Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Operating Dynamic Services' = '"%PROGRAM_FILES%\WarAgent\Waragent.exe" /autostart'
- '%PROGRAM_FILES%\WarAgent\Waragent.exe'
- %PROGRAM_FILES%\WarAgent\Settings\Settings.lst
- %PROGRAM_FILES%\WarAgent\Settings\Settings.lst-journal
- %PROGRAM_FILES%\WarAgent\Waragent.exe
- %PROGRAM_FILES%\WarAgent\Waragent.exe
- %PROGRAM_FILES%\WarAgent\Settings\Settings.lst-journal
- 'co####k.subwar.net':80
- co####k.subwar.net/Subdoor/A/XfireUsernames.php?Ac######################################
- co####k.subwar.net/Subdoor/A/XfireUsernames.php
- DNS ASK co####k.subwar.net