Assertion: virus | /r/CapableOf | save a copy of its dll form
Facets:
Source sentences:
text: To start itself at system boot, the virus saves a copy of its DLL form to a random filename in the Windows system or system32 folder, then adds registry keys to have svchost.exe invoke that DLL as an invisible network service.