Техническая информация
- %TEMP%\tmp24.exe
- %TEMP%\tmp24.exe (загружен из сети Интернет)
- %TEMP%\tmp24.exe
- %APPDATA%\SL32YA12.exe
- %APPDATA%\SL32YA12.dll
- 'do##.#insoft1.com':80
- 'do##.#vertls.com':80
- do##.#insoft1.com/setup/p004_lmcl2/setup.exe
- do##.#vertls.com/prewsav/bhon/prewsav.exe
- do##.#vertls.com/prewsav/bhon/prewsav.dll
- DNS ASK do##.#insoft1.com
- DNS ASK do##.#vertls.com
- ClassName: 'Shell_TrayWnd' WindowName: ''