Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'RavUpteki' = '<SYSTEM32>\agetlker.exe'
- '<SYSTEM32>\agetlker.exe'
- %TEMP%\temp~3
- <SYSTEM32>\rastntyi.dll
- <SYSTEM32>\psapi.lib
- <SYSTEM32>\agetlker.exe
- <SYSTEM32>\agetlker.exe
- <SYSTEM32>\psapi.lib
- ClassName: '' WindowName: ' AUTO UPGRADE LAUNCHER'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Hero OnLine' WindowName: 'Hero OnLine'
- ClassName: '' WindowName: '????????????'