Technical Information
- %WINDIR%\taskmsg.exe (downloaded from the Internet)
- %WINDIR%\taskmsg.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\moduloa[1].html
- 'fa########olato.sites.uol.com.br':80
- fa########olato.sites.uol.com.br/clonne/moduloa.html
- DNS ASK fa########olato.sites.uol.com.br