Your browser is obsolete!
The page may not load correctly.
Added to the Dr.Web virus database:
Virus description added:
To ensure autorun and distribution:
Substitutes the following executable system files:
- <SYSTEM32>\userinit.exe with <SYSTEM32>\userinit.exe
- <SYSTEM32>\dllcache\userinit.exe with <SYSTEM32>\dllcache\userinit.exe
Executes the following:
Injects code into
the following system processes:
Modifies file system :
Creates the following files:
Deletes the following files:
© Doctor Web
2003 — 2020
Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.
2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125124