BITSADMIN 3.0 command prompt repeatedly opens on its own and downloads files. Researchers discovered this behavior was being caused by an adware bundle called FileTour. FileTour is an Adware bundle that downloads adware, unwanted extensions, PUPs, and miners to an infected computer. The batch files that are executed contain very basic obfuscation and are used to launch a renamed copy of BitsAdmin stored in the C:Windows folder to download further adware and unwanted programs onto the computer.
Source: https://www.bleepingcomputer.com/news/security/adware-bundle-adds-persistence-to-download-more-malware-at-later-time/

