Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Network Host' = '%APPDATA%\Microsoft\Windows\System\wchks.exe -m'
- %APPDATA%\Microsoft\Windows\System\wchks.exe -m
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\select[1].php
- %APPDATA%\Microsoft\Windows\System\wchks.exe
- 'pr####e-magic.com':80
- pr####e-magic.com/select.php?id#############################
- DNS ASK pr####e-magic.com
- ClassName: 'Indicator' WindowName: ''