Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- %TEMP%\228968_re.tmp
- %TEMP%\228968_re.tmp в <SYSTEM32>\ntmt.dll
- 'vc##.3322.org':8000
- DNS ASK www.ba##u.com
- DNS ASK www.16#.com
- DNS ASK vc##.3322.org
- DNS ASK jb##.3322.org
- ClassName: 'Afx:400000:0' WindowName: ''