When launched, it creates and runs an invisible .pyw file that transfers all important photos from the user's PC using vk_api. The process is silent, a .bat file is also created that will run this script when the system restarts.
The .pyw file also creates another .pyw file that will receive signals from the owner of the virus and, if necessary, activate the built-in WinLock and deactivate it accordingly.
(You don't need to install any modules)
P.S.
-
deinstall.py has been created to remove the virus from the user's PC.
-
Python version: > 3.3
-
OS: Windows (7)-10