Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Remote_Server_2008] 'Start' = '00000002'
- %PROGRAM_FILES%\Remote\Remote.exe
- %PROGRAM_FILES%\Remote\Remote.exe
- '90###.rhelper.com':2008
- DNS ASK 90###.rhelper.com
- ClassName: 'Shell_TrayWnd' WindowName: ''