Техническая информация
- <SYSTEM32>\tasks\qytnode
- vbc.exe
- tcpvcon.exe
- %TEMP%\d0cf2afa
- %HOMEPATH%\qytnode\tcpvcon.exe
- %TEMP%\d342599.tmp
- %TEMP%\d3c32e3.tmp
- C:\users\public\vbc.exe
- %TEMP%\d4847ea.tmp
- %APPDATA%\qytnode\bitc15b.tmp
- %APPDATA%\qytnode\bitc15b.tmp
- %TEMP%\d342599.tmp
- %APPDATA%\qytnode\bitc15b.tmp в %APPDATA%\qytnode\qytnode.exe
- %TEMP%\d342599.tmp
- 'C:\users\public\vbc.exe'
- '%HOMEPATH%\qytnode\tcpvcon.exe' "%HOMEPATH%\qytnode\tcpvcon.exe" /accepteula