Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] ' ' = '%WINDIR%\Windows64.scr'
- %WINDIR%\Windows64.scr
- 'do####s.orgfree.com':80
- do####s.orgfree.com/new2/msg.php
- DNS ASK do####s.orgfree.com
- ClassName: '' WindowName: 'Unibanco.com - Microsoft Internet Explorer'
- ClassName: 'IEFrame' WindowName: ''
- ClassName: '' WindowName: 'Santander Banespa - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Banco Ita? - Feito Para Voc? - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Internet Banking CAIXA - Microsoft Internet Explorer'