%WINDIR%\Temp\Temporary Internet Files\Content.IE5\49QVSXEB\desktop.ini
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\desktop.ini
<SYSTEM32>\xfsvc.ocx
Sets the 'hidden' attribute to the following files:
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\AZ6H436T\desktop.ini
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\XGZIJ2L9\desktop.ini
%WINDIR%\Temp\History\History.IE5\desktop.ini
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\desktop.ini
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\49QVSXEB\desktop.ini
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\M9S7UVWX\desktop.ini
Deletes the following files:
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\49QVSXEB\sc[1].asp
%WINDIR%\Temp\Temporary Internet Files\Content.IE5\M9S7UVWX\c[1].asp
%WINDIR%\Temp\~DFAECD.tmp
%TEMP%\~DF6B14.tmp
%TEMP%\~DF2161.tmp
Network activity:
Connects to:
'vo#.#iuza.com':80
'localhost':1036
'localhost':1035
TCP:
HTTP GET requests:
vo#.#iuza.com/incs//c.asp?03######
vo#.#iuza.com/incs//sc.asp
UDP:
DNS ASK vo#.#iuza.com
Miscellaneous:
Searches for the following windows:
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more