Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER3621.dir00\svchost.exe.mdmp 16325836412031616
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#84.23.215':139
- '21#.#84.1.99':139
- '21#.#84.139.56':445
- '21#.#84.175.142':139
- '21#.#84.118.1':139
- '21#.#84.82.43':139
- '21#.#84.154.167':139
- '21#.#84.52.127':139
- '21#.#84.66.137':445
- '21#.#84.25.164':445
- '21#.#84.1.130':445
- '21#.#84.76.185':445
- '21#.#84.177.233':445
- '21#.#84.27.110':445
- '21#.#84.181.68':445
- '21#.#84.30.54':445
- '21#.#84.44.166':139
- '21#.#84.175.142':445
- '21#.#84.23.215':445
- '21#.#84.65.247':139
- '21#.#84.163.117':139
- '21#.#84.52.127':445
- '21#.#84.118.1':445
- '21#.#84.154.167':445
- '21#.#84.1.99':445
- '21#.#84.197.198':139
- '21#.#84.56.197':139
- '21#.#84.147.142':139
- '21#.#84.198.193':139
- '21#.#84.237.3':139
- '21#.#84.70.200':139
- '21#.#84.0.144':139
- '21#.#84.84.62':139
- '21#.#84.184.167':445
- '21#.#84.234.93':445
- '21#.#84.104.227':445
- '21#.#84.27.110':139
- '21#.#84.139.56':139
- '21#.#84.141.161':445
- '21#.#84.172.195':445
- '21#.#84.67.196':445
- '21#.#84.40.67':445
- '21#.#84.76.185':139
- '21#.#84.66.137':139
- '21#.#84.184.167':139
- '21#.#84.1.130':139
- '21#.#84.30.54':139
- '21#.#84.177.233':139
- '21#.#84.25.164':139
- '21#.#84.181.68':139
- '21#.#84.20.53':445
- '21#.#84.139.200':445
- '21#.#84.222.250':445
- '21#.#84.41.181':445
- '21#.#84.67.177':445
- '21#.#84.32.70':445
- '21#.#84.11.60':445
- '21#.#84.233.74':445
- '21#.#84.18.127':445
- '21#.#84.10.73':445
- '21#.#84.12.153':445
- '21#.#84.165.53':445
- '21#.#84.87.20':445
- '21#.#84.21.98':445
- '21#.#84.160.53':445
- '21#.#84.88.44':445
- '21#.#84.247.247':445
- '21#.#84.216.32':139
- '21#.#84.109.128':445
- '21#.#84.54.66':139
- '21#.#84.32.181':139
- '21#.#84.39.218':445
- '21#.#84.201.74':445
- '21#.#84.114.219':445
- '21#.#84.33.202':445
- '21#.#84.80.184':139
- '21#.#84.16.200':139
- '21#.#84.113.221':139
- '21#.#84.70.113':139
- '21#.#84.246.224':139
- '21#.#84.16.230':139
- '21#.#84.191.195':139
- '21#.#84.138.149':139
- '21#.#84.69.246':445
- '21#.#84.185.218':445
- '21#.#84.162.228':445
- '21#.#84.101.12':445
- '21#.#84.254.100':445
- '21#.#84.28.107':445
- '21#.#84.221.218':445
- '21#.#84.228.232':445
- '21#.#84.50.229':445
- '21#.#84.56.69':445
- '21#.#84.0.60':445
- '21#.#84.30.87':445
- '21#.#84.27.176':445
- '21#.#84.173.138':445
- '21#.#84.12.174':445
- '21#.#84.150.82':445
- '21#.#84.138.89':445
- '21#.#84.221.218':139
- '21#.#84.65.247':445
- '21#.#84.163.117':445
- '21#.#84.237.3':445
- '21#.#84.70.200':445
- '21#.#84.33.202':139
- '21#.#84.39.218':139
- '21#.#84.109.128':139
- '21#.#84.114.219':139
- '21#.#84.198.193':445
- '21#.#84.147.142':445
- '21#.#84.44.166':445
- '21#.#84.82.43':445
- '21#.#84.84.62':445
- '21#.#84.0.144':445
- '21#.#84.197.198':445
- '21#.#84.56.197':445
- '21#.#84.201.74':139
- '21#.#84.254.100':139
- '21#.#84.185.218':139
- '21#.#84.12.174':139
- '21#.#84.101.12':139
- '21#.#84.50.229':139
- '21#.#84.28.107':139
- '21#.#84.162.228':139
- '21#.#84.228.232':139
- '21#.#84.30.87':139
- '21#.#84.56.69':139
- '21#.#84.69.246':139
- '21#.#84.27.176':139
- '21#.#84.138.89':139
- '21#.#84.173.138':139
- '21#.#84.0.60':139
- '21#.#84.150.82':139
- '21#.#84.94.73':139
- '21#.#84.246.6':139
- '21#.#84.74.250':139
- '21#.#84.76.122':139
- '21#.#84.73.167':139
- '21#.#84.69.185':139
- '21#.#84.35.139':139
- '21#.#84.216.35':139
- '21#.#84.29.65':139
- '21#.#84.106.110':139
- '21#.#84.110.156':139
- '21#.#84.200.73':139
- '21#.#84.44.12':139
- '21#.#84.43.77':139
- '21#.#84.163.168':139
- '21#.#84.197.35':139
- '21#.#84.61.220':139
- '21#.#84.110.38':445
- '21#.#84.90.228':445
- '21#.#84.114.220':445
- '21#.#84.254.215':445
- '21#.#84.65.216':445
- '21#.#84.125.30':445
- '21#.#84.149.193':445
- '21#.#84.215.158':445
- '21#.#84.135.33':445
- '21#.#84.29.68':445
- '21#.#84.198.184':445
- '21#.#84.113.95':445
- '21#.#84.131.56':445
- '21#.#84.106.131':445
- '21#.#84.192.20':445
- '21#.#84.172.48':445
- '21#.#84.18.252':139
- '21#.#84.110.38':139
- '21#.#84.90.228':139
- '21#.#84.114.220':139
- '21#.#84.254.215':139
- '21#.#84.65.216':139
- '21#.#84.125.30':139
- '21#.#84.149.193':139
- '21#.#84.215.158':139
- '21#.#84.29.68':139
- '21#.#84.192.20':139
- '21#.#84.198.184':139
- '21#.#84.113.95':139
- '21#.#84.131.56':139
- '21#.#84.106.131':139
- '21#.#84.135.33':139
- '21#.#84.172.48':139
- '21#.#84.32.217':139
- '21#.#84.141.199':139
- '21#.#84.24.242':139
- '21#.#84.108.113':139
- '21#.#84.124.153':139
- '21#.#84.22.93':139
- '21#.#84.146.21':139
- '21#.#84.40.19':139
- '21#.#84.47.55':139
- '21#.#84.171.186':139
- '21#.#84.102.43':139
- '21#.#84.222.152':139
- '21#.#84.56.222':139
- '21#.#84.63.244':139
- '21#.#84.62.119':139
- '21#.#84.193.102':139
- '21#.#84.214.180':139
- '21#.#84.234.93':139
- '21#.#84.104.227':139
- '21#.#84.94.73':9988
- '21#.#84.61.220':9988
- '21#.#84.141.161':139
- '21#.#84.172.195':139
- '21#.#84.67.196':139
- '21#.#84.40.67':139
- '21#.#84.56.222':9988
- '21#.#84.135.33':9988
- '21#.#84.61.220':445
- '21#.#84.192.20':9988
- '21#.#84.197.35':9988
- '21#.#84.76.122':9988
- '21#.#84.32.217':9988
- '21#.#84.141.199':9988
- '21#.#84.20.53':139
- '21#.#84.139.200':139
- '21#.#84.222.250':139
- '21#.#84.41.181':139
- '21#.#84.67.177':139
- '21#.#84.32.70':139
- '21#.#84.11.60':139
- '21#.#84.233.74':139
- '21#.#84.18.127':139
- '21#.#84.10.73':139
- '21#.#84.12.153':139
- '21#.#84.165.53':139
- '21#.#84.87.20':139
- '21#.#84.21.98':139
- '21#.#84.160.53':139
- '21#.#84.88.44':139
- '21#.#84.247.247':139
- '21#.#84.69.185':445
- '21#.#84.124.153':445
- '21#.#84.141.199':445
- '21#.#84.62.119':445
- '21#.#84.108.113':445
- '21#.#84.47.55':445
- '21#.#84.22.93':445
- '21#.#84.24.242':445
- '21#.#84.40.19':445
- '21#.#84.56.222':445
- '21#.#84.171.186':445
- '21#.#84.32.217':445
- '21#.#84.222.152':445
- '21#.#84.214.180':445
- '21#.#84.63.244':445
- '21#.#84.102.43':445
- '21#.#84.193.102':445
- '21#.#84.146.21':445
- '21#.#84.76.122':445
- '21#.#84.94.73':445
- '21#.#84.43.77':445
- '21#.#84.74.250':445
- '21#.#84.216.35':445
- '21#.#84.73.167':445
- '21#.#84.246.6':445
- '21#.#84.35.139':445
- '21#.#84.200.73':445
- '21#.#84.29.65':445
- '21#.#84.18.252':445
- '21#.#84.110.156':445
- '21#.#84.197.35':445
- '21#.#84.44.12':445
- '21#.#84.106.110':445
- '21#.#84.163.168':445