quote:
Originally posted by Horseboy
Is that script malicious? It seems to me it's replacing svhost...
Indeed it is malicious (hence why the script was declined and the user banned).
It doesn't really replace that crucial Windows system file though. But it rather places that malicious file in the \Windows directory (the real svhost.exe is in \Windows\System32) to spoof people and/or certain Windows programs. Once it runs, who knows what may happen.... but it certainly wont be something good
lol at your avatar
/ 
