Sets the 'hidden' attribute to the following files:
C:\AUTORUN.INF
<Drive name for removable media>:\AUTORUN.INF
<SYSTEM32>\usa\SMSS.EXE
<SYSTEM32>\usa\csrss.exe
Deletes the following files:
<SYSTEM32>\wbem\Performance\WmiApRpl.ini
<SYSTEM32>\PerfStringBackup.TMP
%TEMP%\~DF6070.tmp
<SYSTEM32>\gpedit.msc
<SYSTEM32>\userinit.exe
Miscellaneous:
Searches for the following windows:
ClassName: 'ExploreWClass' WindowName: ''
ClassName: 'CabinetWClass' WindowName: ''
ClassName: '' WindowName: 'Local Settings'
ClassName: 'RegEdit_RegEdit' WindowName: ''
ClassName: '' WindowName: 'Registry Editor'
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more