"C:\Program Files\Java\jre7\bin\java.exe" -jar C:\Users\user1\AppData\Local\Temp\_0.35665050750291689191560985204820353.class
cmd.exe /C cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive7671597304836201023.vbs
cmd.exe /C cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive824009001715645840.vbs
xcopy "C:\Program Files\Java\jre7" "C:\Users\user1\AppData\Roaming\Oracle\" /e
cmd.exe /C cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive2019656620036878304.vbs
cmd.exe /C cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive4335220415045438567.vbs
cmd.exe
cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive2019656620036878304.vbs
cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive7671597304836201023.vbs
cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive4335220415045438567.vbs
cscript.exe C:\Users\user1\AppData\Local\Temp\Retrive824009001715645840.vbs