Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##.23.169':139
- '88.##.255.128':139
- '88.##.254.115':139
- '88.##.205.125':139
- '88.##.143.186':139
- '88.##.185.82':139
- '88.##.171.18':139
- '88.#7.126.1':139
- '88.##.237.38':139
- '88.#7.54.31':139
- '88.##.252.244':139
- '88.##.30.225':139
- '88.#7.2.187':139
- '88.#7.3.103':139
- '88.##.233.94':445
- '88.##.58.214':445
- '88.#7.32.28':139
- '88.##.183.19':139
- '88.#7.23.43':139
- '88.##.28.220':139
- '88.##.83.199':139
- '88.##.143.186':445
- '88.##.254.115':445
- '88.##.205.125':445
- '88.##.183.19':445
- '88.##.252.244':445
- '88.#7.54.31':445
- '88.#7.126.1':445
- '88.##.237.38':445
- '88.##.23.169':445
- '88.##.255.128':445
- '88.#7.32.28':445
- '88.##.224.184':139
- '88.#7.3.103':445
- '88.##.124.183':139
- '88.#7.46.2':139
- '88.##.59.141':139
- '88.##.83.199':445
- '88.#7.23.43':445
- '88.##.28.220':445
- '88.##.30.225':445
- '88.#7.2.187':445
- '88.##.206.213':445
- '88.##.206.213':139
- '88.##.233.94':139
- '88.#7.89.49':139
- '88.##.14.197':139
- '88.##.158.14':139
- '88.##.32.223':445
- '88.#7.54.50':445
- '88.##.130.10':445
- '88.##.58.214':139
- '88.##.151.33':445
- '88.##.228.219':139
- '88.##.121.187':139
- '88.#7.87.86':139
- '88.##.191.196':139
- '88.#7.4.51':139
- '88.##.196.254':139
- '88.#7.7.64':139
- '88.##.251.193':139
- '88.##.180.59':139
- '88.##.175.189':139
- '88.##.169.61':139
- '88.##.180.59':445
- '88.#7.7.64':445
- '88.##.169.61':445
- '88.#7.87.86':445
- '88.##.175.189':445
- '88.##.158.14':445
- '88.#7.89.49':445
- '88.##.14.197':445
- '88.##.251.193':445
- '88.##.228.219':445
- '88.##.121.187':445
- '88.##.210.149':445
- '88.#7.24.48':445
- '88.##.185.238':445
- '88.##.124.55':445
- '88.##.17.171':445
- '88.##.196.254':445
- '88.##.191.196':445
- '88.#7.4.51':445
- '88.##.153.55':445
- '88.##.249.93':445
- '88.##.158.114':445
- '88.##.107.128':445
- '88.#7.1.34':445
- '88.##.88.234':445
- '88.#7.14.22':445
- '88.##.129.238':139
- '88.##.84.133':139
- '88.#7.23.50':445
- '88.##.13.194':445
- '88.##.73.189':445
- '88.##.65.194':445
- '88.##.239.26':445
- '88.##.58.114':445
- '88.##.181.105':445
- '88.#7.22.20':445
- '88.##.239.252':445
- '88.#7.9.128':445
- '88.##.117.196':445
- '88.#7.15.43':445
- '88.##.130.36':445
- '88.##.57.223':445
- '88.##.133.12':139
- '88.#7.31.95':139
- '88.##.153.140':139
- '88.##.30.194':139
- '88.#7.57.19':139
- '88.#7.62.84':139
- '88.##.27.221':139
- '88.##.168.20':139
- '88.#7.33.37':139
- '88.##.103.199':139
- '88.##.102.83':139
- '88.##.79.161':139
- '88.#7.117.5':139
- '88.##.65.179':139
- '88.##.65.153':139
- '88.##.54.131':139
- '88.#7.64.65':139
- '88.##.181.231':139
- '88.#7.1.24':139
- '88.#7.3.184':139
- '88.##.150.192':139
- '88.##.156.235':445
- '88.##.156.235':139
- '88.#7.22.20':139
- '88.##.164.147':139
- '88.##.47.178':139
- '88.##.112.39':139
- '88.##.58.114':139
- '88.##.130.36':139
- '88.##.239.26':139
- '88.##.239.252':139
- '88.##.181.105':139
- '88.##.176.118':139
- '88.##.59.141':445
- '88.##.124.183':445
- '88.#7.46.2':445
- '88.##.185.82':445
- '88.##.171.18':445
- '88.##.111.100':139
- '88.##.86.112':139
- '88.##.190.196':139
- '88.##.224.184':445
- '88.##.229.126':139
- '88.##.190.196':445
- '88.##.111.100':445
- '88.##.229.126':445
- '88.##.73.189':139
- '88.#7.23.50':139
- '88.##.112.39':445
- '88.##.164.147':445
- '88.##.47.178':445
- '88.##.86.112':445
- '88.##.176.118':445
- '88.##.13.194':139
- '88.##.117.196':139
- '88.##.65.194':139
- '88.#7.9.128':139
- '88.##.57.223':139
- '88.#7.15.43':139
- '88.##.158.114':139
- '88.##.107.128':139
- '88.#7.1.34':139
- '88.##.88.234':139
- '88.#7.14.22':139
- '88.##.203.195':445
- '88.##.23.166':445
- '88.##.124.102':445
- '88.##.166.158':445
- '88.##.89.160':445
- '88.##.206.229':445
- '88.##.19.156':445
- '88.##.250.78':445
- '88.##.108.55':445
- '88.#7.1.231':445
- '88.##.136.63':445
- '88.##.95.191':139
- '88.#7.57.47':139
- '88.##.157.51':139
- '88.##.68.100':139
- '88.##.244.204':139
- '88.##.131.167':445
- '88.##.184.78':445
- '88.##.140.126':139
- '88.#7.41.55':139
- '88.#7.83.95':139
- '88.#7.101.7':445
- '88.##.129.87':445
- '88.##.210.120':445
- '88.##.235.73':445
- '88.##.158.176':445
- '88.##.96.109':445
- '88.##.204.245':445
- '88.##.157.219':445
- '88.#7.31.24':445
- '88.##.130.138':445
- '88.#7.5.250':445
- '88.#7.7.105':445
- '88.##.106.25':445
- '88.#7.16.72':445
- '88.##.54.144':445
- '88.#7.18.82':445
- '88.##.244.231':445
- '88.#7.87.97':445
- '88.##.153.120':445
- '88.#7.2.173':445
- '88.##.208.62':445
- '88.##.88.162':139
- '88.#7.18.82':139
- '88.#7.16.72':139
- '88.##.54.144':139
- '88.##.206.229':139
- '88.##.19.156':139
- '88.##.208.62':139
- '88.##.153.120':139
- '88.#7.2.173':139
- '88.#7.7.105':139
- '88.##.106.25':139
- '88.##.250.78':139
- '88.##.136.63':139
- '88.##.131.167':139
- '88.##.203.195':139
- '88.##.124.102':139
- '88.##.184.78':139
- '88.##.108.55':139
- '88.#7.1.231':139
- '88.##.23.166':139
- '88.##.89.160':139
- '88.##.166.158':139
- '88.##.26.213':139
- '88.##.59.187':139
- '88.##.21.226':139
- '88.##.96.109':139
- '88.##.204.245':139
- '88.##.166.112':139
- '88.##.44.214':139
- '88.#7.6.205':139
- '88.##.161.58':139
- '88.##.217.115':139
- '88.##.157.219':139
- '88.##.235.73':139
- '88.##.158.176':139
- '88.#7.5.250':139
- '88.##.244.231':139
- '88.#7.87.97':139
- '88.#7.31.24':139
- '88.##.130.138':139
- '88.##.129.87':139
- '88.##.210.120':139
- '88.#7.101.7':139
- '88.##.123.234':445
- '88.##.127.124':445
- '88.##.234.31':445
- '88.##.93.146':445
- '88.#7.31.93':445
- '88.##.218.166':445
- '88.##.201.16':445
- '88.##.59.110':445
- '88.#7.5.37':445
- '88.##.181.110':445
- '88.##.146.56':445
- '88.##.237.31':139
- '88.#7.28.45':139
- '88.##.31.186':139
- '88.##.85.249':139
- '88.#7.83.2':139
- '88.#7.74.90':139
- '88.##.231.73':139
- '88.##.158.74':139
- '88.#7.87.83':139
- '88.##.197.141':139
- '88.##.124.55':139
- '88.##.17.171':139
- '88.#7.54.50':139
- '88.##.130.10':139
- '88.##.32.223':139
- '88.##.153.55':139
- '88.##.249.93':139
- '88.#7.24.48':139
- '88.##.185.238':139
- '88.##.210.149':139
- '88.##.151.33':139
- '88.##.237.31':445
- '88.#7.28.45':445
- '88.##.31.186':445
- '88.##.85.249':445
- '88.#7.83.2':445
- '88.#7.74.90':445
- '88.##.231.73':445
- '88.##.158.74':445
- '88.#7.87.83':445
- '88.##.197.141':445
- '88.##.201.16':139
- '88.#7.41.55':445
- '88.#7.83.95':445
- '88.#7.57.47':445
- '88.##.157.51':445
- '88.##.95.191':445
- '88.#7.1.231':9988
- '88.##.250.78':9988
- '88.##.108.55':9988
- '88.##.140.126':445
- '88.##.203.195':9988
- '88.##.244.204':445
- '88.##.161.58':445
- '88.##.217.115':445
- '88.##.59.187':445
- '88.##.21.226':445
- '88.##.26.213':445
- '88.##.88.162':445
- '88.##.68.100':445
- '88.##.44.214':445
- '88.#7.6.205':445
- '88.##.166.112':445
- '88.##.234.31':139
- '88.##.123.234':139
- '88.#7.31.93':139
- '88.##.146.56':139
- '88.##.93.146':139
- '88.##.59.110':139
- '88.##.218.166':139
- '88.##.181.110':139
- '88.##.127.124':139
- '88.#7.5.37':139
- '88.##.166.112':9988
- '88.#7.18.82':9988
- '88.##.244.231':9988
- '88.##.54.144':9988
- '88.##.206.229':9988
- '88.##.19.156':9988
- '88.##.158.176':9988
- '88.##.210.120':9988
- '88.##.235.73':9988
- '88.#7.87.97':9988
- '88.#7.5.250':9988