Technical Information
- <SYSTEM32>\wermgr.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://ip.##ysrc.net/plain
- DNS ASK microsoft.com
- DNS ASK ip.##ysrc.net
- DNS ASK 19#.###.#11.95.zen.spamhaus.org
- DNS ASK 19#.###.#11.95.cbl.abuseat.org
- '<SYSTEM32>\wermgr.exe'