Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERbb40.dir00\svchost.exe.mdmp 16325836412032216
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#3.179.93':139
- '20#.#3.23.179':139
- '20#.#3.170.218':139
- '20#.#3.110.37':139
- '20#.#3.151.110':139
- '20#.#3.193.28':139
- '20#.#3.126.160':139
- '20#.#3.11.65':139
- '20#.#3.69.107':139
- '20#.#3.21.174':139
- '20#.#3.136.54':139
- '20#.#3.94.135':139
- '20#.#3.54.55':139
- '20#.#3.108.241':139
- '20#.#3.197.40':139
- '20#.#3.3.172':139
- '20#.#3.218.249':139
- '20#.#3.212.29':139
- '20#.#3.188.200':139
- '20#.#3.30.128':139
- '20#.#3.93.115':139
- '20#.#3.136.163':445
- '20#.#3.108.241':445
- '20#.#3.90.120':445
- '20#.#3.208.191':445
- '20#.#3.46.25':445
- '20#.#3.94.135':445
- '20#.#3.188.200':445
- '20#.#3.136.54':445
- '20#.#3.197.40':445
- '20#.#3.54.55':445
- '20#.#3.119.17':445
- '20#.#3.225.204':445
- '20#.#3.233.8':445
- '20#.#3.95.189':139
- '20#.#3.252.215':139
- '20#.#3.60.155':445
- '20#.#3.192.84':445
- '20#.#3.231.169':445
- '20#.#3.87.254':445
- '20#.#3.78.236':445
- '20#.#3.136.163':139
- '20#.#3.85.211':139
- '20#.33.7.38':445
- '20#.#3.3.135':139
- '20#.#3.200.143':139
- '20#.#3.220.91':139
- '20#.#3.139.197':445
- '20#.#3.100.13':445
- '20#.#3.65.81':445
- '20#.#3.23.125':445
- '20#.#3.205.21':445
- '20#.#3.100.13':139
- '20#.#3.215.162':139
- '20#.#3.139.197':139
- '20#.#3.65.81':139
- '20#.#3.205.21':139
- '20#.#3.105.179':139
- '20#.#3.143.105':139
- '20#.#3.179.177':139
- '20#.#3.80.247':139
- '20#.#3.4.225':139
- '20#.#3.215.162':445
- '20#.#3.78.236':139
- '20#.#3.231.169':139
- '20#.#3.87.254':139
- '20#.#3.119.17':139
- '20#.#3.225.204':139
- '20#.#3.46.25':139
- '20#.#3.90.120':139
- '20#.#3.208.191':139
- '20#.#3.60.155':139
- '20#.#3.192.84':139
- '20#.#3.105.179':445
- '20#.#3.143.105':445
- '20#.#3.179.177':445
- '20#.#3.80.247':445
- '20#.#3.4.225':445
- '20#.#3.85.211':445
- '20#.#3.233.8':139
- '20#.#3.3.135':445
- '20#.#3.200.143':445
- '20#.#3.220.91':445
- '20#.#3.30.128':445
- '20#.#3.20.62':139
- '20#.33.3.15':139
- '20#.#3.253.234':139
- '20#.#3.228.130':139
- '20#.#3.19.229':139
- '20#.#3.133.90':139
- '20#.#3.197.133':139
- '20#.#3.81.131':139
- '20#.#3.195.2':139
- '20#.#3.103.254':139
- '20#.#3.147.9':445
- '20#.#3.32.147':445
- '20#.#3.9.183':445
- '20#.#3.31.159':445
- '20#.#3.87.253':445
- '20#.#3.102.16':139
- '20#.#3.108.48':139
- '20#.#3.58.184':139
- '20#.#3.134.170':445
- '20#.#3.184.101':139
- '20#.33.51.3':139
- '20#.#3.77.47':139
- '20#.#3.243.107':139
- '20#.#3.47.163':139
- '20#.#3.146.235':139
- '20#.#3.110.232':139
- '20#.#3.113.200':139
- '20#.#3.223.113':139
- '20#.#3.91.209':139
- '20#.#3.125.71':139
- '20#.#3.209.124':139
- '20#.#3.232.16':139
- '20#.#3.72.22':139
- '20#.#3.180.184':139
- '20#.33.47.9':139
- '20#.#3.112.112':139
- '20#.#3.173.60':139
- '20#.#3.81.215':139
- '20#.#3.5.181':139
- '20#.#3.211.71':139
- '20#.#3.188.211':139
- '20#.#3.18.113':445
- '20#.#3.93.115':445
- '20#.#3.95.189':445
- '20#.#3.126.160':445
- '20#.#3.11.65':445
- '20#.#3.193.28':445
- '20#.#3.163.49':139
- '20#.#3.53.186':139
- '20#.#3.208.85':139
- '20#.#3.252.215':445
- '20#.#3.121.102':139
- '20#.#3.110.37':445
- '20#.#3.151.110':445
- '20#.#3.218.249':445
- '20#.#3.212.29':445
- '20#.#3.3.172':445
- '20#.#3.69.107':445
- '20#.#3.21.174':445
- '20#.#3.23.179':445
- '20#.#3.170.218':445
- '20#.#3.179.93':445
- '20#.#3.89.107':139
- '20#.#3.163.49':445
- '20#.#3.53.186':445
- '20#.#3.208.85':445
- '20#.#3.134.170':139
- '20#.#3.121.102':445
- '20#.#3.166.52':445
- '20#.#3.246.127':445
- '20#.#3.243.192':445
- '20#.#3.89.107':445
- '20#.#3.51.144':445
- '20#.#3.246.127':139
- '20#.#3.18.113':139
- '20#.#3.166.52':139
- '20#.#3.51.144':139
- '20#.#3.243.192':139
- '20#.#3.147.9':139
- '20#.#3.32.147':139
- '20#.#3.9.183':139
- '20#.#3.31.159':139
- '20#.#3.87.253':139
- '20#.#3.24.250':445
- '20#.#3.108.246':445
- '20#.#3.250.4':445
- '20#.#3.251.105':445
- '20#.#3.105.159':445
- '20#.#3.8.216':445
- '20#.#3.166.100':445
- '20#.#3.40.100':445
- '20#.#3.232.162':445
- '20#.#3.94.26':445
- '20#.#3.112.203':139
- '20#.#3.9.218':139
- '20#.#3.30.93':139
- '20#.#3.143.231':139
- '20#.#3.5.191':139
- '20#.#3.229.62':139
- '20#.#3.119.147':445
- '20#.#3.3.156':139
- '20#.#3.89.105':139
- '20#.#3.66.63':139
- '20#.#3.60.38':445
- '20#.#3.20.117':445
- '20#.#3.201.121':445
- '20#.#3.172.168':445
- '20#.#3.240.132':445
- '20#.#3.33.54':445
- '20#.#3.129.163':445
- '20#.#3.115.144':445
- '20#.#3.93.39':445
- '20#.#3.131.177':445
- '20#.#3.39.118':445
- '20#.#3.226.198':445
- '20#.#3.127.137':445
- '20#.#3.65.160':445
- '20#.#3.133.139':445
- '20#.#3.238.127':445
- '20#.#3.71.37':445
- '20#.#3.208.31':445
- '20#.#3.101.20':445
- '20#.#3.117.220':445
- '20#.#3.77.42':445
- '20#.#3.185.124':139
- '20#.#3.238.127':139
- '20#.#3.65.160':139
- '20#.#3.133.139':139
- '20#.#3.166.100':139
- '20#.#3.60.38':139
- '20#.#3.77.42':139
- '20#.#3.101.20':139
- '20#.#3.117.220':139
- '20#.#3.226.198':139
- '20#.#3.127.137':139
- '20#.#3.250.4':139
- '20#.#3.24.250':139
- '20#.#3.105.159':139
- '20#.#3.251.105':139
- '20#.#3.119.147':139
- '20#.#3.40.100':139
- '20#.#3.8.216':139
- '20#.#3.94.26':139
- '20#.#3.108.246':139
- '20#.#3.232.162':139
- '20#.#3.71.37':139
- '20#.#3.240.246':139
- '20#.#3.231.126':139
- '20#.#3.59.199':139
- '20#.#3.115.144':139
- '20#.#3.199.110':139
- '20#.#3.201.159':139
- '20#.#3.235.109':139
- '20#.#3.118.162':139
- '20#.#3.7.232':139
- '20#.#3.173.156':139
- '20#.#3.172.168':139
- '20#.#3.20.117':139
- '20#.#3.33.54':139
- '20#.#3.208.31':139
- '20#.#3.240.132':139
- '20#.#3.93.39':139
- '20#.#3.129.163':139
- '20#.#3.39.118':139
- '20#.#3.201.121':139
- '20#.#3.131.177':139
- '20#.#3.199.110':445
- '20#.#3.19.66':139
- '20#.#3.229.59':445
- '20#.#3.95.172':139
- '20#.#3.133.202':139
- '20#.#3.200.86':139
- '20#.#3.7.191':445
- '20#.#3.104.89':445
- '20#.#3.110.78':445
- '20#.#3.233.228':445
- '20#.#3.79.100':445
- '20#.#3.47.64':139
- '20#.#3.64.179':139
- '20#.#3.72.89':139
- '20#.#3.187.206':139
- '20#.#3.147.144':139
- '20#.#3.226.222':139
- '20#.#3.224.180':139
- '20#.#3.188.56':139
- '20#.#3.155.132':139
- '20#.#3.87.11':139
- '20#.#3.236.215':445
- '20#.#3.224.180':445
- '20#.#3.133.202':445
- '20#.#3.226.222':445
- '20#.#3.87.11':445
- '20#.#3.188.56':445
- '20#.33.7.38':139
- '20#.#3.23.125':139
- '20#.#3.19.66':445
- '20#.#3.200.86':445
- '20#.#3.95.172':445
- '20#.#3.244.150':445
- '20#.#3.187.206':445
- '20#.#3.170.220':445
- '20#.#3.60.153':445
- '20#.#3.96.20':445
- '20#.#3.64.179':445
- '20#.#3.155.132':445
- '20#.#3.47.64':445
- '20#.#3.147.144':445
- '20#.#3.72.89':445
- '20#.#3.244.150':139
- '20#.#3.9.218':445
- '20#.#3.89.105':445
- '20#.#3.112.203':445
- '20#.#3.5.191':445
- '20#.#3.30.93':445
- '20#.#3.119.147':9988
- '20#.#3.251.105':9988
- '20#.#3.229.62':445
- '20#.#3.66.63':445
- '20#.#3.3.156':445
- '20#.#3.7.232':445
- '20#.#3.173.156':445
- '20#.#3.231.126':445
- '20#.#3.59.199':445
- '20#.#3.240.246':445
- '20#.#3.185.124':445
- '20#.#3.143.231':445
- '20#.#3.235.109':445
- '20#.#3.118.162':445
- '20#.#3.201.159':445
- '20#.#3.250.4':9988
- '20#.#3.110.78':139
- '20#.#3.7.191':139
- '20#.#3.79.100':139
- '20#.#3.229.59':139
- '20#.#3.233.228':139
- '20#.#3.96.20':139
- '20#.#3.170.220':139
- '20#.#3.60.153':139
- '20#.#3.104.89':139
- '20#.#3.236.215':139
- '20#.#3.226.198':9988
- '20#.#3.127.137':9988
- '20#.#3.65.160':9988
- '20#.#3.105.159':9988
- '20#.#3.24.250':9988
- '20#.#3.9.218':9988
- '20#.#3.229.62':9988
- '20#.#3.231.126':9988
- '20#.#3.129.163':9988
- '20#.#3.199.110':9988