Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\JWXGQ61Z\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\61EBW5Y1\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OLQFKX63\jzy9626[1]
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\012309YB\desktop.ini
- <SYSTEM32>\RCX1.tmp
- <SYSTEM32>\6to4ex.dll
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OLQFKX63\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\JWXGQ61Z\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\012309YB\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OLQFKX63\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\61EBW5Y1\desktop.ini
- <SYSTEM32>\6to4ex.dll
- <SYSTEM32>\RCX1.tmp в <SYSTEM32>\6to4ex.dll
- '12#.#25.114.144':80
- 12#.#25.114.144/jzy9626
- DNS ASK hi.##idu.com