When Adware.Vanish is executed, it performs the following actions:
- Modifies the default home page and search settings in Internet Explorer.
- Adds the value:
"syscm" = %original file path%
to the registry key:
- Accesses and downloads files from www.vanishonline.com, including executables, possibly to update itself.
Note: www.vanishonline.com did not appear to be a valid Web address at the time of this analysis.