Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{z6B2445-1963-9142-A0DB-DBDB9E15FB9z}] 'StubPath' = 'svchot.exe AutoRun'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = '%WINDIR%\help\SVCHOST.EXE'
- %WINDIR%\Help\SVCHOST.EXE -strtu
- %WINDIR%\Help\SVCHOST.EXE