Warning message... Link to action
Informational message... Link to action
Aliases: No associated aliases
Windows Defender Antivirus detects and removes this threat.
This threat downloads and installs other programs onto your PC without your consent, including other malware.
On March 6, 2018, behavior monitoring and machine learning technologies in Windows Defender Antivirus stopped a Dofoil variant (also known as Smoke Loader) that tried to infect more than 400,000 computers. The massive campaign aimed to install a cryptocurrency miner that uses victim computers' resources for coin mining purposes. Learn how artificial intelligence stopped the attack within minutes: