Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER397e.dir00\svchost.exe.mdmp 16325836412032340
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %TEMP%\WER397e.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '80.##.152.144':445
- '80.##.63.117':445
- '80.##.129.54':445
- '80.##.144.128':445
- '80.#3.5.162':445
- '80.#3.47.71':139
- '80.##.246.78':139
- '80.##.221.63':445
- '80.##.41.237':139
- '80.##.54.166':445
- '80.##.40.233':445
- '80.##.85.205':445
- '80.##.68.101':445
- '80.##.52.161':445
- '80.#3.62.46':445
- '80.#3.93.26':445
- '80.##.166.92':445
- '80.#3.4.57':445
- '80.##.25.152':445
- '80.#3.101.5':139
- '80.##.173.215':139
- '80.##.222.173':139
- '80.##.227.224':139
- '80.##.49.208':139
- '80.##.191.103':139
- '80.##.107.188':139
- '80.##.236.190':139
- '80.#3.81.30':139
- '80.##.116.81':139
- '80.#3.46.58':139
- '80.##.231.102':139
- '80.##.15.231':139
- '80.##.35.201':139
- '80.#3.1.173':139
- '80.##.150.131':139
- '80.##.69.172':139
- '80.##.72.227':139
- '80.##.152.174':139
- '80.##.84.101':139
- '80.##.40.164':445
- '80.##.151.40':445
- '80.##.39.204':445
- '80.##.151.71':445
- '80.##.36.151':445
- '80.##.84.118':445
- '80.##.118.45':445
- '80.##.230.43':445
- '80.#3.7.210':445
- '80.##.204.165':445
- '80.#3.5.162':139
- '80.##.221.63':139
- '80.##.152.144':139
- '80.##.63.117':139
- '80.##.182.199':445
- '80.#3.12.46':445
- '80.##.139.230':445
- '80.##.223.170':445
- '80.##.217.223':445
- '80.##.174.195':445
- '80.##.84.227':445
- '80.#3.28.84':445
- '80.##.180.196':445
- '80.##.86.168':445
- '80.#3.13.53':445
- '80.##.193.146':445
- '80.#3.153.1':445
- '80.##.125.168':445
- '80.##.27.206':445
- '80.##.55.144':445
- '80.##.95.137':445
- '80.##.16.177':445
- '80.##.138.174':445
- '80.##.10.139':445
- '80.##.97.228':445
- '80.##.30.239':445
- '80.#3.83.43':445
- '80.##.141.168':445
- '80.##.167.81':445
- '80.##.124.237':139
- '80.#3.54.64':445
- '80.##.201.51':445
- '80.##.236.190':445
- '80.##.124.237':445
- '80.#3.128.7':445
- '80.#3.74.51':445
- '80.##.200.20':445
- '80.##.218.161':445
- '80.#3.51.89':445
- '80.##.107.188':445
- '80.##.227.224':445
- '80.##.49.208':445
- '80.##.72.227':445
- '80.#3.46.58':445
- '80.##.173.215':445
- '80.#3.81.30':445
- '80.##.116.81':445
- '80.##.222.173':445
- '80.##.191.103':445
- '80.##.238.223':445
- '80.##.161.181':445
- '80.##.121.119':445
- '80.##.97.160':445
- '80.#3.36.9':445
- '80.#3.15.85':445
- '80.##.217.149':445
- '80.##.161.236':445
- '80.##.28.165':445
- '80.##.77.143':445
- '80.#3.0.213':445
- '80.##.191.134':445
- '80.##.63.122':445
- '80.##.108.237':445
- '80.##.134.120':445
- '80.##.16.190':445
- '80.##.161.36':445
- '80.##.28.243':445
- '80.##.249.198':445
- '80.#3.36.32':445
- '80.##.16.190':139
- '80.##.249.198':139
- '80.##.191.134':139
- '80.##.63.122':139
- '80.#3.36.32':139
- '80.#3.0.213':139
- '80.##.97.160':139
- '80.##.161.36':139
- '80.##.28.243':139
- '80.##.134.120':139
- '80.#3.128.7':139
- '80.##.218.161':139
- '80.#3.54.64':139
- '80.##.201.51':139
- '80.#3.51.89':139
- '80.##.238.223':139
- '80.##.108.237':139
- '80.#3.74.51':139
- '80.##.200.20':139
- '80.#3.36.9':139
- '80.#3.1.173':445
- '80.##.231.102':445
- '80.#3.101.5':445
- '80.##.35.201':445
- '80.##.15.231':445
- '80.##.84.101':445
- '80.##.69.172':445
- '80.##.150.131':445
- '80.##.152.174':445
- '80.##.246.78':445
- '80.#3.15.85':139
- '80.##.28.165':139
- '80.##.161.181':139
- '80.##.121.119':139
- '80.##.77.143':139
- '80.##.41.237':445
- '80.#3.47.71':445
- '80.##.217.149':139
- '80.##.161.236':139
- '80.##.144.128':139
- '80.#3.25.27':445
- '80.##.88.126':445
- '80.#3.33.79':139
- '80.##.201.171':139
- '80.##.86.154':445
- '80.##.180.18':445
- '80.#3.72.5':445
- '80.#3.66.88':445
- '80.##.72.215':445
- '80.#3.94.49':139
- '80.##.235.50':139
- '80.#3.32.20':139
- '80.##.37.198':139
- '80.##.18.196':139
- '80.##.106.67':139
- '80.##.52.120':139
- '80.##.38.237':139
- '80.##.55.117':139
- '80.##.89.135':139
- '80.#3.0.23':445
- '80.##.206.195':445
- '80.##.13.201':445
- '80.##.118.107':445
- '80.#3.134.5':445
- '80.##.135.35':445
- '80.#3.44.41':445
- '80.##.202.116':445
- '80.##.39.135':445
- '80.#3.98.39':445
- '80.#3.5.76':445
- '80.#3.84.90':445
- '80.#3.56.5':445
- '80.##.124.246':445
- '80.##.175.93':445
- '80.#3.92.27':445
- '80.##.204.89':445
- '80.##.219.12':445
- '80.##.143.92':445
- '80.##.129.143':445
- '80.#3.92.27':139
- '80.##.143.92':139
- '80.#3.84.90':139
- '80.#3.56.5':139
- '80.##.129.143':139
- '80.#3.5.76':139
- '80.##.118.107':139
- '80.##.204.89':139
- '80.##.219.12':139
- '80.##.175.93':139
- '80.##.86.154':139
- '80.#3.66.88':139
- '80.##.88.126':139
- '80.##.72.215':139
- '80.#3.25.27':139
- '80.#3.0.23':139
- '80.##.124.246':139
- '80.##.180.18':139
- '80.#3.72.5':139
- '80.#3.134.5':139
- '80.##.132.89':139
- '80.##.79.137':139
- '80.##.153.96':139
- '80.#3.4.222':139
- '80.##.170.79':139
- '80.##.244.131':139
- '80.#3.247.9':139
- '80.#3.84.39':139
- '80.##.157.85':139
- '80.#3.80.30':139
- '80.##.135.35':139
- '80.##.39.135':139
- '80.##.206.195':139
- '80.##.13.201':139
- '80.#3.98.39':139
- '80.##.42.129':139
- '80.#3.30.42':139
- '80.#3.44.41':139
- '80.##.202.116':139
- '80.##.42.129':445
- '80.##.16.177':139
- '80.##.97.228':139
- '80.##.10.139':139
- '80.##.95.137':139
- '80.##.141.168':139
- '80.#3.83.43':139
- '80.##.55.144':139
- '80.##.167.81':139
- '80.##.30.239':139
- '80.##.138.174':139
- '80.##.151.40':139
- '80.##.36.151':139
- '80.##.151.71':139
- '80.##.40.164':139
- '80.##.230.43':139
- '80.##.118.45':139
- '80.##.174.195':139
- '80.#3.7.210':139
- '80.##.84.118':139
- '80.##.180.196':139
- '80.#3.62.46':139
- '80.#3.4.57':139
- '80.##.40.233':139
- '80.##.85.205':139
- '80.##.25.152':139
- '80.##.54.166':139
- '80.##.129.54':139
- '80.#3.93.26':139
- '80.##.166.92':139
- '80.##.52.161':139
- '80.#3.28.84':139
- '80.#3.13.53':139
- '80.##.86.168':139
- '80.##.84.227':139
- '80.##.125.168':139
- '80.#3.153.1':139
- '80.##.68.101':139
- '80.##.27.206':139
- '80.##.193.146':139
- '80.##.18.196':445
- '80.##.235.50':445
- '80.#3.247.9':445
- '80.##.37.198':445
- '80.#3.32.20':445
- '80.##.89.135':445
- '80.##.52.120':445
- '80.##.106.67':445
- '80.##.55.117':445
- '80.##.244.131':445
- '80.##.153.96':445
- '80.#3.4.222':445
- '80.#3.30.42':445
- '80.#3.80.30':445
- '80.##.132.89':445
- '80.#3.84.39':445
- '80.##.157.85':445
- '80.##.79.137':445
- '80.##.170.79':445
- '80.##.38.237':445
- '80.##.182.199':139
- '80.##.223.170':139
- '80.##.89.135':9988
- '80.##.52.120':9988
- '80.##.217.223':139
- '80.##.204.165':139
- '80.##.39.204':139
- '80.#3.12.46':139
- '80.##.139.230':139
- '80.##.170.79':9988
- '80.##.201.171':445
- '80.##.124.246':9988
- '80.#3.94.49':445
- '80.#3.33.79':445
- '80.##.72.215':9988
- '80.#3.66.88':9988
- '80.##.79.137':9988
- '80.##.206.195':9988
- '80.##.86.154':9988