Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Systerpn' = '<SYSTEM32>\algeletyn.exe'
- <SYSTEM32>\algeletyn.exe
- %TEMP%\temp~2
- <SYSTEM32>\algeletyn.exe
- <SYSTEM32>\psapi.lib
- <SYSTEM32>\algeletyn.exe
- <SYSTEM32>\psapi.lib
- ClassName: '' WindowName: '?K?X (?O?@):'
- ClassName: '' WindowName: '?n?J?C?? :'
- ClassName: '' WindowName: '????????????'
- ClassName: '' WindowName: '?C???b?? :'