<Drive name for removable media>:\RECYCLER\S-1-5-21-1960408961-562591055-1417001333-500\<Virus name>.vbs
<Drive name for removable media>:\RECYCLER\S-1-5-21-1960408961-562591055-1417001333-500\desktop.ini
Modifies file system :
Creates the following files:
%TEMP%\~TMP1023024248000013.tmp
%TEMP%\~TMP1023024253000015.tmp
<Current directory>\wk32.dat
<Current directory>\s32.dat
%TEMP%\~TMP1023024248000009.tmp
Sets the 'hidden' attribute to the following files:
<Drive name for removable media>:\RECYCLER\S-1-5-21-1960408961-562591055-1417001333-500\<Virus name>.vbs
<Drive name for removable media>:\autorun.inf
<Current directory>\s32.dat.bak
<Drive name for removable media>:\RECYCLER\S-1-5-21-1960408961-562591055-1417001333-500\desktop.ini
Moves the following files:
from %TEMP%\~TMP1023024253000015.tmp to %ALLUSERSPROFILE%\Application Data\Temp\~TMP1023024254000016.50.tmp
from %TEMP%\~TMP1023024248000013.tmp to %ALLUSERSPROFILE%\Application Data\Temp\~TMP1023024248000014.50.tmp
from %TEMP%\~TMP1023024248000009.tmp to %ALLUSERSPROFILE%\Application Data\Temp\~TMP1023024248000010.50.tmp
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more