Jump to content
Maximus

Ce naiba e asta?!

Recommended Posts

FSO.GetSpecialFolder(2) = Temporary Folder

DropFileName = "svchost.exe" == temp/svchost.exe

WriteData = "4D5A900003000000.... = exele

adica : https://www.sendspace.com/file/h3a0ca

adica : https://www.virustotal.com/en/file/e8452f0b8c328b8737d3244729cfb9b5e4295167bfda075b2679c0c9978ab631/analysis/

CAUTION !

sterge

FSO.GetSpecialFolder(2) & "\" &

si

Set WSHshell = CreateObject("WScript.Shell")

WSHshell.Run DropPath, 0

si ruleaza-l singur sa vezi ce iti da

Din cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net 21.gif )

What is svchost.exe And Why Is It Running?

Edited by Maximus
Link to comment
Share on other sites

Salut rst.

Am observat, ca dupa ce fac un fisier html, si il deschid imi apare asta in el :|

<SCRIPT Language=VBScript><!--

DropFileName = "svchost.exe"

.....

ce e?:|

si ce treaba are asta cu svchost?

Din cate stiu ala-i un proces de la windows, care are treaba cu netul (daca-l inchid raman fara net :)) )

nu ar trebui sa fii asa "fericit" :) un search pe google ar fi raspuns la intrebarea ta - ia de aici

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...