Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- <SYSTEM32>\6to4sp.dll
- 'xi##.#####ngdruging.toythieves.com':80
- xi##.#####ngdruging.toythieves.com/s/asp?tr##########################################
- DNS ASK xi##.#####ngdruging.toythieves.com