Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WERb0d0.dir00\svchost.exe.mdmp 16325836412028852
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %TEMP%\WERb0d0.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '63.#.35.131':139
- '63.#.112.35':139
- '63.#.131.109':139
- '63.#.191.23':139
- '63.#.109.191':139
- '63.#.183.173':139
- '63.#.53.103':139
- '63.#.207.71':139
- '63.#.216.169':139
- '63.#.20.247':139
- '63.#.23.109':139
- '63.#.79.21':139
- '63.#.84.234':139
- '63.#.54.205':139
- '63.#.125.47':139
- '63.#.153.60':139
- '63.#.12.180':139
- '63.#.122.185':139
- '63.#.96.50':139
- '63.#.45.69':139
- '63.#.123.1':139
- '63.#.125.47':445
- '63.#.153.60':445
- '63.#.47.57':445
- '63.#.122.88':445
- '63.#.57.25':445
- '63.#.45.69':445
- '63.#.123.1':445
- '63.#.84.234':445
- '63.#.54.205':445
- '63.#.79.21':445
- '63.#.36.111':445
- '63.#.106.121':139
- '63.#.23.122':445
- '63.#.205.17':139
- '63.#.50.53':139
- '63.#.1.47':139
- '63.#.160.216':445
- '63.#.24.194':445
- '63.#.59.19':445
- '63.#.173.142':445
- '63.#.72.63':445
- '63.#.47.57':139
- '63.#.75.235':139
- '63.#.209.75':139
- '63.#.128.229':139
- '63.#.61.97':139
- '63.#.59.180':139
- '63.#.107.116':445
- '63.#.92.95':445
- '63.#.23.135':445
- '63.#.42.203':139
- '63.#.216.38':445
- '63.#.227.115':139
- '63.#.107.116':139
- '63.#.92.95':139
- '63.#.23.135':139
- '63.#.240.251':445
- '63.#.216.38':139
- '63.#.121.34':139
- '63.#.216.143':139
- '63.#.35.177':139
- '63.#.133.81':139
- '63.#.64.133':139
- '63.#.72.63':139
- '63.#.59.19':139
- '63.#.173.142':139
- '63.#.42.203':445
- '63.#.23.122':139
- '63.#.122.88':139
- '63.#.57.25':139
- '63.#.36.111':139
- '63.#.160.216':139
- '63.#.24.194':139
- '63.#.209.75':445
- '63.#.121.34':445
- '63.#.216.143':445
- '63.#.35.177':445
- '63.#.133.81':445
- '63.#.64.133':445
- '63.#.128.229':445
- '63.#.75.235':445
- '63.#.59.180':445
- '63.#.227.115':445
- '63.#.61.97':445
- '63.#.198.122':139
- '63.#.110.233':139
- '63.#.55.189':139
- '63.#.216.166':139
- '63.#.57.99':139
- '63.#.145.168':139
- '63.#.62.173':139
- '63.#.168.214':139
- '63.#.163.7':139
- '63.#.132.0':139
- '63.#.64.36':139
- '63.#.38.76':445
- '63.#.62.73':445
- '63.#.249.82':445
- '63.#.239.176':445
- '63.#.68.181':445
- '63.#.7.221':139
- '63.#.241.7':139
- '63.#.220.33':139
- '63.#.90.96':445
- '63.#.46.109':445
- '63.#.81.188':139
- '63.#.248.81':139
- '63.#.189.22':139
- '63.#.151.161':139
- '63.#.22.151':139
- '63.#.236.134':139
- '63.#.11.41':139
- '63.#.135.23':139
- '63.#.125.46':139
- '63.#.139.158':139
- '63.#.8.145':139
- '63.#.58.200':139
- '63.#.113.89':139
- '63.#.135.152':139
- '63.#.161.228':139
- '63.#.7.0':139
- '63.#.121.81':139
- '63.#.86.244':139
- '63.#.96.150':139
- '63.#.245.79':139
- '63.#.242.245':139
- '63.#.104.240':445
- '63.#.1.47':445
- '63.#.205.17':445
- '63.#.53.103':445
- '63.#.131.109':445
- '63.#.183.173':445
- '63.#.182.84':139
- '63.#.20.183':139
- '63.#.85.106':139
- '63.#.106.121':445
- '63.#.50.53':445
- '63.#.35.131':445
- '63.#.23.109':445
- '63.#.191.23':445
- '63.#.122.185':445
- '63.#.96.50':445
- '63.#.12.180':445
- '63.#.207.71':445
- '63.#.20.247':445
- '63.#.216.169':445
- '63.#.109.191':445
- '63.#.112.35':445
- '63.#.182.84':445
- '63.#.20.183':445
- '63.#.85.106':445
- '63.#.90.96':139
- '63.#.46.109':139
- '63.#.108.194':445
- '63.#.213.108':445
- '63.#.194.90':445
- '63.#.130.20':445
- '63.#.43.109':445
- '63.#.62.73':139
- '63.#.108.194':139
- '63.#.213.108':139
- '63.#.194.90':139
- '63.#.130.20':139
- '63.#.43.109':139
- '63.#.249.82':139
- '63.#.38.76':139
- '63.#.68.181':139
- '63.#.104.240':139
- '63.#.239.176':139
- '63.#.19.99':445
- '63.#.69.19':445
- '63.#.98.140':445
- '63.#.94.207':445
- '63.#.64.216':445
- '63.#.119.160':445
- '63.#.110.230':445
- '63.#.193.98':445
- '63.#.46.69':445
- '63.#.140.174':445
- '63.#.168.167':445
- '63.#.203.89':139
- '63.#.197.203':139
- '63.#.137.217':139
- '63.#.111.130':139
- '63.#.231.117':139
- '63.#.55.95':445
- '63.#.225.159':445
- '63.#.5.142':139
- '63.#.135.173':139
- '63.#.147.125':139
- '63.#.64.140':445
- '63.#.159.64':445
- '63.#.139.222':445
- '63.#.163.138':445
- '63.#.74.97':445
- '63.#.3.244':445
- '63.#.246.28':445
- '63.#.162.80':445
- '63.#.22.159':445
- '63.#.81.23':445
- '63.#.24.223':445
- '63.#.147.232':445
- '63.#.84.148':445
- '63.#.141.71':445
- '63.#.92.146':445
- '63.#.113.122':445
- '63.#.127.3':445
- '63.#.223.126':445
- '63.#.29.135':445
- '63.#.93.122':445
- '63.#.9.150':445
- '63.#.99.69':139
- '63.#.113.122':139
- '63.#.141.71':139
- '63.#.92.146':139
- '63.#.119.160':139
- '63.#.110.230':139
- '63.#.9.150':139
- '63.#.29.135':139
- '63.#.93.122':139
- '63.#.147.232':139
- '63.#.84.148':139
- '63.#.193.98':139
- '63.#.94.207':139
- '63.#.64.216':139
- '63.#.168.167':139
- '63.#.225.159':139
- '63.#.55.95':139
- '63.#.46.69':139
- '63.#.140.174':139
- '63.#.69.19':139
- '63.#.98.140':139
- '63.#.19.99':139
- '63.#.98.203':139
- '63.#.201.184':139
- '63.#.158.202':139
- '63.#.3.244':139
- '63.#.246.28':139
- '63.#.24.173':139
- '63.#.14.9':139
- '63.#.173.3':139
- '63.#.62.201':139
- '63.#.59.216':139
- '63.#.162.80':139
- '63.#.163.138':139
- '63.#.74.97':139
- '63.#.24.223':139
- '63.#.127.3':139
- '63.#.223.126':139
- '63.#.22.159':139
- '63.#.81.23':139
- '63.#.159.64':139
- '63.#.139.222':139
- '63.#.64.140':139
- '63.#.16.70':445
- '63.#.64.137':445
- '63.#.240.251':139
- '63.#.15.169':139
- '63.#.123.172':139
- '63.#.172.128':445
- '63.#.161.172':445
- '63.#.67.10':445
- '63.#.80.253':445
- '63.#.66.80':445
- '63.#.7.171':139
- '63.#.178.178':139
- '63.#.27.178':139
- '63.#.155.55':139
- '63.#.230.223':139
- '63.#.170.184':139
- '63.#.94.173':139
- '63.#.210.94':139
- '63.#.6.179':139
- '63.#.84.27':139
- '63.#.196.121':139
- '63.#.27.178':445
- '63.#.6.179':445
- '63.#.84.27':445
- '63.#.170.184':445
- '63.#.178.178':445
- '63.#.15.169':445
- '63.#.123.172':445
- '63.#.7.171':445
- '63.#.94.173':445
- '63.#.210.94':445
- '63.#.196.121':445
- '63.#.69.251':445
- '63.#.101.137':445
- '63.#.62.226':445
- '63.#.231.243':445
- '63.#.47.116':445
- '63.#.230.223':445
- '63.#.155.55':445
- '63.#.24.55':445
- '63.#.181.114':445
- '63.#.152.120':445
- '63.#.24.55':139
- '63.#.135.173':445
- '63.#.147.125':445
- '63.#.197.203':445
- '63.#.137.217':445
- '63.#.203.89':445
- '63.#.98.140':9988
- '63.#.193.98':9988
- '63.#.64.216':9988
- '63.#.5.142':445
- '63.#.94.207':9988
- '63.#.231.117':445
- '63.#.62.201':445
- '63.#.59.216':445
- '63.#.201.184':445
- '63.#.158.202':445
- '63.#.98.203':445
- '63.#.99.69':445
- '63.#.111.130':445
- '63.#.14.9':445
- '63.#.173.3':445
- '63.#.24.173':445
- '63.#.231.243':139
- '63.#.47.116':139
- '63.#.161.172':139
- '63.#.67.10':139
- '63.#.172.128':139
- '63.#.181.114':139
- '63.#.152.120':139
- '63.#.101.137':139
- '63.#.62.226':139
- '63.#.69.251':139
- '63.#.66.80':139
- '63.#.159.64':9988
- '63.#.22.159':9988
- '63.#.139.222':9988
- '63.#.110.230':9988
- '63.#.29.135':9988
- '63.#.64.137':139
- '63.#.80.253':139
- '63.#.16.70':139
- '63.#.158.202':9988
- '63.#.98.203':9988