Published Apr 14, 2013|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Trojan-Ransom.Win32.Blocker.avuh (Kaspersky) W32/Suspicious_Gen4.CWHRE (Norman) Found Luhe.MSIL.D (AVG) TR/Ransom.Blocker.avuh (Avira) Trojan.Generic.KDV.899344 (BitDefender) Trojan.AVKill.28785 (Dr.Web) MSIL/Agent.DI worm (ESET)

Windows Defender detects and removes this threat.

This worm downloads Chrome browser extension files that change the way the browser works.

It spreads by infecting removable devices, such as a USB stick or flash drive.


Latest news