Sets the 'hidden' attribute to the following files:
C:\AUTORUN.INF
<SYSTEM32>\dnsq.dll
C:\pagefile.pif
<Drive name for removable media>:\pagefile.pif
<Drive name for removable media>:\AUTORUN.INF
C:\037589.log
<SYSTEM32>\Com\smss.exe
C:\NetApi000.sys
<SYSTEM32>\Com\netcfg.000
<SYSTEM32>\Com\lsass.exe
<SYSTEM32>\Com\netcfg.dll
Deletes the following files:
%TEMP%\RarSFX0\Setup.exe
C:\NetApi000.sys
Miscellaneous:
Searches for the following windows:
ClassName: 'fg' WindowName: 'gg'
ClassName: 'gg' WindowName: 'ff'
ClassName: '#32770' WindowName: 'MCI Program Com Application'
ClassName: 'XOR' WindowName: 'MSICTFIME SMSS'
ClassName: 'dd' WindowName: 'gg'
ClassName: '' WindowName: '????'
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''
ClassName: 'XOR' WindowName: 'MSCTFIME SMSS'
ClassName: '' WindowName: '@@????'
ClassName: '' WindowName: 'SREng ????'
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more