Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4\Parameters] 'ServiceDll' = '<SYSTEM32>\6to4pd.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- %TEMP%\DF163531.txt
- <SYSTEM32>\6to4pd.dll
- %TEMP%\DF163531.txt в <SYSTEM32>\6to4pd.dll
- 'se####.ftpserver.biz':443
- DNS ASK se####.ftpserver.biz