Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System32' = 'C:\Arquivos de programas\System32.exe'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\System32.exe
- 'lu######66.evangelion.nu':80
- lu######66.evangelion.nu/%20/.vti/%20/coderx/enviamail666.php
- DNS ASK lu######66.evangelion.nu