Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER16e4.dir00\svchost.exe.mdmp 16325836412032220
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %TEMP%\WER16e4.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '13#.#8.254.13':139
- '13#.#8.123.254':139
- '13#.#8.197.242':445
- '13#.#8.30.189':445
- '13#.#8.246.213':445
- '13#.38.9.15':139
- '13#.#8.216.224':139
- '13#.#8.143.65':139
- '13#.#8.27.124':139
- '13#.#8.66.27':139
- '13#.#8.250.198':445
- '13#.#8.118.17':445
- '13#.#8.69.139':445
- '13#.#8.227.186':445
- '13#.#8.218.49':445
- '13#.#8.132.237':445
- '13#.#8.164.83':445
- '13#.#8.86.48':445
- '13#.#8.192.241':445
- '13#.#8.125.108':445
- '13#.#8.84.175':139
- '13#.#8.60.73':139
- '13#.#8.45.61':139
- '13#.#8.56.93':139
- '13#.#8.92.98':139
- '13#.#8.71.173':139
- '13#.#8.80.36':139
- '13#.#8.62.80':139
- '13#.#8.36.246':139
- '13#.#8.86.45':139
- '13#.#8.79.50':139
- '13#.#8.27.124':445
- '13#.#8.66.27':445
- '13#.#8.123.254':445
- '13#.#8.2.197':139
- '13#.#8.254.13':445
- '13#.#8.84.175':445
- '13#.#8.2.197':445
- '13#.#8.216.224':445
- '13#.#8.143.65':445
- '13#.38.9.15':445
- '13#.#8.164.62':445
- '13#.#8.79.181':445
- '13#.#8.62.55':445
- '13#.#8.246.213':139
- '13#.#8.197.242':139
- '13#.38.38.5':445
- '13#.#8.218.37':445
- '13#.#8.62.158':445
- '13#.#8.4.252':445
- '13#.#8.169.240':445
- '13#.#8.118.17':139
- '13#.#8.192.241':139
- '13#.#8.250.198':139
- '13#.#8.218.49':139
- '13#.#8.69.139':139
- '13#.#8.164.83':139
- '13#.#8.30.189':139
- '13#.#8.132.237':139
- '13#.#8.125.108':139
- '13#.#8.86.48':139
- '13#.#8.0.218':445
- '13#.#8.19.233':445
- '13#.#8.65.203':445
- '13#.#8.114.112':445
- '13#.#8.172.118':445
- '13#.38.1.78':445
- '13#.#8.80.126':445
- '13#.#8.72.167':445
- '13#.#8.4.202':445
- '13#.#8.162.4':445
- '13#.#8.231.139':445
- '13#.#8.113.15':445
- '13#.#8.172.184':445
- '13#.#8.89.243':445
- '13#.#8.210.0':445
- '13#.#8.38.210':445
- '13#.#8.51.98':445
- '13#.#8.113.13':445
- '13#.#8.225.90':445
- '13#.#8.9.226':445
- '13#.#8.238.126':445
- '13#.#8.226.62':139
- '13#.#8.71.24':445
- '13#.#8.176.70':445
- '13#.#8.248.153':445
- '13#.#8.226.204':445
- '13#.#8.153.201':445
- '13#.#8.16.83':445
- '13#.#8.123.83':445
- '13#.#8.115.22':445
- '13#.#8.165.176':445
- '13#.#8.255.184':445
- '13#.#8.42.115':445
- '13#.#8.214.159':445
- '13#.#8.89.236':445
- '13#.#8.226.62':445
- '13#.#8.19.196':445
- '13#.#8.44.236':445
- '13#.38.1.48':445
- '13#.#8.160.249':445
- '13#.#8.215.104':445
- '13#.#8.58.251':445
- '13#.#8.101.150':445
- '13#.#8.9.166':139
- '13#.#8.105.9':139
- '13#.#8.12.253':139
- '13#.#8.157.157':445
- '13#.#8.13.158':139
- '13#.#8.172.247':139
- '13#.#8.106.62':139
- '13#.#8.118.16':139
- '13#.#8.182.104':139
- '13#.#8.15.182':139
- '13#.#8.26.171':445
- '13#.#8.29.27':445
- '13#.#8.103.4':445
- '13#.#8.191.177':445
- '13#.#8.238.105':445
- '13#.#8.0.113':445
- '13#.#8.26.23':445
- '13#.#8.40.113':445
- '13#.#8.30.162':445
- '13#.#8.73.85':445
- '13#.#8.176.70':139
- '13#.#8.165.176':139
- '13#.#8.71.24':139
- '13#.#8.153.201':139
- '13#.#8.248.153':139
- '13#.#8.123.83':139
- '13#.#8.101.150':139
- '13#.#8.16.83':139
- '13#.#8.255.184':139
- '13#.#8.115.22':139
- '13#.#8.214.159':139
- '13#.#8.215.104':139
- '13#.#8.42.115':139
- '13#.#8.19.196':139
- '13#.#8.89.236':139
- '13#.38.1.48':139
- '13#.#8.226.204':139
- '13#.#8.44.236':139
- '13#.#8.58.251':139
- '13#.#8.160.249':139
- '13#.#8.191.177':139
- '13#.#8.60.73':445
- '13#.#8.45.61':445
- '13#.#8.56.93':445
- '13#.#8.92.98':445
- '13#.#8.71.173':445
- '13#.#8.80.36':445
- '13#.#8.62.80':445
- '13#.#8.36.246':445
- '13#.#8.86.45':445
- '13#.#8.79.50':445
- '13#.#8.29.27':139
- '13#.#8.30.162':139
- '13#.#8.26.171':139
- '13#.#8.238.105':139
- '13#.#8.103.4':139
- '13#.#8.26.23':139
- '13#.#8.157.157':139
- '13#.#8.0.113':139
- '13#.#8.73.85':139
- '13#.#8.40.113':139
- '13#.#8.227.186':139
- '13#.#8.200.204':445
- '13#.#8.117.200':445
- '13#.#8.167.239':445
- '13#.#8.65.63':445
- '13#.#8.201.14':445
- '13#.#8.79.239':445
- '13#.#8.59.139':445
- '13#.#8.54.158':445
- '13#.#8.35.84':445
- '13#.#8.173.183':445
- '13#.#8.119.5':139
- '13#.#8.49.95':139
- '13#.38.5.44':139
- '13#.#8.189.59':139
- '13#.#8.43.101':139
- '13#.#8.223.202':139
- '13#.#8.168.94':139
- '13#.#8.61.220':139
- '13#.#8.232.119':139
- '13#.#8.29.150':139
- '13#.#8.190.134':445
- '13#.#8.200.36':445
- '13#.#8.249.0':445
- '13#.#8.81.122':445
- '13#.#8.44.167':445
- '13#.#8.26.226':445
- '13#.#8.200.153':445
- '13#.#8.121.197':445
- '13#.#8.29.105':445
- '13#.#8.86.244':445
- '13#.#8.179.53':445
- '13#.#8.151.210':445
- '13#.#8.110.173':445
- '13#.#8.45.225':445
- '13#.#8.28.213':445
- '13#.#8.70.247':445
- '13#.#8.1.228':445
- '13#.38.8.22':445
- '13#.#8.124.152':445
- '13#.#8.127.24':445
- '13#.#8.152.127':445
- '13#.#8.45.225':139
- '13#.#8.151.210':139
- '13#.#8.70.247':139
- '13#.#8.190.134':139
- '13#.#8.28.213':139
- '13#.#8.124.152':139
- '13#.#8.1.228':139
- '13#.#8.152.127':139
- '13#.#8.110.173':139
- '13#.#8.127.24':139
- '13#.#8.200.204':139
- '13#.#8.117.200':139
- '13#.#8.167.239':139
- '13#.#8.201.14':139
- '13#.#8.65.63':139
- '13#.#8.79.239':139
- '13#.#8.59.139':139
- '13#.#8.54.158':139
- '13#.#8.35.84':139
- '13#.#8.173.183':139
- '13#.38.8.22':139
- '13#.#8.41.180':139
- '13#.#8.123.23':139
- '13#.#8.100.6':139
- '13#.#8.199.121':139
- '13#.#8.105.246':139
- '13#.#8.177.21':139
- '13#.#8.93.114':139
- '13#.#8.108.180':139
- '13#.#8.86.190':139
- '13#.#8.180.56':139
- '13#.#8.200.36':139
- '13#.#8.249.0':139
- '13#.#8.81.122':139
- '13#.#8.44.167':139
- '13#.#8.26.226':139
- '13#.#8.200.153':139
- '13#.#8.121.197':139
- '13#.#8.29.105':139
- '13#.#8.86.244':139
- '13#.#8.179.53':139
- '13#.#8.199.121':445
- '13#.#8.164.62':139
- '13#.#8.79.181':139
- '13#.#8.62.55':139
- '13#.#8.140.213':445
- '13#.#8.110.234':445
- '13#.38.38.5':139
- '13#.#8.218.37':139
- '13#.#8.62.158':139
- '13#.#8.4.252':139
- '13#.#8.169.240':139
- '13#.38.28.2':445
- '13#.#8.73.203':445
- '13#.#8.110.234':139
- '13#.#8.213.105':139
- '13#.#8.140.213':139
- '13#.#8.134.14':445
- '13#.#8.213.105':445
- '13#.#8.27.170':445
- '13#.#8.54.101':445
- '13#.#8.240.226':445
- '13#.#8.0.218':139
- '13#.#8.19.233':139
- '13#.#8.65.203':139
- '13#.#8.114.112':139
- '13#.#8.172.118':139
- '13#.38.1.78':139
- '13#.#8.80.126':139
- '13#.#8.72.167':139
- '13#.#8.4.202':139
- '13#.#8.162.4':139
- '13#.#8.231.139':139
- '13#.#8.113.15':139
- '13#.#8.172.184':139
- '13#.#8.89.243':139
- '13#.#8.210.0':139
- '13#.#8.38.210':139
- '13#.#8.51.98':139
- '13#.#8.113.13':139
- '13#.#8.225.90':139
- '13#.#8.9.226':139
- '13#.#8.238.126':139
- '13#.#8.49.95':445
- '13#.#8.232.119':445
- '13#.#8.119.5':445
- '13#.#8.43.101':445
- '13#.38.5.44':445
- '13#.#8.168.94':445
- '13#.#8.65.63':9988
- '13#.#8.223.202':445
- '13#.#8.29.150':445
- '13#.#8.61.220':445
- '13#.#8.123.23':445
- '13#.#8.86.190':445
- '13#.#8.41.180':445
- '13#.#8.105.246':445
- '13#.#8.100.6':445
- '13#.#8.93.114':445
- '13#.#8.189.59':445
- '13#.#8.177.21':445
- '13#.#8.180.56':445
- '13#.#8.108.180':445
- '13#.#8.167.239':9988
- '13#.#8.29.105':9988
- '13#.38.28.2':139
- '13#.#8.86.244':9988
- '13#.#8.249.0':9988
- '13#.#8.26.226':9988
- '13#.#8.27.170':139
- '13#.#8.134.14':139
- '13#.#8.240.226':139
- '13#.#8.73.203':139
- '13#.#8.54.101':139
- '13#.#8.79.239':9988
- '13#.#8.59.139':9988
- '13#.#8.54.158':9988
- '13#.#8.201.14':9988
- '13#.#8.173.183':9988
- '13#.38.8.22':9988
- '13#.#8.44.167':9988
- '13#.#8.124.152':9988
- '13#.#8.151.210':9988
- '13#.#8.152.127':9988