伪装成svchost进程,在windows服务里添加服务,对连接到电脑的U盘进行定时扫描,将其复制到电脑里默认的目录里-disguised as svchost process, the service windows add services, connect to the computer of the U disk regularly scan, copy it to the computer's default directory