Technical Information
- [<HKLM>\System\CurrentControlSet\Services\HelpDeskVNCV3] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\HelpDeskVNCV3] 'ImagePath' = '%ProgramFiles%\remotehelp36\HDVNCRun.exe \service'
- 'HelpDeskVNCV3' %ProgramFiles%\remotehelp36\HDVNCRun.exe \service
- %ProgramFiles%\remotehelp36\sound.wav
- %ProgramFiles%\remotehelp36\splash.jpg
- %ProgramFiles%\remotehelp36\icon1.ico
- %ProgramFiles%\remotehelp36\icon2.ico
- %ProgramFiles%\remotehelp36\rc4.key
- %ProgramFiles%\remotehelp36\hdvncrun.ini
- %ProgramFiles%\remotehelp36\msrc4plugin.dsm
- %ProgramFiles%\remotehelp36\cad.exe
- %ProgramFiles%\remotehelp36\hdvncrun.exe
- %ProgramFiles%\remotehelp36\winvnc.exe
- %ProgramFiles%\remotehelp36\helpdesk.txt
- 'su#####1.netpointe.com':443
- DNS ASK su#####1.netpointe.com
- ClassName: 'WinVNC SC Tray Icon' WindowName: ''
- '%ProgramFiles%\remotehelp36\hdvncrun.exe' /install
- '%ProgramFiles%\remotehelp36\hdvncrun.exe' -installserviceadmin
- '%ProgramFiles%\remotehelp36\hdvncrun.exe' /installservice
- '%ProgramFiles%\remotehelp36\hdvncrun.exe' \service
- '%ProgramFiles%\remotehelp36\hdvncrun.exe' \toolbar
- '%ProgramFiles%\remotehelp36\winvnc.exe'
- '%WINDIR%\syswow64\net.exe' start HelpDeskVNCV3' (with hidden window)
- '%WINDIR%\syswow64\net.exe' start HelpDeskVNCV3
- '%WINDIR%\syswow64\net1.exe' start HelpDeskVNCV3