Sets the 'hidden' attribute to the following files
%HOMEPATH%\vgwisb.exe
Network activity
UDP
DNS ASK sl###.##fehousenumber.com
DNS ASK mu###.###tal-protection.net.ru
DNS ASK wo###.rickstudio.ru
DNS ASK ba####.cocolands.su
'sl###.##fehousenumber.com':41801
'mu###.###tal-protection.net.ru':41801
'wo###.rickstudio.ru':41801
'ba####.cocolands.su':41801
Miscellaneous
Executes the following
'<SYSTEM32>\svchost.exe'
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more