Technical Information
- '21#.#29.31.67':80
- http://21#.#29.31.67/svchost.txt
- http://21#.#29.31.67/startupsv.txt
- http://21#.#29.31.67/usbsv.txt
- '%WINDIR%\syswow64\cmd.exe' /C choice /C Y /N /D Y /T 3 & Del <Full path to file>' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C choice /C Y /N /D Y /T 3 & Del <Full path to file>
- '%WINDIR%\syswow64\choice.exe' /C Y /N /D Y /T 3