Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /f /im ÊÓƵÏÂÔГВёГџГЉГ–.exe
- <Current directory>\set.ini
- <Current directory>\×ô¶¯éý¼¶.exe
- <Current directory>\video.zip
- <Current directory>\video.zip
- http://wp#.qq.com/pa?p=#############
- http://pu#.#dqqimg.com/qconn/wpa/button/button_11.gif
- http://www.d1##.com/video_down/var.html
- http://www.d1##.com/d1kf_video/hmd.txt
- http://www.d1##.com/down/video.zip
- http://www.d1##.com/d1kf_video/new1.php?id########
- DNS ASK wp#.qq.com
- DNS ASK pu#.#dqqimg.com
- DNS ASK d1##.com
- '<Current directory>\×ô¶¯éý¼¶.exe'
- '%WINDIR%\syswow64\taskkill.exe' /f /im ÊÓƵÏÂÔГВёГџГЉГ–.exe' (with hidden window)