Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '81.##.137.196':139
- '81.##.100.196':139
- '81.#0.91.23':139
- '81.##.181.252':139
- '81.#0.23.92':139
- '81.##.23.108':139
- '81.#0.31.23':139
- '81.##.107.187':139
- '81.#0.51.63':139
- '81.##.187.46':139
- '81.##.65.100':139
- '81.#0.54.31':139
- '81.##.207.82':139
- '81.##.197.228':139
- '81.#0.134.3':139
- '81.##.192.98':139
- '81.##.160.192':139
- '81.##.44.201':139
- '81.##.192.157':139
- '81.##.255.178':139
- '81.##.220.30':139
- '81.##.160.192':445
- '81.##.181.252':445
- '81.##.192.98':445
- '81.##.255.178':445
- '81.##.44.201':445
- '81.##.100.196':445
- '81.#0.51.63':445
- '81.##.137.196':445
- '81.#0.23.92':445
- '81.#0.91.23':445
- '81.##.99.168':445
- '81.##.197.228':445
- '81.#0.98.8':445
- '81.##.241.235':445
- '81.##.71.253':445
- '81.#0.54.31':445
- '81.##.192.157':445
- '81.##.65.100':445
- '81.#0.134.3':445
- '81.##.207.82':445
- '81.##.202.122':445
- '81.##.162.65':445
- '81.##.100.95':445
- '81.##.193.219':139
- '81.##.80.120':445
- '81.#0.9.6':445
- '81.##.117.67':445
- '81.##.235.107':445
- '81.##.53.188':445
- '81.##.108.34':445
- '81.##.222.113':139
- '81.##.136.95':139
- '81.##.114.160':139
- '81.##.103.30':139
- '81.##.71.152':139
- '81.##.47.117':139
- '81.#0.87.22':139
- '81.#0.79.42':139
- '81.#0.9.17':139
- '81.#0.86.9':139
- '81.##.159.117':445
- '81.##.47.117':445
- '81.#0.87.22':445
- '81.#0.79.42':445
- '81.#0.9.17':445
- '81.#0.86.9':445
- '81.#0.98.8':139
- '81.##.99.168':139
- '81.##.71.253':139
- '81.##.193.219':445
- '81.##.241.235':139
- '81.##.90.202':445
- '81.##.202.64':445
- '81.##.133.219':445
- '81.##.250.158':445
- '81.##.229.250':445
- '81.##.222.113':445
- '81.##.136.95':445
- '81.##.114.160':445
- '81.##.103.30':445
- '81.##.71.152':445
- '81.##.38.124':445
- '81.##.11.127':445
- '81.#0.82.42':445
- '81.##.54.142':445
- '81.##.173.54':445
- '81.#0.170.2':139
- '81.##.56.177':139
- '81.##.65.131':139
- '81.#0.66.51':445
- '81.##.119.63':139
- '81.##.133.172':445
- '81.##.29.214':445
- '81.##.203.160':445
- '81.##.175.191':445
- '81.#0.23.58':445
- '81.##.11.158':445
- '81.#0.40.6':445
- '81.##.61.245':445
- '81.##.10.213':445
- '81.##.38.214':445
- '81.##.81.179':139
- '81.#0.118.6':139
- '81.##.232.112':139
- '81.#0.8.176':139
- '81.##.155.130':139
- '81.##.207.43':139
- '81.##.123.121':139
- '81.##.146.100':139
- '81.#0.57.44':139
- '81.##.186.48':139
- '81.##.16.186':139
- '81.##.98.203':139
- '81.##.95.167':139
- '81.##.202.177':139
- '81.##.253.196':139
- '81.#0.178.6':139
- '81.##.250.127':139
- '81.##.83.156':139
- '81.#0.34.62':139
- '81.##.36.187':139
- '81.##.152.37':139
- '81.##.62.149':139
- '81.#0.59.63':139
- '81.##.148.190':139
- '81.##.178.65':139
- '81.#0.83.43':139
- '81.##.133.172':139
- '81.##.29.214':139
- '81.##.203.160':139
- '81.##.175.191':139
- '81.#0.23.58':139
- '81.#0.31.23':445
- '81.##.220.30':445
- '81.##.23.108':445
- '81.##.187.46':445
- '81.##.107.187':445
- '81.#0.12.32':139
- '81.##.255.11':139
- '81.#0.61.38':139
- '81.##.244.219':139
- '81.##.66.240':139
- '81.##.10.213':139
- '81.#0.12.32':445
- '81.##.255.11':445
- '81.#0.61.38':445
- '81.##.244.219':445
- '81.##.66.240':445
- '81.##.62.149':445
- '81.#0.59.63':445
- '81.##.148.190':445
- '81.##.178.65':445
- '81.#0.83.43':445
- '81.#0.40.6':139
- '81.##.54.142':139
- '81.##.11.158':139
- '81.##.38.214':139
- '81.##.61.245':139
- '81.##.11.127':139
- '81.#0.66.51':139
- '81.##.38.124':139
- '81.##.173.54':139
- '81.#0.82.42':139
- '81.##.202.64':139
- '81.##.134.52':445
- '81.##.90.168':445
- '81.##.19.152':445
- '81.##.175.39':445
- '81.#0.40.10':445
- '81.##.154.232':445
- '81.##.187.242':445
- '81.#0.72.26':445
- '81.##.182.210':445
- '81.#0.96.65':445
- '81.##.71.113':139
- '81.##.184.220':139
- '81.##.245.20':139
- '81.##.162.204':139
- '81.##.148.90':139
- '81.##.182.170':139
- '81.#0.52.47':139
- '81.#0.9.122':139
- '81.##.50.119':139
- '81.##.91.153':139
- '81.##.138.168':445
- '81.#0.42.91':445
- '81.##.253.122':445
- '81.##.223.170':445
- '81.##.197.55':445
- '81.##.172.187':445
- '81.##.158.106':445
- '81.##.219.189':445
- '81.##.120.24':445
- '81.#0.8.89':445
- '81.#0.190.0':445
- '81.##.202.249':445
- '81.##.32.126':445
- '81.##.134.77':445
- '81.##.125.138':445
- '81.##.77.220':445
- '81.#0.81.83':445
- '81.##.213.131':445
- '81.#0.77.29':445
- '81.##.189.185':445
- '81.##.12.253':445
- '81.##.134.77':139
- '81.##.202.249':139
- '81.##.77.220':139
- '81.##.138.168':139
- '81.##.125.138':139
- '81.#0.77.29':139
- '81.#0.81.83':139
- '81.##.12.253':139
- '81.##.32.126':139
- '81.##.189.185':139
- '81.##.134.52':139
- '81.##.90.168':139
- '81.##.19.152':139
- '81.#0.40.10':139
- '81.##.175.39':139
- '81.##.154.232':139
- '81.##.187.242':139
- '81.#0.72.26':139
- '81.##.182.210':139
- '81.#0.96.65':139
- '81.##.213.131':139
- '81.##.154.195':139
- '81.##.18.108':139
- '81.##.232.253':139
- '81.#0.52.96':139
- '81.#0.29.50':139
- '81.##.158.71':139
- '81.##.204.240':139
- '81.##.217.70':139
- '81.##.122.134':139
- '81.#0.61.7':139
- '81.#0.42.91':139
- '81.##.253.122':139
- '81.##.223.170':139
- '81.##.197.55':139
- '81.##.172.187':139
- '81.##.158.106':139
- '81.##.219.189':139
- '81.##.120.24':139
- '81.#0.8.89':139
- '81.#0.190.0':139
- '81.##.198.234':445
- '81.##.131.59':445
- '81.##.111.48':445
- '81.#0.20.23':139
- '81.#0.49.20':139
- '81.#0.28.8':445
- '81.##.97.175':445
- '81.##.101.146':445
- '81.##.178.79':445
- '81.##.176.156':445
- '81.#0.28.8':139
- '81.##.97.175':139
- '81.##.101.146':139
- '81.##.178.79':139
- '81.##.176.156':139
- '81.##.90.205':139
- '81.#0.23.57':139
- '81.#0.66.55':139
- '81.##.135.63':139
- '81.##.94.157':139
- '81.##.135.63':445
- '81.#0.9.6':139
- '81.##.117.67':139
- '81.##.235.107':139
- '81.##.53.188':139
- '81.##.108.34':139
- '81.##.133.219':139
- '81.##.90.202':139
- '81.##.229.250':139
- '81.##.159.117':139
- '81.##.250.158':139
- '81.#0.23.57':445
- '81.#0.20.23':445
- '81.##.90.205':445
- '81.##.94.157':445
- '81.#0.66.55':445
- '81.##.202.122':139
- '81.##.162.65':139
- '81.##.100.95':139
- '81.#0.49.20':445
- '81.##.80.120':139
- '81.##.71.113':445
- '81.##.184.220':445
- '81.##.245.20':445
- '81.##.162.204':445
- '81.##.148.90':445
- '81.##.182.170':445
- '81.#0.52.47':445
- '81.#0.9.122':445
- '81.##.50.119':445
- '81.##.91.153':445
- '81.##.154.195':445
- '81.##.18.108':445
- '81.##.232.253':445
- '81.#0.52.96':445
- '81.#0.29.50':445
- '81.##.158.71':445
- '81.##.204.240':445
- '81.##.217.70':445
- '81.##.122.134':445
- '81.#0.61.7':445
- '81.##.134.52':9988
- '81.##.219.189':9988
- '81.##.18.108':9988
- '81.#0.8.89':9988
- '81.##.189.185':9988
- '81.##.172.187':9988
- '81.##.198.234':139
- '81.##.131.59':139
- '81.##.111.48':139
- '81.#0.61.7':9988
- '81.##.217.70':9988
- '81.##.182.210':9988
- '81.#0.96.65':9988
- '81.##.90.168':9988
- '81.#0.40.10':9988
- '81.##.19.152':9988
- '81.##.138.168':9988
- '81.##.32.126':9988
- '81.##.154.232':9988
- '81.#0.72.26':9988
- '81.##.187.242':9988