from <Full path to virus> to %PROGRAM_FILES%\Temporary downloads\Active scritps\{89756EC-89913CB-00F1CE}-TIP\HIVE06271363039PM.exe
Deletes itself.
Miscellaneous:
Searches for the following windows:
ClassName: '(null)' WindowName: '0 Sm9ssE2039 E smss.exe 893'
ClassName: '(null)' WindowName: '0 Sm9ssE2039 E csrss.exe 893'
ClassName: '(null)' WindowName: '0 Sm9ssE2039 E INSTALLER 893'
ClassName: '(null)' WindowName: '0 Sm9ssE2039 E SpoolBin.exe 893'
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more