Technical Information
Malicious functions:
Hides the following processes:
Modifies file system :
Creates the following files:
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
The page may not load correctly.
Added to the Dr.Web virus database: 2013-04-06
Virus description added: 2013-04-14