Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\r_server] 'Start' = '00000002'
- %WINDIR%\Help\svchost.exe /service
- %WINDIR%\Help\svchost.exe /start
- %WINDIR%\Help\svchost.exe /install /silence
- %WINDIR%\Help\raddrv.dll
- %WINDIR%\Help\svchost.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %WINDIR%\Help\admdll.dll
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''