Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YUR0IDC3\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S7C56TKN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0DUF0LEZ\2161216907[1]
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WDYZGD2V\desktop.ini
- <SYSTEM32>\RCX1.tmp
- <SYSTEM32>\6to4bea.dll
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0DUF0LEZ\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YUR0IDC3\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WDYZGD2V\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0DUF0LEZ\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S7C56TKN\desktop.ini
- <SYSTEM32>\6to4bea.dll
- <SYSTEM32>\RCX1.tmp в <SYSTEM32>\6to4bea.dll
- 'bl##.#ina.com.cn':80
- bl##.#ina.com.cn/u/2161216907
- DNS ASK bl##.#ina.com.cn