Техническая информация
- %TEMP%\tmp72.exe
- %TEMP%\tmp72.exe (загружен из сети Интернет)
- %TEMP%\tmp72.exe
- %APPDATA%\VADHHVEM.exe
- %APPDATA%\VADHHVEM.dll
- 'do##.#insoft1.com':80
- 'do##.#vertls.com':80
- do##.#insoft1.com/setup/p004_lmcl2/setup.exe
- do##.#vertls.com/prewsav/bhon/prewsav.exe
- do##.#vertls.com/prewsav/bhon/prewsav.dll
- DNS ASK do##.#insoft1.com
- DNS ASK do##.#vertls.com
- ClassName: 'Shell_TrayWnd' WindowName: ''