Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER1e76.dir00\svchost.exe.mdmp 16325836412032344
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '21#.#.15.103':139
- '21#.8.32.15':139
- '21#.#.75.121':139
- '21#.#.61.184':139
- '21#.#.61.175':139
- '21#.#.155.10':139
- '21#.#.71.238':139
- '21#.#.241.154':139
- '21#.8.29.70':139
- '21#.#.245.189':139
- '21#.#.23.144':139
- '21#.#.170.115':139
- '21#.#.156.170':139
- '21#.8.73.49':139
- '21#.8.22.95':139
- '21#.#.20.142':139
- '21#.#.62.203':139
- '21#.#.237.128':139
- '21#.#.210.223':139
- '21#.#.190.168':139
- '21#.8.51.54':139
- '21#.#.26.224':139
- '21#.#.210.223':445
- '21#.#.62.203':445
- '21#.8.51.54':445
- '21#.#.156.170':445
- '21#.#.190.168':445
- '21#.#.61.175':445
- '21#.#.75.121':445
- '21#.#.61.184':445
- '21#.#.237.128':445
- '21#.#.23.144':445
- '21#.#.170.115':445
- '21#.#.194.72':139
- '21#.8.182.7':139
- '21#.8.26.58':139
- '21#.#.54.190':139
- '21#.#.165.235':139
- '21#.#.20.142':445
- '21#.8.73.49':445
- '21#.8.22.95':445
- '21#.#.153.18':139
- '21#.#.180.193':445
- '21#.#.10.108':139
- '21#.#.199.51':139
- '21#.#.121.102':139
- '21#.#.70.249':139
- '21#.#.48.234':139
- '21#.#.193.155':139
- '21#.#.102.241':445
- '21#.8.59.70':139
- '21#.#.41.127':139
- '21#.#.110.161':139
- '21#.#.170.222':139
- '21#.#.136.209':139
- '21#.8.13.29':139
- '21#.#.167.127':139
- '21#.#.134.167':139
- '21#.#.143.135':139
- '21#.#.64.226':139
- '21#.#.173.191':139
- '21#.8.213.7':139
- '21#.#.242.216':139
- '21#.8.95.68':139
- '21#.8.8.204':445
- '21#.#.10.108':445
- '21#.#.199.51':445
- '21#.#.121.102':445
- '21#.#.70.249':445
- '21#.#.48.234':445
- '21#.#.193.155':445
- '21#.#.180.193':139
- '21#.8.59.70':445
- '21#.#.41.127':445
- '21#.#.110.161':445
- '21#.#.170.222':445
- '21#.#.136.209':445
- '21#.8.13.29':445
- '21#.#.167.127':445
- '21#.#.134.167':445
- '21#.#.143.135':445
- '21#.#.64.226':445
- '21#.#.173.191':445
- '21#.8.213.7':445
- '21#.#.242.216':445
- '21#.8.95.68':445
- '21#.#.15.103':445
- '21#.#.126.120':139
- '21#.8.84.28':139
- '21#.#.167.82':445
- '21#.8.6.97':445
- '21#.8.197.6':445
- '21#.#.222.50':139
- '21#.#.117.40':139
- '21#.#.237.108':139
- '21#.#.52.240':139
- '21#.#.12.136':139
- '21#.#.49.184':445
- '21#.8.7.119':445
- '21#.#.203.197':445
- '21#.8.49.5':445
- '21#.#.161.58':445
- '21#.#.27.227':445
- '21#.#.129.80':445
- '21#.#.74.129':445
- '21#.#.80.112':445
- '21#.8.28.94':445
- '21#.#.101.228':445
- '21#.#.61.139':139
- '21#.#.211.252':139
- '21#.#.33.124':139
- '21#.#.68.219':139
- '21#.#.140.84':139
- '21#.#.218.140':139
- '21#.#.54.129':139
- '21#.#.103.121':139
- '21#.#.99.139':139
- '21#.#.132.102':139
- '21#.#.116.85':139
- '21#.#.245.52':139
- '21#.#.124.227':139
- '21#.#.167.124':139
- '21#.#.112.57':139
- '21#.8.92.19':139
- '21#.8.65.3':139
- '21#.#.17.188':139
- '21#.#.139.115':139
- '21#.8.3.65':139
- '21#.#.136.173':139
- '21#.8.3.248':139
- '21#.#.175.31':139
- '21#.#.195.183':139
- '21#.#.31.202':139
- '21#.8.182.7':445
- '21#.#.153.18':445
- '21#.#.63.199':139
- '21#.#.204.46':139
- '21#.#.44.229':139
- '21#.#.40.114':139
- '21#.8.9.213':139
- '21#.#.194.72':445
- '21#.#.241.154':445
- '21#.#.155.10':445
- '21#.#.245.189':445
- '21#.8.32.15':445
- '21#.8.29.70':445
- '21#.#.165.235':445
- '21#.8.26.58':445
- '21#.#.54.190':445
- '21#.#.71.238':445
- '21#.#.26.224':445
- '21#.#.161.58':139
- '21#.#.175.31':445
- '21#.#.195.183':445
- '21#.#.31.202':445
- '21#.8.197.6':139
- '21#.#.167.82':139
- '21#.#.63.199':445
- '21#.#.204.46':445
- '21#.#.44.229':445
- '21#.#.40.114':445
- '21#.8.9.213':445
- '21#.8.6.97':139
- '21#.#.203.197':139
- '21#.8.28.94':139
- '21#.8.7.119':139
- '21#.#.27.227':139
- '21#.8.49.5':139
- '21#.#.74.129':139
- '21#.#.49.184':139
- '21#.#.129.80':139
- '21#.#.101.228':139
- '21#.#.80.112':139
- '21#.#.191.148':445
- '21#.#.113.17':445
- '21#.#.116.164':445
- '21#.#.37.197':445
- '21#.#.187.238':445
- '21#.#.244.176':445
- '21#.#.130.54':445
- '21#.#.117.13':445
- '21#.#.44.113':445
- '21#.#.140.243':445
- '21#.8.46.14':445
- '21#.#.179.163':139
- '21#.#.134.179':139
- '21#.#.164.49':139
- '21#.#.10.147':139
- '21#.#.216.228':139
- '21#.#.45.216':445
- '21#.#.142.66':445
- '21#.8.53.60':139
- '21#.#.101.104':139
- '21#.#.236.46':139
- '21#.#.172.11':445
- '21#.#.103.99':445
- '21#.8.56.56':445
- '21#.#.207.100':445
- '21#.#.206.176':445
- '21#.8.39.13':445
- '21#.#.213.14':445
- '21#.#.90.110':445
- '21#.#.205.130':445
- '21#.#.208.56':445
- '21#.8.87.69':445
- '21#.#.177.41':445
- '21#.8.2.187':445
- '21#.#.161.13':445
- '21#.#.89.227':445
- '21#.#.180.189':445
- '21#.8.65.25':445
- '21#.#.109.77':445
- '21#.#.175.131':445
- '21#.#.249.192':445
- '21#.8.59.46':445
- '21#.#.217.41':445
- '21#.#.180.189':139
- '21#.8.65.25':139
- '21#.#.172.11':139
- '21#.#.244.176':139
- '21#.#.130.54':139
- '21#.8.59.46':139
- '21#.#.217.41':139
- '21#.#.161.13':139
- '21#.#.89.227':139
- '21#.8.2.187':139
- '21#.#.117.13':139
- '21#.#.116.164':139
- '21#.#.187.238':139
- '21#.#.37.197':139
- '21#.#.191.148':139
- '21#.#.142.66':139
- '21#.#.44.113':139
- '21#.#.140.243':139
- '21#.#.113.17':139
- '21#.8.46.14':139
- '21#.#.45.216':139
- '21#.#.249.192':139
- '21#.#.187.33':139
- '21#.#.172.244':139
- '21#.#.213.14':139
- '21#.#.90.110':139
- '21#.#.115.101':139
- '21#.#.21.150':139
- '21#.#.91.129':139
- '21#.#.45.177':139
- '21#.#.63.204':139
- '21#.#.176.63':139
- '21#.#.205.130':139
- '21#.#.206.176':139
- '21#.8.39.13':139
- '21#.#.177.41':139
- '21#.#.109.77':139
- '21#.#.175.131':139
- '21#.#.208.56':139
- '21#.8.87.69':139
- '21#.8.56.56':139
- '21#.#.207.100':139
- '21#.#.103.99':139
- '21#.#.115.101':445
- '21#.8.50.66':445
- '21#.8.143.3':445
- '21#.8.66.26':445
- '21#.8.13.36':139
- '21#.#.116.81':445
- '21#.8.97.59':445
- '21#.8.44.97':445
- '21#.#.158.121':445
- '21#.#.29.152':445
- '21#.#.16.228':445
- '21#.8.12.56':139
- '21#.#.34.170':139
- '21#.8.50.94':139
- '21#.#.114.101':139
- '21#.#.45.133':139
- '21#.8.48.62':139
- '21#.#.136.52':139
- '21#.#.129.48':139
- '21#.8.7.76':139
- '21#.8.22.58':139
- '21#.#.141.154':139
- '21#.#.234.44':445
- '21#.8.7.76':445
- '21#.#.136.52':445
- '21#.#.141.154':445
- '21#.8.50.94':445
- '21#.8.22.58':445
- '21#.#.102.241':139
- '21#.8.8.204':139
- '21#.8.13.36':445
- '21#.#.129.48':445
- '21#.8.12.56':445
- '21#.#.34.170':445
- '21#.#.158.214':445
- '21#.8.52.36':445
- '21#.#.214.230':445
- '21#.#.21.120':445
- '21#.8.185.4':445
- '21#.8.48.62':445
- '21#.#.114.101':445
- '21#.#.45.133':445
- '21#.8.2.58':445
- '21#.8.43.97':445
- '21#.8.53.60':445
- '21#.8.46.14':9988
- '21#.#.101.104':445
- '21#.#.179.163':445
- '21#.#.236.46':445
- '21#.#.244.176':9988
- '21#.#.130.54':9988
- '21#.#.37.197':9988
- '21#.#.142.66':9988
- '21#.#.191.148':9988
- '21#.#.134.179':445
- '21#.#.176.63':445
- '21#.#.45.177':445
- '21#.#.63.204':445
- '21#.#.187.33':445
- '21#.#.172.244':445
- '21#.#.216.228':445
- '21#.#.164.49':445
- '21#.#.10.147':445
- '21#.#.21.150':445
- '21#.#.91.129':445
- '21#.#.172.11':9988
- '21#.#.21.120':139
- '21#.8.185.4':139
- '21#.#.234.44':139
- '21#.8.97.59':139
- '21#.8.44.97':139
- '21#.8.2.58':139
- '21#.8.43.97':139
- '21#.8.52.36':139
- '21#.#.214.230':139
- '21#.#.158.214':139
- '21#.#.158.121':139
- '21#.#.115.101':9988
- '21#.#.116.81':139
- '21#.#.213.14':9988
- '21#.#.89.227':9988
- '21#.#.249.192':9988
- '21#.#.29.152':139
- '21#.#.16.228':139
- '21#.8.143.3':139
- '21#.8.66.26':139
- '21#.8.50.66':139