Sorry but you will have to wait for probably one of them to approve this. I dont have the knowledge of IDA like endrit does, and im not approving because of that flag "Trojan.BAT.Qhost-6" < only time i've seen that before was from a .bat file that downloaded a bunch of trojans to your computer