Technical Information
- <Current directory>\_deleteme.bat
- 'do####ad.xp666.com':80
- DNS ASK do####ad.xp666.com
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\_deleteme.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\_deleteme.bat