File tree Expand file tree Collapse file tree 1 file changed +5
-3
lines changed
AntiVirtualization/RepetitiveProcess Expand file tree Collapse file tree 1 file changed +5
-3
lines changed Original file line number Diff line number Diff line change 88 "syscall"
99)
1010
11- // Check checks if any process with the same name is running more than 15 times and exits if so.
11+ // Check checks if any non-svchost process with the same name is running more than 15 times and exits if so.
1212func Check () (bool , error ) {
1313 cmd := exec .Command ("tasklist" )
1414 var out bytes.Buffer
@@ -28,12 +28,14 @@ func Check() (bool, error) {
2828 fields := strings .Fields (line )
2929 if len (fields ) > 0 {
3030 processName := fields [0 ]
31- processCounts [processName ]++
31+ if processName != "svchost.exe" {
32+ processCounts [processName ]++
33+ }
3234 }
3335 }
3436
3537 for _ , count := range processCounts {
36- if count > 15 {
38+ if count > 60 {
3739 return true , nil
3840 }
3941 }
You can’t perform that action at this time.
0 commit comments