Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\TermService] 'Start' = '00000002'
- <SYSTEM32>\net.exe stop SharedAccess /y
- <SYSTEM32>\net1.exe stop SharedAccess /y
- <SYSTEM32>\sc.exe delete SharedAccess
- <SYSTEM32>\svchost.exe -k DComLaunch
- <SYSTEM32>\net1.exe user asdf meiyoumima /add
- <SYSTEM32>\net1.exe localgroup %USERNAME%s asdf /add
- <SYSTEM32>\svchost.exe