Avast detects file as HTML:Script-inf
See: https://urlquery.net/report/2f9c18e8-0ac1-4869-9911-4531a678da7a
Re: https://www.hybrid-analysis.com/sample/792c62ed54f581c8d52d58ece4f05852798d000f3029da4adca6503a63a256a7?environmentId=1
Re: https://www.threatminer.org/av.php?q=WM/Agent.DWX!tr
Computer Butler uninstall with Revo Uninstaller.
Re: https://www.virustotal.com/en/url/7ab50067b122257f6482c2ed8afc09375effb91351ded4764f44ec3d61c9efa3/analysis/1474355000/
listed at https://pastebin.com/n9TY2Gxh
polonus