Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- %WINDIR%\Temp\clk331.nls
- %WINDIR%\Temp\clk241.nls
- <SYSTEM32>\6to4v32.dll
- %WINDIR%\Temp\clk331.nls в <SYSTEM32>\6to4v32.dll
- %WINDIR%\Temp\clk241.nls в <SYSTEM32>\sbuschk.sys
- DNS ASK ho###seas.com
- DNS ASK 1p####hotels.com
- DNS ASK br####hotels.com