Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NetworkChecker' = '<Full path to virus>'
- [SOFTWARE\Far2\Plugins\FTP\Hosts]
- [SOFTWARE\Far\Plugins\FTP\Hosts]
- <Full path to virus>
- '46.##5.61.172':80
- '74.##.122.172':80
- 'localhost':49172
- '17#.#50.122.168':80
- '17#.#22.116.169':80
- '92.##.155.171':80