ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.
I nuked Explorer and gained speed, silence, and a few new problems.