╡τ─╘╖╔╗·&7.exe(进程ID：1008) 命令行:"c:\users\admin\appdata\local\temp\╡τ─╘╖╔╗·&7.exe"
svchost.exe(进程ID：1868) 命令行:C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
  MpCmdRun.exe(进程ID：768) 命令行:"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable