Technical Information
- %WINDIR%\taskmsg.exe
- %WINDIR%\taskmsg.exe (downloaded from the Internet)
- %WINDIR%\taskmsg.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\moduloa[1].html
- 'ja########antana.sites.uol.com.br':80
- ja########antana.sites.uol.com.br/supermaquina/moduloa.html
- DNS ASK ja########antana.sites.uol.com.br
- '<Private IP address>':1036