Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##.125.175':445
- '72.#6.82.20':445
- '72.##.29.234':445
- '72.#6.65.74':445
- '72.##.26.168':445
- '72.##.164.167':445
- '72.##.60.230':445
- '72.##.53.138':445
- '72.##.76.175':445
- '72.##.53.143':445
- '72.##.159.44':445
- '72.#6.31.47':445
- '72.##.60.212':445
- '72.##.229.167':445
- '72.##.158.87':445
- '72.##.28.206':445
- '72.##.68.245':445
- '72.##.180.102':445
- '72.#6.89.15':445
- '72.##.110.59':445
- '72.##.144.224':445
- '72.#6.79.78':445
- '72.##.10.243':445
- '72.##.166.130':445
- '72.##.43.143':445
- '72.#6.60.7':445
- '72.##.115.112':139
- '72.##.56.128':445
- '72.##.115.232':445
- '72.##.142.163':445
- '72.#6.18.95':445
- '72.##.144.152':445
- '72.##.14.100':445
- '72.##.104.65':445
- '72.#6.1.97':445
- '72.##.131.185':445
- '72.##.42.201':445
- '72.##.128.14':445
- '72.##.131.59':445
- '72.#6.5.250':445
- '72.#6.49.26':445
- '72.#6.18.95':139
- '72.##.144.152':139
- '72.##.14.100':139
- '72.##.104.65':139
- '72.#6.1.97':139
- '72.##.131.185':139
- '72.##.42.201':139
- '72.##.128.14':139
- '72.##.131.59':139
- '72.#6.5.250':139
- '72.##.125.175':139
- '72.#6.82.20':139
- '72.##.29.234':139
- '72.#6.65.74':139
- '72.##.26.168':139
- '72.##.164.167':139
- '72.##.60.230':139
- '72.##.53.138':139
- '72.##.76.175':139
- '72.##.53.143':139
- '72.##.107.57':445
- '72.##.121.41':445
- '72.##.113.118':445
- '72.##.166.56':445
- '72.##.75.166':445
- '72.##.161.71':445
- '72.##.26.226':445
- '72.##.137.66':445
- '72.#6.2.130':445
- '72.##.152.48':445
- '72.##.144.224':139
- '72.#6.79.78':139
- '72.##.10.243':139
- '72.##.166.130':139
- '72.##.43.143':139
- '72.#6.60.7':139
- '72.##.27.102':445
- '72.##.56.128':139
- '72.##.115.232':139
- '72.##.142.163':139
- '72.##.236.241':445
- '72.##.194.149':445
- '72.##.84.160':445
- '72.##.125.199':445
- '72.##.79.140':445
- '72.##.104.112':445
- '72.##.22.202':445
- '72.##.201.177':445
- '72.#6.90.90':445
- '72.##.182.163':445
- '72.##.127.132':139
- '72.##.90.128':139
- '72.##.204.224':139
- '72.##.119.242':139
- '72.##.38.138':139
- '72.##.59.229':139
- '72.##.115.112':445
- '72.##.12.177':139
- '72.##.59.143':139
- '72.##.54.121':139
- '72.#6.3.166':445
- '72.#6.25.4':445
- '72.##.201.64':445
- '72.#6.5.132':445
- '72.##.252.123':445
- '72.##.150.114':445
- '72.##.108.79':445
- '72.#6.3.148':445
- '72.##.238.140':445
- '72.##.90.206':445
- '72.##.216.49':445
- '72.##.79.126':445
- '72.##.14.184':445
- '72.##.81.120':445
- '72.#6.73.33':445
- '72.#6.57.51':445
- '72.##.37.129':445
- '72.#6.23.64':445
- '72.##.171.102':445
- '72.##.118.162':445
- '72.##.207.148':139
- '72.##.216.49':139
- '72.##.79.126':139
- '72.##.14.184':139
- '72.##.81.120':139
- '72.#6.73.33':139
- '72.#6.57.51':139
- '72.##.37.129':139
- '72.#6.23.64':139
- '72.##.171.102':139
- '72.##.118.162':139
- '72.##.236.241':139
- '72.##.194.149':139
- '72.##.84.160':139
- '72.##.125.199':139
- '72.##.79.140':139
- '72.##.104.112':139
- '72.##.22.202':139
- '72.##.201.177':139
- '72.#6.90.90':139
- '72.##.182.163':139
- '72.##.117.231':139
- '72.##.224.52':139
- '72.##.231.160':139
- '72.##.168.160':139
- '72.##.25.135':139
- '72.##.201.102':139
- '72.#6.6.92':139
- '72.##.102.227':139
- '72.#6.28.17':139
- '72.##.228.28':139
- '72.#6.3.166':139
- '72.#6.25.4':139
- '72.##.201.64':139
- '72.#6.5.132':139
- '72.##.252.123':139
- '72.##.150.114':139
- '72.##.108.79':139
- '72.#6.3.148':139
- '72.##.238.140':139
- '72.##.90.206':139
- '72.##.68.245':139
- '72.##.28.196':445
- '72.##.81.151':445
- '72.#6.0.1':445
- '72.#6.4.136':445
- '72.##.55.250':445
- '72.##.70.251':445
- '72.##.89.175':445
- '72.##.87.163':445
- '72.##.253.231':445
- '72.##.158.242':445
- '72.#6.71.77':139
- '72.##.108.197':139
- '72.#6.55.89':139
- '72.##.143.123':139
- '72.##.100.16':139
- '72.##.62.197':139
- '72.##.250.206':139
- '72.##.248.118':139
- '72.##.152.47':139
- '72.#6.94.93':139
- '72.##.139.249':445
- '72.##.217.33':445
- '72.##.173.198':445
- '72.##.81.193':445
- '72.##.66.212':445
- '72.#6.201.4':445
- '72.#6.76.77':445
- '72.#6.63.75':445
- '72.##.165.166':445
- '72.##.74.165':445
- '72.##.203.104':445
- '72.#6.152.6':445
- '72.##.141.37':445
- '72.##.117.163':445
- '72.##.65.101':445
- '72.##.147.170':445
- '72.##.152.148':445
- '72.##.153.82':445
- '72.##.38.179':445
- '72.#6.93.69':445
- '72.#6.3.8':139
- '72.##.203.104':139
- '72.#6.152.6':139
- '72.##.141.37':139
- '72.##.117.163':139
- '72.##.65.101':139
- '72.##.147.170':139
- '72.##.152.148':139
- '72.##.153.82':139
- '72.##.38.179':139
- '72.#6.93.69':139
- '72.##.28.196':139
- '72.##.81.151':139
- '72.#6.0.1':139
- '72.##.55.250':139
- '72.#6.4.136':139
- '72.##.70.251':139
- '72.##.89.175':139
- '72.##.87.163':139
- '72.##.253.231':139
- '72.##.158.242':139
- '72.##.164.39':139
- '72.##.104.166':139
- '72.#6.68.5':139
- '72.##.175.119':139
- '72.##.90.175':139
- '72.##.160.25':139
- '72.#6.7.126':139
- '72.##.237.99':139
- '72.##.25.161':139
- '72.##.105.223':139
- '72.##.139.249':139
- '72.##.217.33':139
- '72.##.173.198':139
- '72.##.81.193':139
- '72.##.66.212':139
- '72.#6.201.4':139
- '72.#6.76.77':139
- '72.#6.63.75':139
- '72.##.165.166':139
- '72.##.74.165':139
- '72.##.139.123':445
- '72.##.254.85':445
- '72.##.152.222':445
- '72.##.205.250':445
- '72.##.10.206':445
- '72.##.162.132':445
- '72.##.27.102':139
- '72.##.178.241':445
- '72.##.93.254':445
- '72.##.241.93':445
- '72.##.152.222':139
- '72.##.139.123':139
- '72.##.10.206':139
- '72.##.165.166':9988
- '72.##.205.250':139
- '72.##.178.241':139
- '72.##.162.132':139
- '72.##.241.93':139
- '72.##.254.85':139
- '72.##.93.254':139
- '72.##.60.212':139
- '72.##.159.44':139
- '72.##.158.87':139
- '72.#6.49.26':139
- '72.##.229.167':139
- '72.##.180.102':139
- '72.##.28.206':139
- '72.##.110.59':139
- '72.#6.31.47':139
- '72.#6.89.15':139
- '72.##.107.57':139
- '72.##.121.41':139
- '72.##.113.118':139
- '72.##.166.56':139
- '72.##.75.166':139
- '72.##.161.71':139
- '72.##.26.226':139
- '72.##.137.66':139
- '72.#6.2.130':139
- '72.##.152.48':139
- '72.##.153.82':9988
- '72.#6.55.89':445
- '72.#6.71.77':445
- '72.##.100.16':445
- '72.#6.3.8':445
- '72.##.143.123':445
- '72.##.248.118':445
- '72.##.62.197':445
- '72.#6.94.93':445
- '72.##.108.197':445
- '72.##.152.47':445
- '72.##.164.39':445
- '72.##.104.166':445
- '72.#6.68.5':445
- '72.##.175.119':445
- '72.##.90.175':445
- '72.##.160.25':445
- '72.#6.7.126':445
- '72.##.237.99':445
- '72.##.25.161':445
- '72.##.105.223':445
- '72.##.147.170':9988
- '72.##.74.165':9988
- '72.#6.152.6':9988
- '72.#6.93.69':9988
- '72.##.90.175':9988
- '72.##.203.104':9988
- '72.##.152.148':9988
- '72.##.66.212':9988
- '72.##.139.249':9988
- '72.#6.63.75':9988
- '72.#6.4.136':9988
- '72.##.55.250':9988
- '72.#6.0.1':9988
- '72.##.250.206':445
- '72.##.28.196':9988
- '72.##.87.163':9988
- '72.##.89.175':9988
- '72.##.158.242':9988
- '72.##.81.151':9988
- '72.##.253.231':9988