Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERc777.dir00\svchost.exe.mdmp 16325836412031932
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#6.221.164':139
- '20#.#6.142.185':139
- '20#.#6.170.235':139
- '20#.96.9.87':139
- '20#.#6.165.111':139
- '20#.#6.14.189':139
- '20#.#6.36.155':139
- '20#.#6.139.163':139
- '20#.#6.136.251':139
- '20#.#6.51.39':139
- '20#.#6.15.228':139
- '20#.#6.177.149':445
- '20#.#6.206.207':445
- '20#.#6.149.41':445
- '20#.#6.68.29':445
- '20#.#6.41.68':445
- '20#.#6.149.32':139
- '20#.#6.219.148':139
- '20#.#6.33.10':139
- '20#.#6.85.202':139
- '20#.#6.10.85':139
- '20#.#6.221.164':445
- '20#.#6.142.185':445
- '20#.#6.170.235':445
- '20#.96.9.87':445
- '20#.#6.165.111':445
- '20#.#6.14.189':445
- '20#.#6.36.155':445
- '20#.#6.139.163':445
- '20#.#6.136.251':445
- '20#.#6.51.39':445
- '20#.#6.15.228':445
- '20#.#6.82.158':139
- '20#.#6.211.254':139
- '20#.96.2.95':139
- '20#.#6.180.140':139
- '20#.#6.115.133':139
- '20#.#6.149.32':445
- '20#.#6.219.148':445
- '20#.#6.33.10':445
- '20#.#6.85.202':445
- '20#.#6.10.85':445
- '20#.#6.29.151':445
- '20#.#6.41.68':139
- '20#.#6.149.41':139
- '20#.#6.68.29':139
- '20#.#6.151.113':139
- '20#.#6.29.151':139
- '20#.#6.53.191':445
- '20#.#6.181.245':445
- '20#.#6.14.154':445
- '20#.#6.177.149':139
- '20#.#6.206.207':139
- '20#.#6.113.72':139
- '20#.#6.154.19':139
- '20#.#6.104.99':139
- '20#.#6.38.205':139
- '20#.#6.102.227':139
- '20#.#6.205.200':139
- '20#.#6.14.182':139
- '20#.#6.161.132':139
- '20#.#6.76.212':139
- '20#.#6.103.104':139
- '20#.#6.35.176':139
- '20#.#6.103.104':445
- '20#.#6.35.176':445
- '20#.#6.104.99':445
- '20#.#6.38.205':445
- '20#.#6.154.19':445
- '20#.#6.113.72':445
- '20#.#6.151.113':445
- '20#.#6.161.132':445
- '20#.#6.76.212':445
- '20#.#6.14.182':445
- '20#.#6.205.200':445
- '20#.#6.4.105':445
- '20#.#6.77.246':445
- '20#.#6.184.198':445
- '20#.#6.232.116':445
- '20#.#6.19.108':445
- '20#.#6.70.33':445
- '20#.#6.102.227':445
- '20#.#6.33.60':445
- '20#.#6.13.212':445
- '20#.#6.150.4':445
- '20#.#6.180.140':445
- '20#.#6.244.157':445
- '20#.#6.213.195':445
- '20#.#6.182.111':445
- '20#.#6.33.137':445
- '20#.#6.103.41':445
- '20#.#6.158.233':445
- '20#.#6.124.158':445
- '20#.#6.233.129':445
- '20#.#6.115.214':445
- '20#.#6.130.115':445
- '20#.#6.99.28':445
- '20#.#6.209.83':445
- '20#.#6.28.93':445
- '20#.#6.224.46':445
- '20#.#6.219.225':445
- '20#.96.55.8':445
- '20#.#6.30.144':445
- '20#.#6.183.130':445
- '20#.#6.69.223':445
- '20#.#6.73.14':445
- '20#.#6.63.196':445
- '20#.#6.42.25':139
- '20#.#6.150.70':139
- '20#.#6.91.139':139
- '20#.#6.91.122':139
- '20#.#6.80.119':139
- '20#.#6.132.156':139
- '20#.#6.158.169':139
- '20#.#6.217.87':139
- '20#.#6.196.219':139
- '20#.#6.87.195':139
- '20#.#6.123.49':139
- '20#.#6.161.40':139
- '20#.#6.146.128':139
- '20#.#6.129.181':139
- '20#.#6.31.124':139
- '20#.#6.161.105':139
- '20#.#6.42.210':139
- '20#.#6.21.228':139
- '20#.#6.209.159':139
- '20#.#6.147.146':139
- '20#.#6.159.147':139
- '20#.#6.225.194':445
- '20#.96.55.8':139
- '20#.#6.224.46':139
- '20#.#6.219.225':139
- '20#.#6.30.149':139
- '20#.#6.225.194':139
- '20#.#6.63.196':139
- '20#.#6.69.223':139
- '20#.#6.73.14':139
- '20#.#6.209.83':139
- '20#.#6.28.93':139
- '20#.#6.173.134':139
- '20#.#6.211.254':445
- '20#.#6.217.39':139
- '20#.#6.82.158':445
- '20#.#6.115.133':445
- '20#.96.2.95':445
- '20#.#6.254.0':139
- '20#.#6.170.168':139
- '20#.#6.174.110':139
- '20#.#6.251.145':139
- '20#.#6.121.157':139
- '20#.#6.251.145':445
- '20#.#6.121.157':445
- '20#.#6.217.39':445
- '20#.#6.158.233':139
- '20#.#6.124.158':139
- '20#.#6.173.134':445
- '20#.#6.30.149':445
- '20#.#6.170.168':445
- '20#.#6.174.110':445
- '20#.#6.254.0':445
- '20#.#6.233.129':139
- '20#.#6.33.137':139
- '20#.#6.103.41':139
- '20#.#6.99.28':139
- '20#.#6.30.144':139
- '20#.#6.183.130':139
- '20#.#6.115.214':139
- '20#.#6.130.115':139
- '20#.#6.213.195':139
- '20#.#6.182.111':139
- '20#.#6.244.157':139
- '20#.#6.42.139':445
- '20#.#6.18.72':445
- '20#.#6.190.188':445
- '20#.#6.196.138':445
- '20#.#6.92.227':445
- '20#.#6.53.227':445
- '20#.#6.243.70':445
- '20#.#6.11.25':445
- '20#.#6.21.249':445
- '20#.#6.113.206':445
- '20#.#6.15.92':445
- '20#.#6.1.134':139
- '20#.#6.107.2':139
- '20#.#6.132.207':139
- '20#.#6.55.112':139
- '20#.#6.62.151':139
- '20#.#6.238.212':445
- '20#.#6.8.165':445
- '20#.96.3.32':139
- '20#.#6.74.214':139
- '20#.#6.33.236':139
- '20#.#6.165.154':445
- '20#.#6.193.51':445
- '20#.#6.24.110':445
- '20#.#6.12.13':445
- '20#.#6.135.94':445
- '20#.#6.116.9':445
- '20#.#6.245.3':445
- '20#.#6.245.17':445
- '20#.#6.46.193':445
- '20#.#6.20.70':445
- '20#.#6.155.177':445
- '20#.#6.95.92':445
- '20#.#6.80.245':445
- '20#.96.92.3':445
- '20#.#6.34.31':445
- '20#.#6.68.128':445
- '20#.#6.254.194':445
- '20#.#6.119.165':445
- '20#.#6.152.87':445
- '20#.#6.208.89':445
- '20#.#6.46.184':445
- '20#.#6.112.223':139
- '20#.#6.68.128':139
- '20#.96.92.3':139
- '20#.#6.34.31':139
- '20#.#6.53.227':139
- '20#.#6.243.70':139
- '20#.#6.46.184':139
- '20#.#6.152.87':139
- '20#.#6.208.89':139
- '20#.#6.95.92':139
- '20#.#6.80.245':139
- '20#.#6.11.25':139
- '20#.#6.92.227':139
- '20#.#6.15.92':139
- '20#.#6.8.165':139
- '20#.#6.238.212':139
- '20#.#6.190.188':139
- '20#.#6.21.249':139
- '20#.#6.113.206':139
- '20#.#6.18.72':139
- '20#.#6.196.138':139
- '20#.#6.42.139':139
- '20#.#6.182.88':139
- '20#.#6.120.164':139
- '20#.#6.39.191':139
- '20#.#6.116.9':139
- '20#.#6.245.3':139
- '20#.#6.241.49':139
- '20#.#6.209.76':139
- '20#.#6.16.222':139
- '20#.#6.28.226':139
- '20#.#6.175.24':139
- '20#.#6.245.17':139
- '20#.#6.12.13':139
- '20#.#6.135.94':139
- '20#.#6.155.177':139
- '20#.#6.254.194':139
- '20#.#6.119.165':139
- '20#.#6.46.193':139
- '20#.#6.20.70':139
- '20#.#6.193.51':139
- '20#.#6.24.110':139
- '20#.#6.165.154':139
- '20#.#6.39.191':445
- '20#.#6.14.235':445
- '20#.#6.142.204':445
- '20#.#6.116.191':445
- '20#.#6.7.205':445
- '20#.#6.191.245':445
- '20#.#6.33.164':445
- '20#.#6.200.180':445
- '20#.#6.64.105':445
- '20#.#6.86.178':445
- '20#.#6.152.102':445
- '20#.#6.194.46':445
- '20#.#6.85.152':139
- '20#.#6.76.192':139
- '20#.#6.118.105':139
- '20#.#6.79.73':139
- '20#.#6.73.113':139
- '20#.#6.11.253':139
- '20#.#6.101.169':445
- '20#.#6.101.85':139
- '20#.#6.85.176':139
- '20#.#6.218.110':139
- '20#.#6.184.198':139
- '20#.#6.4.105':139
- '20#.#6.19.108':139
- '20#.#6.181.245':139
- '20#.#6.232.116':139
- '20#.#6.33.60':139
- '20#.#6.70.33':139
- '20#.#6.150.4':139
- '20#.#6.77.246':139
- '20#.#6.13.212':139
- '20#.#6.53.191':139
- '20#.#6.85.152':445
- '20#.#6.76.192':445
- '20#.#6.118.105':445
- '20#.#6.79.73':445
- '20#.#6.73.113':445
- '20#.#6.11.253':445
- '20#.#6.14.154':139
- '20#.#6.101.85':445
- '20#.#6.85.176':445
- '20#.#6.218.110':445
- '20#.#6.200.180':139
- '20#.#6.33.236':445
- '20#.96.3.32':445
- '20#.#6.74.214':445
- '20#.#6.1.134':445
- '20#.#6.107.2':445
- '20#.#6.21.249':9988
- '20#.#6.243.70':9988
- '20#.#6.18.72':9988
- '20#.#6.190.188':9988
- '20#.#6.196.138':9988
- '20#.#6.132.207':445
- '20#.#6.175.24':445
- '20#.#6.16.222':445
- '20#.#6.28.226':445
- '20#.#6.182.88':445
- '20#.#6.120.164':445
- '20#.#6.55.112':445
- '20#.#6.62.151':445
- '20#.#6.112.223':445
- '20#.#6.241.49':445
- '20#.#6.209.76':445
- '20#.#6.116.191':139
- '20#.#6.14.235':139
- '20#.#6.191.245':139
- '20#.#6.194.46':139
- '20#.#6.7.205':139
- '20#.#6.64.105':139
- '20#.#6.33.164':139
- '20#.#6.152.102':139
- '20#.#6.142.204':139
- '20#.#6.86.178':139
- '20#.#6.101.169':139
- '20#.#6.80.245':9988
- '20#.#6.208.89':9988
- '20#.96.92.3':9988
- '20#.#6.34.31':9988
- '20#.#6.68.128':9988
- '20#.#6.193.51':9988
- '20#.#6.39.191':9988
- '20#.#6.119.165':9988
- '20#.#6.152.87':9988
- '20#.#6.254.194':9988