Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WERee01.dir00\svchost.exe.mdmp 16325836412032240
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '19#.#1.147.55':445
- '19#.#1.51.147':445
- '19#.#1.49.34':445
- '19#.#1.25.126':445
- '19#.#1.170.51':445
- '19#.#1.31.148':445
- '19#.#1.84.39':445
- '19#.#1.82.170':445
- '19#.#1.209.34':445
- '19#.#1.50.120':445
- '19#.#1.166.254':445
- '19#.#1.31.18':445
- '19#.#1.217.105':445
- '19#.#1.101.94':445
- '19#.#1.233.220':445
- '19#.#1.113.135':445
- '19#.#1.212.179':445
- '19#.#1.22.37':445
- '19#.#1.31.173':445
- '19#.#1.235.245':445
- '19#.#1.178.113':445
- '19#.#1.77.31':445
- '19#.#1.2.175':445
- '19#.#1.17.181':139
- '19#.#1.75.41':139
- '19#.61.6.90':445
- '19#.#1.20.102':139
- '19#.#1.244.56':445
- '19#.#1.178.113':139
- '19#.#1.104.20':445
- '19#.#1.57.104':445
- '19#.#1.31.173':139
- '19#.#1.2.175':139
- '19#.61.6.90':139
- '19#.#1.77.31':139
- '19#.#1.235.245':139
- '19#.#1.62.55':139
- '19#.#1.31.18':139
- '19#.#1.237.233':139
- '19#.#1.48.135':139
- '19#.#1.217.105':139
- '19#.#1.101.94':139
- '19#.#1.212.179':139
- '19#.#1.50.120':139
- '19#.#1.166.254':139
- '19#.#1.158.153':9988
- '19#.#1.243.132':9988
- '19#.#1.3.226':9988
- '19#.#1.177.189':9988
- '19#.#1.129.51':9988
- '19#.#1.0.142':9988
- '19#.#1.83.39':9988
- '19#.#1.194.107':9988
- '19#.#1.90.155':9988
- '19#.#1.84.39':139
- '19#.#1.104.20':139
- '19#.#1.209.34':139
- '19#.#1.31.148':139
- '19#.#1.57.104':139
- '19#.#1.48.135':445
- '19#.#1.62.55':445
- '19#.#1.244.56':139
- '19#.#1.237.233':445
- '19#.#1.113.135':139
- '19#.#1.49.34':139
- '19#.#1.22.37':139
- '19#.#1.233.220':139
- '19#.#1.25.126':139
- '19#.#1.170.51':139
- '19#.#1.82.170':139
- '19#.#1.147.55':139
- '19#.#1.51.147':139
- '19#.#1.112.15':445
- '19#.#1.131.183':445
- '19#.#1.129.0':445
- '19#.#1.17.157':445
- '19#.#1.98.105':445
- '19#.#1.146.145':445
- '19#.#1.79.113':445
- '19#.#1.116.15':445
- '19#.#1.111.17':445
- '19#.#1.21.94':139
- '19#.#1.148.185':139
- '19#.#1.242.138':139
- '19#.#1.167.229':139
- '19#.#1.40.71':139
- '19#.#1.17.181':445
- '19#.#1.75.41':445
- '19#.#1.51.77':139
- '19#.#1.20.102':445
- '19#.#1.62.108':445
- '19#.#1.168.52':445
- '19#.#1.107.105':445
- '19#.#1.57.66':445
- '19#.#1.30.113':445
- '19#.#1.215.239':445
- '19#.#1.54.92':445
- '19#.#1.213.193':445
- '19#.#1.196.61':445
- '19#.#1.7.215':445
- '19#.#1.189.169':445
- '19#.#1.74.88':445
- '19#.#1.42.119':445
- '19#.#1.24.34':445
- '19#.#1.13.13':445
- '19#.#1.92.162':445
- '19#.#1.127.168':445
- '19#.#1.10.78':445
- '19#.#1.7.215':139
- '19#.#1.189.169':139
- '19#.#1.74.88':139
- '19#.#1.42.119':139
- '19#.#1.24.34':139
- '19#.#1.13.13':139
- '19#.#1.92.162':139
- '19#.#1.127.168':139
- '19#.#1.10.78':139
- '19#.#1.112.15':139
- '19#.#1.131.183':139
- '19#.#1.129.0':139
- '19#.#1.17.157':139
- '19#.#1.98.105':139
- '19#.#1.146.145':139
- '19#.#1.79.113':139
- '19#.#1.116.15':139
- '19#.#1.111.17':139
- '19#.#1.76.200':139
- '19#.#1.185.61':139
- '19#.61.6.5':139
- '19#.#1.107.95':139
- '19#.#1.55.167':139
- '19#.#1.138.130':139
- '19#.#1.206.46':139
- '19#.#1.4.184':139
- '19#.61.36.5':139
- '19#.#1.62.108':139
- '19#.#1.168.52':139
- '19#.#1.107.105':139
- '19#.#1.57.66':139
- '19#.#1.30.113':139
- '19#.#1.215.239':139
- '19#.#1.54.92':139
- '19#.#1.213.193':139
- '19#.#1.196.61':139
- '19#.#1.29.130':139
- '19#.#1.246.80':139
- '19#.#1.11.66':139
- '19#.#1.130.11':139
- '19#.#1.221.170':139
- '19#.#1.206.100':445
- '19#.#1.134.95':445
- '19#.#1.95.221':139
- '19#.#1.116.189':445
- '19#.#1.48.20':139
- '19#.#1.181.177':139
- '19#.#1.159.103':139
- '19#.#1.138.140':139
- '19#.#1.83.39':139
- '19#.#1.0.142':139
- '19#.#1.233.235':139
- '19#.#1.142.135':139
- '19#.#1.28.110':139
- '19#.#1.129.51':445
- '19#.#1.69.129':445
- '19#.#1.12.153':445
- '19#.#1.177.189':445
- '19#.#1.165.183':445
- '19#.#1.243.132':445
- '19#.#1.111.183':445
- '19#.61.35.5':445
- '19#.#1.127.114':445
- '19#.#1.179.97':445
- '19#.#1.46.100':445
- '19#.#1.4.233':445
- '19#.#1.29.122':445
- '19#.#1.121.197':445
- '19#.#1.158.153':445
- '19#.#1.3.226':445
- '19#.#1.174.29':445
- '19#.#1.198.69':445
- '19#.#1.3.226':139
- '19#.#1.12.153':139
- '19#.#1.4.233':139
- '19#.#1.158.153':139
- '19#.#1.177.189':139
- '19#.#1.165.183':139
- '19#.61.35.5':139
- '19#.#1.129.51':139
- '19#.#1.69.129':139
- '19#.#1.121.197':139
- '19#.#1.46.100':139
- '19#.#1.29.122':139
- '19#.#1.198.69':139
- '19#.#1.179.97':139
- '19#.#1.116.189':139
- '19#.#1.206.100':139
- '19#.#1.174.29':139
- '19#.#1.134.95':139
- '19#.#1.252.162':139
- '19#.#1.194.107':139
- '19#.#1.105.108':139
- '19#.#1.42.178':139
- '19#.#1.236.183':139
- '19#.#1.133.39':139
- '19#.#1.28.235':139
- '19#.#1.175.236':139
- '19#.#1.246.254':139
- '19#.#1.163.96':139
- '19#.#1.111.183':139
- '19#.#1.127.114':139
- '19#.#1.243.132':139
- '19#.#1.112.225':139
- '19#.#1.90.155':139
- '19#.#1.192.25':139
- '19#.#1.232.182':139
- '19#.#1.27.62':139
- '19#.#1.121.197':9988
- '19#.#1.116.189':9988
- '19#.#1.69.129':9988
- '19#.#1.111.183':9988
- '19#.#1.163.96':9988
- '19#.#1.165.183':9988
- '19#.#1.252.162':9988
- '19#.#1.46.100':9988
- '19#.#1.27.62':9988
- '19#.#1.112.225':9988
- '19#.#1.4.233':9988
- '19#.#1.179.97':9988
- '19#.#1.206.100':9988
- '19#.#1.12.153':9988
- '19#.#1.232.182':9988
- '19#.#1.174.29':9988
- '19#.61.35.5':9988
- '19#.#1.198.69':9988
- '19#.#1.138.140':9988
- '19#.#1.28.110':9988
- '19#.#1.175.236':9988
- '19#.#1.48.20':9988
- '19#.#1.130.11':9988
- '19#.#1.246.80':9988
- '19#.#1.95.221':9988
- '19#.#1.11.66':9988
- '19#.#1.221.170':9988
- '19#.#1.28.235':9988
- '19#.#1.127.114':9988
- '19#.#1.192.25':9988
- '19#.#1.105.108':9988
- '19#.#1.246.254':9988
- '19#.#1.42.178':9988
- '19#.#1.181.177':9988
- '19#.#1.133.39':9988
- '19#.#1.142.135':9988
- '19#.#1.175.236':445
- '19#.#1.246.254':445
- '19#.#1.194.107':445
- '19#.#1.236.183':445
- '19#.#1.133.39':445
- '19#.#1.138.140':445
- '19#.#1.48.20':445
- '19#.#1.28.235':445
- '19#.#1.159.103':445
- '19#.#1.232.182':445
- '19#.#1.90.155':445
- '19#.#1.163.96':445
- '19#.#1.112.225':445
- '19#.#1.27.62':445
- '19#.#1.42.178':445
- '19#.#1.252.162':445
- '19#.#1.192.25':445
- '19#.#1.105.108':445
- '19#.#1.95.221':445
- '19#.#1.236.183':9988
- '19#.#1.246.80':445
- '19#.#1.221.170':445
- '19#.#1.159.103':9988
- '19#.#1.29.130':9988
- '19#.#1.134.95':9988
- '19#.#1.233.235':9988
- '19#.#1.29.122':9988
- '19#.#1.142.135':445
- '19#.#1.28.110':445
- '19#.#1.181.177':445
- '19#.#1.83.39':445
- '19#.#1.0.142':445
- '19#.#1.130.11':445
- '19#.#1.29.130':445
- '19#.#1.233.235':445
- '19#.#1.11.66':445