Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /f /im <File name>.exe
- <Current directory>\update.exe.tmp
- <Current directory>\update1.bat
- %WINDIR%\ud.dll
- <Full path to file>
- http://www.yx##w.com/?p=##
- http://www.yx##w.com/1.exe
- DNS ASK yx##w.com
- ClassName: '' WindowName: ''
- '<Full path to file>'
- '%WINDIR%\syswow64\cmd.exe' /c update1.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c update1.bat