Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\ADlog.txt
- %TEMP%\wwymliw.dll
- %TEMP%\ipaddress.txt
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\ipaddress.txt
- %TEMP%\wwymliw.dll
- 'ge####n.tiqian8.com':80
- 'ip###.tixian8.cn':80
- ge####n.tiqian8.com/server/server.txt
- ip###.tixian8.cn/IP.aspx
- DNS ASK ge####n.tiqian8.com
- DNS ASK ip###.tixian8.cn