NEW BLOG POST: Windows Defender AV’s behavior monitoring coupled with cloud-powered machine learning models uncovered and blocked a massive Dofoil (Smoke Loader) coin mining campaign. Read the post
Alert level: Severe Detected with Windows Defender Antivirus
Also detected as: No associated aliases
This threat is a member of the Win32/Rongvhin family.
Windows Defender Antivirus detects and removes this threat.
This trojan can use your PC to click on online advertisements without your permission or knowledge. This can earn money for a malicious hacker by making a website or application appear more popular than it is.
What to do now
Use the following free Microsoft software to detect and remove this threat:
- Windows Defender for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
You should also run a full scan. A full scan might find other hidden malware.
Remove browser add-ons
You may need to remove add-ons from your browser:
- Manage add-ons in Internet Explorer
- Disable or remove Add-ons in Firefox
- Uninstall extensions in Chrome
Get more help
If you’re using Windows XP, see our Windows XP end of support page.