Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\GHIJKLMN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WXATUPKR\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S123M567\2178214395[1]
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\SDI38TI3\desktop.ini
- %WINDIR%\RCX1.tmp
- %WINDIR%\6to4beas.dat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S123M567\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\GHIJKLMN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\SDI38TI3\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S123M567\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WXATUPKR\desktop.ini
- %WINDIR%\6to4beas.dat
- 'bl##.#ina.com.cn':80
- bl##.#ina.com.cn/u/2178214395
- DNS ASK bl##.#ina.com.cn
- '<IP-адрес в локальной сети>':1036