Ce naiba e asta?!

[Maximus]

FSO.GetSpecialFolder(2) = Temporary Folder

DropFileName = "svchost.exe" == temp/svchost.exe

WriteData = "4D5A900003000000.... = exele

adica : https://www.sendspace.com/file/h3a0ca

adica : https://www.virustotal.com/en/file/e8452f0b8c328b8737d3244729cfb9b5e4295167bfda075b2679c0c9978ab631/analysis/

CAUTION !

sterge

  Quote

FSO.GetSpecialFolder(2) & "\" &

si

  Quote

Set WSHshell = CreateObject("WScript.Shell")

WSHshell.Run DropPath, 0

si ruleaza-l singur sa vezi ce iti da

  Quote

Din cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net )

What is svchost.exe And Why Is It Running?

Edited June 19, 2015 by Maximus

[m@mb@]

  theandruala said:

Salut rst.

Am observat, ca dupa ce fac un fisier html, si il deschid imi apare asta in el

<SCRIPT Language=VBScript><!--

DropFileName = "svchost.exe"

.....

ce e?

si ce treaba are asta cu svchost?

Din cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net )

nu ar trebui sa fii asa "fericit" un search pe google ar fi raspuns la intrebarea ta - ia de aici