Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- %WINDIR%\Temp\ЛўЛюЧФ¶Ї№эВЛ¶Ф»°Ѕв·ЕЛ«КЦ.exe
- %WINDIR%\Temp\server_npse.exe
- %WINDIR%\Temp\SkinH_EL.dll
- %TEMP%\130031_res.tmp
- %WINDIR%\Temp\server_npse.exe
- %WINDIR%\Temp\ЛўЛюЧФ¶Ї№эВЛ¶Ф»°Ѕв·ЕЛ«КЦ.exe
- <SYSTEM32>\S6to4B.dll
- %WINDIR%\Temp\SkinH_EL.dll
- %WINDIR%\Temp\server_npse.exe
- 'ro###.no-ip.org':2012
- DNS ASK ro###.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: ''