Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NtIrst] 'Start' = '00000002'
- '<SYSTEM32>\Lamersvc.exe'
- %TEMP%\WER0bd6.dir00\Lamersvc.exe.hdmp
- %TEMP%\WER0bd6.dir00\appcompat.txt
- %TEMP%\WER0bd6.dir00\manifest.txt
- <SYSTEM32>\Lamersvc.exe
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\ar01[1].gif
- %TEMP%\WER0bd6.dir00\Lamersvc.exe.mdmp
- 'st###eredge.com':80
- st###eredge.com/serverstats/images/ar01.gif
- DNS ASK st###eredge.com