“The malicious German version of VLC installs a service that remains dormant for three weeks before activating to download spyware and adware.”