Техническая информация
- <SYSTEM32>\net1.exe stop sharedaccess
- <SYSTEM32>\net.exe stop sharedaccess
- %PROGRAM_FILES%\nowlist.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\0[1].txt
- 'sa##.wermeer.cn':80
- sa##.wermeer.cn/wermeer/clicker/QQ.exe
- sa##.wermeer.cn/wermeer/clicker/d.exe
- sa##.wermeer.cn/wermeer/clicker/08.exe
- sa##.wermeer.cn/admin/count.php?id###########
- sa##.wermeer.cn/user/0.txt
- sa##.wermeer.cn/ext/hx.exe
- DNS ASK sa##.wermeer.cn