Not to mention they can reinfect via download and the malware scans the system[1] for: - putty.exe - filezilla.exe - winscp.exe - mstsc.exe - mRemoteNG.exe

Not to mention they can reinfect via download and the malware scans the system[1] for: - putty.exe - filezilla.exe - winscp.exe - mstsc.exe - mRemoteNG.exe The malware also has the capabilities to fetch new instructions, so there's no telling what happens when any particular software is detected. [1] https://securelist.com/blog/research/76147/on-the-strongpity-waterhole-attacks-targeting-italian-and-belgian-encryption-users https://securelist.com/blog/research/76147/on-the-strongpity... (linked in the first line of this thread's article)