Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] ' ' = '%WINDIR%\Windows32.scr'
- %WINDIR%\Windows32.scr
- 'do####s.orgfree.com':80
- do####s.orgfree.com/new2/msg2.php
- DNS ASK do####s.orgfree.com
- ClassName: '' WindowName: 'Banco Bradesco S/A - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Banco Sudameris S.A. - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Portal BANCO REAL - ABN AMRO - Microsoft Internet Explorer'