AvisLoader uses fake verification pages and manual commands to infect Windows devices, while surviving server takedowns.