| Alert Level | severe |
| Category | Trojan |
| Protection starting from: | 1.289.1019.0 |
Description :
This threat provides attackers backdoor access to infected machines. To stay persistent and evade detection, this threat attempts to turn off Windows Defender Antivirus and adds itself as an authorized application to the Windows Defender Firewall.
This threat can spread through removable drives and network shares.
