Technical Information
- <SYSTEM32>\csrss.exe
- ClassName: '' WindowName: 'Virus¦Killer'
- ClassName: '' WindowName: 'Timer'
- '%WINDIR%\syswow64\attrib.exe' +s +h <Current directory>\×ÙÆÓÏ.×ÙÆÓÏ.ada
- '%WINDIR%\syswow64\shutdown.exe' -p -f
- '%WINDIR%\syswow64\attrib.exe' +s +h <Current directory>\×ÙÆÓÏ.×ÙÆÓÏ.ada' (with hidden window)
- '%WINDIR%\syswow64\shutdown.exe' -p -f' (with hidden window)