Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'LongZuoms' = '%ProgramFiles(x86)%\ttmual\install.bat'
- C:\13.zip
- '%WINDIR%\syswow64\cmd.exe' /c del /q <Full path to file>' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /q <Full path to file>