Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '%WINDIR%\Cursors\System.exe'
- %WINDIR%\Cursors\System.exe
- 'www.in###el.com.br':80
- www.in###el.com.br/admin/_noticias.php
- DNS ASK www.in###el.com.br
- ClassName: 'notepad' WindowName: ''