Hi malware fighters,
Alas it is being done, so what to do against it:
rename in SAFE MODE the following files
%systemroot%/Softwaredistribution ,and
%systemroot%/system32/Softwaredistribution
reboot, and tell your svhost problems good-bye!.
enjoy,
Damian
All this is because of a corrupt local windows update storage.
And for the hacker there is little to crack, It is there for the taking, 'cause it is just an ordinary API freely available…http://msdn2.microsoft.com/en-us/library/aa363160.aspx
The only “odd thing” about this whole story is that macreants did not think of abusing this feature before.
polonus
