Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- '<Current directory>\net.exe'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %TEMP%\release.tmp
- <SYSTEM32>\svchost.log
- <Current directory>\net.exe
- %WINDIR%\system\config_t.dat
- from %TEMP%\release.tmp to %WINDIR%\system\6to4ex.dll
- '20#.#6.232.182':80
- 20#.#6.232.182/info/privacy_security.htm
- DNS ASK www.microsoft.com