\vbc47B9.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bjbqzgbp.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\whxq7cuk.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2_gkj8dc.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4B24.tmp" "%TEMP%\vbc4B23.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kbvjfo0m.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4CC9.tmp" "%TEMP%\vbc4CB8.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\08qh8z-o.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4E8D.tmp" "%TEMP%\vbc4E8C.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\976soqlj.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5033.tmp" "%TEMP%\vbc5032.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\66pbsgmg.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES51D8.tmp" "%TEMP%\vbc51D7.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\q3dwsrzr.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3ED5.tmp" "%TEMP%\vbc3ED4.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3D20.tmp" "%TEMP%\vbc3D1F.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3B8A.tmp" "%TEMP%\vbc3B7A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES535E.tmp" "%TEMP%\vbc535D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES28B6.tmp" "%TEMP%\vbc28B5.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cq2k-s4d.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2A5B.tmp" "%TEMP%\vbc2A5A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lxxgpo2q.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2BF1.tmp" "%TEMP%\vbc2BE0.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ivfjlawp.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2D86.tmp" "%TEMP%\vbc2D85.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ze__tbe7.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2F2B.tmp" "%TEMP%\vbc2F2A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\z2eabspn.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2720.tmp" "%TEMP%\vbc271F.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES496F.tmp" "%TEMP%\vbc496E.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\0p4r1hnt.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\nvxror5j.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3488.tmp" "%TEMP%\vbc3487.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\blnfzfco.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES363D.tmp" "%TEMP%\vbc363C.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\-33viaak.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES3821.tmp" "%TEMP%\vbc3820.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pj8ch_ay.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES39D5.tmp" "%TEMP%\vbc39D4.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\njpj1kjc.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES313E.tmp" "%TEMP%\vbc312D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\08ntbu0k.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES32E3.tmp" "%TEMP%\vbc32E2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES177.tmp" "%TEMP%\vbc167.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\klvx7_zn.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rhxidxts.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6E6C.tmp" "%TEMP%\vbc6E6B.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qaxxbg5c.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7021.tmp" "%TEMP%\vbc7020.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\6qylxrl_.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7205.tmp" "%TEMP%\vbc7204.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cxa0gozf.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7417.tmp" "%TEMP%\vbc7406.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a0aiftbv.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7639.tmp" "%TEMP%\vbc7628.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\15c4xtza.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6CC7.tmp" "%TEMP%\vbc6CC6.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u3jbn2fk.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\9egi9mzk.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4slufe-q.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7B09.tmp" "%TEMP%\vbc7AF9.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lypk_yt4.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7C9F.tmp" "%TEMP%\vbc7C9E.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v8khbajh.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7E63.tmp" "%TEMP%\vbc7E62.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\jmi1owsk.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7FF9.tmp" "%TEMP%\vbc7FE8.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\t-_c69fp.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES819E.tmp" "%TEMP%\vbc819D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\uv6qgnvz.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES77BF.tmp" "%TEMP%\vbc77BE.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vl0xnkn4.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u8aqid5x.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES60D5.tmp" "%TEMP%\vbc60C5.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES56A8.tmp" "%TEMP%\vbc56A7.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tfxqanyq.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES584D.tmp" "%TEMP%\vbc584C.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fwe1hi_n.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5A02.tmp" "%TEMP%\vbc59F2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\xk_ibupl.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5B88.tmp" "%TEMP%\vbc5B87.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ghsvjqzy.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5D2D.tmp" "%TEMP%\vbc5D1D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\up3hr6go.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6AF3.tmp" "%TEMP%\vbc6AF2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5503.tmp" "%TEMP%\vbc5502.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\epm0-d0g.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\pwpzedb-.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES62B9.tmp" "%TEMP%\vbc62A8.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lkhlmjcm.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES645E.tmp" "%TEMP%\vbc645D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vfbqcpzn.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6613.tmp" "%TEMP%\vbc6602.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\efbvxigg.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES67A9.tmp" "%TEMP%\vbc6798.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\oqikepxt.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES693E.tmp" "%TEMP%\vbc693D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\a5jkfoif.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES5EE2.tmp" "%TEMP%\vbc5ED2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES257B.tmp" "%TEMP%\vbc257A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\j-z_lid1.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES23E5.tmp" "%TEMP%\vbc23E4.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBDD3.tmp" "%TEMP%\vbcBDD2.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\m0nvqt7t.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC18B.tmp" "%TEMP%\vbcC18A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\bbu2u-8i.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC533.tmp" "%TEMP%\vbcC532.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\raeajiou.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC8AC.tmp" "%TEMP%\vbcC8AB.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dbk-j4ru.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCC54.tmp" "%TEMP%\vbcCC53.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\lr4lsltr.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9D39.tmp" "%TEMP%\vbc9D28.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u2qqkk20.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cvss6h1g.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wbpd0lsp.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD73C.tmp" "%TEMP%\vbcD73B.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v3tjunqu.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDAC5.tmp" "%TEMP%\vbcDAC4.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sffdzhzl.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDE4E.tmp" "%TEMP%\vbcDE4D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\k0fpbohl.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE1C7.tmp" "%TEMP%\vbcE1C6.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kths2cso.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESCFCD.tmp" "%TEMP%\vbcCFBD.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1pp_jljw.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESD385.tmp" "%TEMP%\vbcD384.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ng9lhyc8.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE560.tmp" "%TEMP%\vbcE55F.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB358.tmp" "%TEMP%\vbcB347.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\y2u7welj.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8C29.tmp" "%TEMP%\vbc8C28.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v_gqwizk.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8FB2.tmp" "%TEMP%\vbc8FA1.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\g7punev6.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES931B.tmp" "%TEMP%\vbc931A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\z6e3sps0.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES9675.tmp" "%TEMP%\vbc9674.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\wfp801tl.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES99CF.tmp" "%TEMP%\vbc99BF.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zxootpl0.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESB6E1.tmp" "%TEMP%\vbcB6E0.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\8beege5u.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA083.tmp" "%TEMP%\vbcA073.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\qhjgqpqr.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA3DD.tmp" "%TEMP%\vbcA3CD.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\6amzrpou.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA728.tmp" "%TEMP%\vbcA727.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\dtine_at.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESAA82.tmp" "%TEMP%\vbcAA71.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\yg97btfu.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESADCC.tmp" "%TEMP%\vbcADCB.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\2lmpiorl.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8862.tmp" "%TEMP%\vbc8861.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\smgc11qh.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES7964.tmp" "%TEMP%\vbc7963.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tikzwezd.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESECB0.tmp" "%TEMP%\vbcECAF.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\h8_az9zy.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES115F.tmp" "%TEMP%\vbc113F.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\v7yxgt_z.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1314.tmp" "%TEMP%\vbc1303.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ialfxq1f.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES14B9.tmp" "%TEMP%\vbc14B8.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tbo_hn9m.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES166E.tmp" "%TEMP%\vbc166D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\-basa4zu.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1832.tmp" "%TEMP%\vbc1831.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE936.tmp" "%TEMP%\vbcE935.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF9A.tmp" "%TEMP%\vbcF99.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\jy3tsgns.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1B8C.tmp" "%TEMP%\vbc1B8B.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\prpaq03h.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1D31.tmp" "%TEMP%\vbc1D21.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\rgnmlvwx.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES1EE6.tmp" "%TEMP%\vbc1EE5.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\cqsq1bpo.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES208B.tmp" "%TEMP%\vbc208A.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\l0jzz1bv.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES2230.tmp" "%TEMP%\vbc222F.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\klqgmw1u.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\u-os-o0l.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ufyumrw3.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\o5cdjodv.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES19E7.tmp" "%TEMP%\vbc19E6.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA5A.tmp" "%TEMP%\vbcBA59.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\zb-edpwp.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF077.tmp" "%TEMP%\vbcF066.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ialgw9w6.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF41F.tmp" "%TEMP%\vbcF40E.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\ibiu9zva.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESF7A8.tmp" "%TEMP%\vbcF7A7.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\fl66fimz.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFB8E.tmp" "%TEMP%\vbcFB8D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\tijkaoeh.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESFF17.tmp" "%TEMP%\vbcFF16.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC02.tmp" "%TEMP%\vbcC01.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESDD6.tmp" "%TEMP%\vbcDC5.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\sexko4le.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES32C.tmp" "%TEMP%\vbc32B.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\c1sushof.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES4F0.tmp" "%TEMP%\vbc4EF.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\kqyugegz.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES6C4.tmp" "%TEMP%\vbc6B4.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\okyg-1y5.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES889.tmp" "%TEMP%\vbc888.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\1hceootj.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESA5D.tmp" "%TEMP%\vbcA5C.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vixfksbq.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\vjamxwiw.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\4fxv56g5.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES8372.tmp" "%TEMP%\vbc8362.tmp"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial