Technical Information
- [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Windows_Update' = '<Full path to file>'
- %ProgramFiles(x86)%\microsof\libeay32.dll
- %ProgramFiles(x86)%\microsof\ssleay32.dll
- <Full path to file>
- 'so########a1970.sites.uol.com.br':80
- http://so########a1970.sites.uol.com.br/index.css
- DNS ASK so########a1970.sites.uol.com.br