Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '61.##.175.192':139
- '61.##.168.174':139
- '61.##.113.127':139
- '61.##.161.197':139
- '61.##.244.161':139
- '61.##.165.170':139
- '61.##.78.165':139
- '61.##.127.159':139
- '61.##.188.219':139
- '61.##.95.204':139
- '61.#1.62.58':445
- '61.##.105.222':445
- '61.##.180.95':445
- '61.##.114.142':445
- '61.##.51.161':445
- '61.##.159.103':445
- '61.##.80.106':445
- '61.##.65.214':445
- '61.#1.0.41':445
- '61.##.150.27':445
- '61.##.201.78':139
- '61.##.34.161':139
- '61.##.138.25':139
- '61.#1.87.51':139
- '61.##.201.78':445
- '61.##.114.65':139
- '61.##.69.188':139
- '61.#1.2.14':139
- '61.##.62.171':139
- '61.##.101.216':139
- '61.##.255.145':139
- '61.##.175.192':445
- '61.##.168.174':445
- '61.##.113.127':445
- '61.##.161.197':445
- '61.##.244.161':445
- '61.##.165.170':445
- '61.##.78.165':445
- '61.##.127.159':445
- '61.##.188.219':445
- '61.##.95.204':445
- '61.##.192.247':445
- '61.##.104.254':445
- '61.##.117.110':445
- '61.##.80.106':139
- '61.##.158.47':445
- '61.#1.1.136':445
- '61.##.29.239':445
- '61.##.135.161':445
- '61.##.245.183':445
- '61.##.160.245':445
- '61.##.180.95':139
- '61.#1.62.58':139
- '61.##.51.161':139
- '61.##.197.151':139
- '61.##.114.142':139
- '61.##.65.214':139
- '61.##.159.103':139
- '61.##.150.27':139
- '61.##.105.222':139
- '61.#1.0.41':139
- '61.##.178.115':445
- '61.##.226.41':445
- '61.##.34.167':445
- '61.##.143.246':445
- '61.##.110.29':445
- '61.##.87.110':445
- '61.#1.80.14':445
- '61.##.197.151':445
- '61.#1.14.67':445
- '61.##.236.239':445
- '61.##.150.105':445
- '61.##.144.78':445
- '61.##.161.100':445
- '61.##.154.63':445
- '61.##.207.114':445
- '61.##.100.206':445
- '61.##.208.20':445
- '61.##.64.120':445
- '61.##.225.252':445
- '61.#1.18.34':445
- '61.##.117.16':445
- '61.#1.62.69':445
- '61.##.173.190':445
- '61.#1.0.17':445
- '61.##.171.132':445
- '61.##.143.214':445
- '61.##.208.116':445
- '61.##.116.94':445
- '61.#1.64.89':445
- '61.##.161.42':445
- '61.#1.9.152':445
- '61.#1.9.191':445
- '61.##.60.225':445
- '61.##.152.68':445
- '61.#1.9.233':445
- '61.##.239.236':445
- '61.##.125.117':445
- '61.##.70.125':445
- '61.##.235.206':445
- '61.##.26.131':445
- '61.##.186.37':445
- '61.#1.62.86':445
- '61.#1.197.0':139
- '61.##.30.207':139
- '61.#1.9.201':139
- '61.##.45.199':139
- '61.##.47.167':139
- '61.#1.5.4':139
- '61.##.108.133':139
- '61.##.164.180':139
- '61.#1.49.31':139
- '61.##.155.48':139
- '61.##.117.116':445
- '61.#1.38.22':445
- '61.##.231.129':445
- '61.#1.53.92':445
- '61.#1.3.251':445
- '61.##.81.223':445
- '61.##.132.251':139
- '61.##.223.176':445
- '61.##.235.27':445
- '61.##.176.140':445
- '61.#1.0.17':139
- '61.#1.62.69':139
- '61.##.143.214':139
- '61.##.70.125':139
- '61.##.171.132':139
- '61.#1.64.89':139
- '61.##.208.116':139
- '61.#1.9.152':139
- '61.##.173.190':139
- '61.##.161.42':139
- '61.##.152.68':139
- '61.#1.9.191':139
- '61.##.239.236':139
- '61.##.51.199':139
- '61.#1.9.233':139
- '61.##.235.206':139
- '61.##.125.117':139
- '61.##.186.37':139
- '61.##.60.225':139
- '61.##.26.131':139
- '61.##.116.94':139
- '61.##.138.25':445
- '61.##.101.216':445
- '61.##.34.161':445
- '61.##.114.65':445
- '61.#1.87.51':445
- '61.#1.2.14':445
- '61.##.51.199':445
- '61.##.69.188':445
- '61.##.255.145':445
- '61.##.62.171':445
- '61.##.231.129':139
- '61.##.117.116':139
- '61.#1.3.251':139
- '61.#1.62.86':139
- '61.#1.53.92':139
- '61.##.223.176':139
- '61.##.81.223':139
- '61.##.176.140':139
- '61.#1.38.22':139
- '61.##.235.27':139
- '61.#1.95.72':445
- '61.##.36.242':445
- '61.#1.75.2':445
- '61.##.179.249':445
- '61.##.142.199':445
- '61.##.130.162':445
- '61.##.128.130':445
- '61.##.95.119':445
- '61.##.17.234':445
- '61.##.71.110':445
- '61.#1.72.36':139
- '61.#1.9.100':139
- '61.#1.55.9':139
- '61.##.89.130':139
- '61.#1.70.74':139
- '61.##.195.209':139
- '61.##.252.83':139
- '61.##.178.124':139
- '61.##.193.163':139
- '61.##.38.203':139
- '61.##.231.128':445
- '61.##.185.136':445
- '61.##.120.136':445
- '61.##.169.243':445
- '61.##.75.215':445
- '61.#1.58.76':445
- '61.##.195.84':445
- '61.##.104.251':445
- '61.#1.5.110':445
- '61.##.211.66':445
- '61.##.65.249':445
- '61.##.194.49':445
- '61.##.59.173':445
- '61.#1.93.54':445
- '61.##.102.232':445
- '61.##.14.221':445
- '61.##.55.229':445
- '61.##.215.99':445
- '61.##.146.102':445
- '61.#1.8.175':445
- '61.##.102.193':445
- '61.#1.93.54':139
- '61.##.194.49':139
- '61.##.14.221':139
- '61.##.231.128':139
- '61.##.102.232':139
- '61.##.146.102':139
- '61.##.55.229':139
- '61.##.102.193':139
- '61.##.59.173':139
- '61.#1.8.175':139
- '61.##.36.242':139
- '61.#1.75.2':139
- '61.##.142.199':139
- '61.##.179.249':139
- '61.#1.95.72':139
- '61.##.130.162':139
- '61.##.128.130':139
- '61.##.95.119':139
- '61.##.17.234':139
- '61.##.71.110':139
- '61.##.215.99':139
- '61.##.242.117':139
- '61.##.192.248':139
- '61.#1.36.19':139
- '61.#1.31.82':139
- '61.##.103.58':139
- '61.##.56.221':139
- '61.#1.43.57':139
- '61.#1.1.41':139
- '61.##.217.141':139
- '61.##.151.37':139
- '61.##.185.136':139
- '61.##.120.136':139
- '61.##.169.243':139
- '61.##.75.215':139
- '61.#1.58.76':139
- '61.##.195.84':139
- '61.##.104.251':139
- '61.#1.5.110':139
- '61.##.211.66':139
- '61.##.65.249':139
- '61.##.117.110':139
- '61.##.192.247':139
- '61.##.158.47':139
- '61.#1.235.4':445
- '61.##.43.167':445
- '61.##.135.161':139
- '61.#1.1.136':139
- '61.##.160.245':139
- '61.##.104.254':139
- '61.##.245.183':139
- '61.#1.65.15':139
- '61.#1.4.65':139
- '61.##.90.223':139
- '61.##.192.248':9988
- '61.##.151.37':9988
- '61.#1.65.15':445
- '61.#1.4.65':445
- '61.##.90.223':445
- '61.#1.235.4':139
- '61.##.43.167':139
- '61.##.29.239':139
- '61.##.143.246':139
- '61.##.226.41':139
- '61.##.87.110':139
- '61.##.64.120':139
- '61.##.110.29':139
- '61.#1.14.67':139
- '61.#1.80.14':139
- '61.##.150.105':139
- '61.##.34.167':139
- '61.##.236.239':139
- '61.##.154.63':139
- '61.##.144.78':139
- '61.##.100.206':139
- '61.##.178.115':139
- '61.##.207.114':139
- '61.##.225.252':139
- '61.##.208.20':139
- '61.##.117.16':139
- '61.##.161.100':139
- '61.#1.18.34':139
- '61.#1.72.36':445
- '61.#1.9.100':445
- '61.#1.55.9':445
- '61.##.89.130':445
- '61.#1.70.74':445
- '61.##.195.209':445
- '61.##.252.83':445
- '61.##.178.124':445
- '61.##.193.163':445
- '61.##.38.203':445
- '61.##.242.117':445
- '61.##.192.248':445
- '61.#1.36.19':445
- '61.#1.31.82':445
- '61.##.103.58':445
- '61.##.56.221':445
- '61.#1.43.57':445
- '61.#1.1.41':445
- '61.##.217.141':445
- '61.##.151.37':445
- '61.#1.95.72':9988
- '61.##.185.136':9988
- '61.##.120.136':9988
- '61.#1.58.76':9988
- '61.##.146.102':9988
- '61.##.75.215':9988
- '61.##.195.84':9988
- '61.##.104.251':9988
- '61.#1.5.110':9988
- '61.##.211.66':9988
- '61.##.65.249':9988
- '61.##.95.119':9988
- '61.##.130.162':9988
- '61.##.142.199':9988
- '61.##.179.249':9988
- '61.#1.75.2':9988
- '61.#1.8.175':9988
- '61.##.102.193':9988
- '61.##.59.173':9988
- '61.##.128.130':9988
- '61.##.194.49':9988