Technical Information
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- <DRIVERS>\etc\hosts
- 'ho###.fh168.com':80
- ho###.fh168.com/Remote.txt
- DNS ASK b.##168.com
- DNS ASK ho##.#5woool.com
- DNS ASK ho###.fh168.com
- DNS ASK a.##168.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'GINA Logon'