Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hrcli' = '<SYSTEM32>\hruser.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hrcli' = ''
- '<SYSTEM32>\hruser.exe'
- <SYSTEM32>\DECOutLine.ini
- <SYSTEM32>\dragsafe.dll
- <SYSTEM32>\ClientConfig.ini
- <SYSTEM32>\SysOutLine.ini
- <SYSTEM32>\XTDocLineRun.ini
- C:\tmp.ini
- <SYSTEM32>\DECOutLineSEC.bag
- <SYSTEM32>\hruser.exe
- <SYSTEM32>\docedcs.dll
- <SYSTEM32>\docsafe.dll
- <SYSTEM32>\SysOutLine.ini
- C:\tmp.ini
- 'localhost':10008
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'