Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svchsot] 'Start' = '00000002'
- %WINDIR%\svchost.scr
- <SYSTEM32>\sc.exe create "svchsot" binpath= "cmd /c start %WINDIR%\svchost.scr" type= share type= interact start= auto
- <SYSTEM32>\attrib.exe "%WINDIR%\svchost.scr" +h +s
- %WINDIR%\svchost.scr
- %WINDIR%\svchost.scr