R-Server.exe is not necessarily evil either, but can be used or misused as remote Access component:
Trend

did you find the Registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\r_server

or the service name “Remote Administrator Service” in your services panel ??

did you google thoroughly ?
e.g.:
Weblink1

Weblink2
Weblink3

in what way does R_server.exe reinstall/reactivate itself ?

*, ok Artras… thx for info on CFD