Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '"%WINDIR%\svchost.exe" -servicehelper'
- [<HKLM>\SYSTEM\ControlSet001\Services\mschost] 'Start' = '00000002'
- '%WINDIR%\SvcHost.exe' -service
- '%WINDIR%\SvcHost.exe' -install
- '<SYSTEM32>\net1.exe' start mschost
- %WINDIR%\SvcHost.exe
- %WINDIR%\msclog.txt
- %WINDIR%\othread2.dll
- %WINDIR%\MSCHooks.dll
- %WINDIR%\mscc.dll