Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E40007C6-C56D-461D-B282-04C94D72782C}] 'StubPath' = '%PROGRAM_FILES%\Microsoft Office\office11\dsem.exe'
- %PROGRAM_FILES%\Microsoft Office\office11\dsem.exe
- %TEMP%\65338856.tmp
- '61###.rhelper.com':2008
- DNS ASK 61###.rhelper.com
- '<Private IP address>':1035
- ClassName: '' WindowName: '???????? ????'
- ClassName: '' WindowName: '????????????'
- ClassName: '' WindowName: '????????????????'