Technical Information
- %TEMP%\uninsta.exe
- http://tx#.###oshuozuan.com/txt.txt
- DNS ASK ip.#q.com
- DNS ASK tx#.###oshuozuan.com
- DNS ASK so##.##ogramer360.com
- '%TEMP%\uninsta.exe'
- '%WINDIR%\syswow64\cmd.exe' /c del "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del "<Full path to file>"