Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\000003B93FB65DDC] 'Start' = '00000002'
- <Full path to virus>
- 'en######s.sites.uol.com.br':80
- en######s.sites.uol.com.br/index.html
- DNS ASK en######s.sites.uol.com.br
- '<Private IP address>':1037