Short Bio

This detection is for a virus that also displays worm-like behavior by copying itself to network shares. It also downloads and installs other malware on infected systems.

The virus renames legitimate files and hides them. It then takes the place of those files.


Malwarebytes can remove this threat without further user interaction, but it can not retrieve the renamed and hidden files. You may want to run the Windows System File Checker after the removal has been done.

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language