Technical Information
Malicious functions:
Executes the following:
- '<SYSTEM32>\wermgr.exe' -queuereporting
- '<SYSTEM32>\tasklist.exe'
Modifies file system :
Deletes itself.
Download
Dr.Web for Android
- Free three-month trial
- All protection features available
-
Renew your trial license in
AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more