Win32.Ramnit.G
Presence of the file %TEMP%\svchost.exe
Running process %TEMP%\svchost.exe
Please let BitDefender disinfect your files.
This malware is a html file infected by a worm, with a visual basic script.
The script drops file %TEMP%\svchost.exe wich is detected as Win32.Ramnit.J, then executes this file.
SHARE
THIS ON