Syntax "wscript.exe /E:vbs C:\WINDOWS\system32\baseWINDOWS.db"

[hackoo]

Can someone here explain me this Syntax and what it can do exactly?

C:\WINDOWS\system32\wscript.exe /E:vbs C:\WINDOWS\system32\baseWINDOWS.db

Thank you for your Reply

 

[guitarzan]

It executes the script contained in the file baseWINDOWS.db, if that file exists in the C:\WINDOWS\system32 folder. And judging by some Google hits on "baseWINDOWS.db", I wouldn't test it out if I were you...

 

[hackoo]

Yes i found this code in the registry of my friend who was infected by this kind of malware when i scan it with a2hijackfree.
Because i can't access to the registry or the taskmanager and when i try to delete this key in his registry the last one recreate again so i think the malware try to copy its self in loop and it's still in memory so i'm tired to get rid of it
and when i search for this baseWINDOWS.db i can't find it ??
So Any Solution for that ???

 

[guitarzan]

For a starters, use MalwareBytes anti-malware and Super Anti-spyware... and start a new post in forum760