"" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "" wrote 32 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "" wrote 52 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "" wrote 4 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "" wrote 15 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "tYfYztfE.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "tYfYztfE.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "tYfYztfE.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "tYfYztfE.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "tYfYztfE.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "tYfYztfE.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "tYfYztfE.exe" wrote 32 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "tYfYztfE.exe" wrote 52 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "tYfYztfE.exe" wrote 4 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "tYfYztfE.exe" wrote 15 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 340) "WdHG1NOR.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "WdHG1NOR.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "WdHG1NOR.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "WdHG1NOR.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "WdHG1NOR.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "WdHG1NOR.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "WdHG1NOR.exe" wrote 32 bytes to a remote process "C:\Windows\System32\spoolsv.exe" (Handle: 340) "WdHG1NOR.exe" wrote 52 bytes to a remote process "C:\Windows\System32\spoolsv.exe" (Handle: 340) "WdHG1NOR.exe" wrote 4 bytes to a remote process "C:\Windows\System32\spoolsv.exe" (Handle: 340) "WdHG1NOR.exe" wrote 15 bytes to a remote process "C:\Windows\System32\spoolsv.exe" (Handle: 340) "GpTejKm2.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "GpTejKm2.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "GpTejKm2.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "GpTejKm2.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "GpTejKm2.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "GpTejKm2.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "GpTejKm2.exe" wrote 32 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "GpTejKm2.exe" wrote 52 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "GpTejKm2.exe" wrote 4 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "GpTejKm2.exe" wrote 15 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "yPzmdCRv.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "yPzmdCRv.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308) "yPzmdCRv.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "yPzmdCRv.exe" wrote 52 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "yPzmdCRv.exe" wrote 4 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 316) "yPzmdCRv.exe" wrote 32 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "yPzmdCRv.exe" wrote 52 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "yPzmdCRv.exe" wrote 4 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "yPzmdCRv.exe" wrote 15 bytes to a remote process "C:\Windows\System32\svchost.exe" (Handle: 336) "N4ciL8UU.exe" wrote 32 bytes to a remote process "C:\Windows\System32\schtasks.exe" (Handle: 308)