While reviewing traffic from a tcpdump capture, you notice the following commands being sent from a remote system to one of your web servers. What will this do?

C: > sc Internet create ncservice binpath= "c: tools -l -p 2222 -e "

C: > sc Internet query ncservice
1) This creates a service called ncservice which is linked to the command and is designed to stop any instance of being run. The second command verifies the service is created and its status.
2) This creates a service called which is linked to the ncservice command. The second command verifies the service is created and its status.
3) The first command creates a backdoor shell as a service. It is being started on UDP 2222 using . The second command verifies the service is created and its status.
4) The first command creates a backdoor shell as a service. It is being started on TCP 2222 using . The second command verifies the service is created and its status.
5) The first command verifies the service is created and its status. The second command creates a backdoor shell as a service. It is being started on TCP 2222 connected to .