Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- %TEMP%\128890_res.tmp
- %TEMP%\server.exe
- %TEMP%\їН»§.EXE
- <SYSTEM32>\6to4skk.dll
- %TEMP%\server.exe
- 'a7#####985.gnway.net':2010
- 'a7#####985.gnway.net':2011
- 'www.ip##8.com':80
- www.ip##8.com/ip2city.asp
- DNS ASK a7#####985.gnway.net
- DNS ASK www.ip##8.com
- ClassName: 'Shell_TrayWnd' WindowName: ''