Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\EM2SN3Z1\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KLMBC12F\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ECDAFQ6I\2571183901[1]
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\C18XSZID\desktop.ini
- %WINDIR%\RCX1.tmp
- %WINDIR%\6to4beas.dat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ECDAFQ6I\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\EM2SN3Z1\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\C18XSZID\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ECDAFQ6I\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KLMBC12F\desktop.ini
- %WINDIR%\6to4beas.dat
- %WINDIR%\RCX1.tmp в %WINDIR%\6to4beas.dat
- 'bl##.#ina.com.cn':80
- bl##.#ina.com.cn/u/2571183901
- DNS ASK bl##.#ina.com.cn