Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'AceuimH' = '<Full path to virus>'
- from <Full path to virus> to <Current directory>\NyadcsC
- 'pa#####asparasempre.com':80
- pa#####asparasempre.com/index/imagens.html
- DNS ASK pa#####asparasempre.com