Technical Information
- <SYSTEM32>\ntvdm.exe -f -i1
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- %TEMP%\RsBuddy.exe
- <Full path to virus>
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-af8.afc.3a0001'
The page may not load correctly.
Defend what you create
Other Resources
Added to the Dr.Web virus database: 2011-09-26
Virus description added: 2011-09-26
One month (no registration) or three months (registration and renewal discount)
Download by serial number
Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.
One month (no registration) or three months (registration and renewal discount)
Download by serial number
After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.
One month (no registration) or three months (registration and renewal discount)
Download by serial number
Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.
2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125124