Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '58.##.117.51':445
- '58.##.23.134':445
- '58.##.87.204':445
- '58.#3.3.27':445
- '58.##.79.225':445
- '58.##.50.192':445
- '58.##.174.199':139
- '58.##.82.175':139
- '58.##.215.40':139
- '58.##.186.127':139
- '58.##.30.232':139
- '58.##.96.182':139
- '58.##.87.204':139
- '58.##.164.209':445
- '58.##.84.244':445
- '58.##.14.205':445
- '58.##.84.191':445
- '58.#3.84.99':445
- '58.##.146.123':445
- '58.##.50.192':139
- '58.##.117.51':139
- '58.##.23.134':139
- '58.#3.68.8':445
- '58.#3.3.27':139
- '58.##.79.225':139
- '58.##.235.92':139
- '58.##.112.90':139
- '58.##.108.125':139
- '58.##.196.229':139
- '58.##.138.105':139
- '58.#3.5.160':139
- '58.#3.39.26':139
- '58.##.56.103':139
- '58.#3.42.68':139
- '58.##.80.170':139
- '58.##.224.205':139
- '58.##.252.252':139
- '58.##.84.153':139
- '58.#3.24.37':139
- '58.##.12.215':139
- '58.##.36.223':139
- '58.##.112.36':139
- '58.#3.27.81':139
- '58.##.107.129':139
- '58.#3.74.12':139
- '58.#3.45.52':139
- '58.##.172.188':139
- '58.##.41.102':139
- '58.#3.119.8':139
- '58.##.79.120':139
- '58.##.143.237':139
- '58.##.13.119':445
- '58.##.103.103':445
- '58.##.131.108':445
- '58.##.142.242':445
- '58.##.101.88':445
- '58.##.210.106':445
- '58.#3.53.0':445
- '58.#3.75.32':445
- '58.#3.64.55':445
- '58.##.150.130':445
- '58.##.61.157':445
- '58.##.115.219':445
- '58.#3.68.8':139
- '58.##.188.174':139
- '58.##.61.150':139
- '58.##.134.148':139
- '58.#3.217.6':139
- '58.#3.20.10':139
- '58.##.210.176':139
- '58.##.164.209':139
- '58.##.84.244':139
- '58.##.14.205':139
- '58.##.84.191':139
- '58.#3.84.99':139
- '58.##.146.123':139
- '58.##.164.64':445
- '58.##.66.221':445
- '58.##.21.194':445
- '58.#3.66.35':445
- '58.##.100.211':445
- '58.##.33.182':445
- '58.##.89.156':445
- '58.##.188.174':445
- '58.##.61.150':445
- '58.##.134.148':445
- '58.#3.217.6':445
- '58.#3.20.10':445
- '58.##.210.176':445
- '58.##.71.156':445
- '58.##.50.228':445
- '58.##.246.237':445
- '58.##.142.107':445
- '58.##.74.134':445
- '58.##.104.82':445
- '58.#3.33.96':445
- '58.##.154.218':445
- '58.##.241.143':445
- '58.##.155.241':445
- '58.##.153.79':445
- '58.##.205.53':445
- '58.#3.25.34':445
- '58.##.145.80':139
- '58.##.45.101':445
- '58.##.160.169':445
- '58.##.234.104':139
- '58.##.255.160':445
- '58.##.46.248':445
- '58.##.118.15':445
- '58.#3.8.3':139
- '58.##.162.58':139
- '58.#3.9.25':139
- '58.##.181.235':139
- '58.##.156.226':139
- '58.#3.11.51':139
- '58.#3.68.44':445
- '58.##.142.136':445
- '58.##.147.142':445
- '58.##.220.194':445
- '58.##.86.202':445
- '58.#3.85.87':445
- '58.##.136.85':445
- '58.##.118.15':139
- '58.##.45.101':139
- '58.##.160.169':139
- '58.#3.68.44':139
- '58.##.255.160':139
- '58.##.46.248':139
- '58.##.130.174':139
- '58.##.98.159':139
- '58.##.167.151':139
- '58.##.202.237':139
- '58.#3.45.42':139
- '58.##.252.44':139
- '58.##.45.211':139
- '58.##.131.247':139
- '58.##.142.131':139
- '58.##.111.117':139
- '58.##.149.215':139
- '58.#3.4.4':139
- '58.##.192.76':139
- '58.##.81.113':139
- '58.#3.33.25':139
- '58.#3.31.94':139
- '58.##.126.253':139
- '58.#3.15.35':139
- '58.##.191.15':139
- '58.##.175.190':139
- '58.##.216.103':139
- '58.#3.1.177':139
- '58.##.161.41':139
- '58.##.124.191':139
- '58.#3.44.29':139
- '58.#3.59.37':139
- '58.##.82.175':445
- '58.##.215.40':445
- '58.##.235.92':445
- '58.##.30.232':445
- '58.##.96.182':445
- '58.##.174.199':445
- '58.##.12.215':445
- '58.##.36.223':445
- '58.##.112.36':445
- '58.#3.27.81':445
- '58.##.107.129':445
- '58.#3.74.12':445
- '58.##.186.127':445
- '58.##.72.237':139
- '58.##.64.130':139
- '58.##.17.177':139
- '58.##.12.145':139
- '58.#3.24.50':139
- '58.#3.3.41':139
- '58.##.142.136':139
- '58.##.147.142':139
- '58.##.220.194':139
- '58.##.86.202':139
- '58.#3.85.87':139
- '58.##.136.85':139
- '58.#3.119.8':445
- '58.#3.42.68':445
- '58.##.80.170':445
- '58.##.145.80':445
- '58.##.252.252':445
- '58.##.84.153':445
- '58.##.56.103':445
- '58.##.72.237':445
- '58.##.64.130':445
- '58.##.17.177':445
- '58.##.12.145':445
- '58.#3.24.50':445
- '58.#3.3.41':445
- '58.##.224.205':445
- '58.##.172.188':445
- '58.##.41.102':445
- '58.#3.24.37':445
- '58.##.79.120':445
- '58.##.143.237':445
- '58.#3.45.52':445
- '58.##.112.90':445
- '58.##.108.125':445
- '58.##.196.229':445
- '58.##.138.105':445
- '58.#3.5.160':445
- '58.#3.39.26':445
- '58.#3.66.35':139
- '58.##.193.143':445
- '58.##.21.233':445
- '58.##.235.63':445
- '58.##.79.235':445
- '58.#3.92.19':445
- '58.##.148.91':445
- '58.##.60.149':445
- '58.#3.116.5':445
- '58.##.107.219':445
- '58.#3.64.8':445
- '58.##.137.146':445
- '58.##.36.148':445
- '58.##.72.232':445
- '58.##.166.75':445
- '58.##.135.109':445
- '58.##.186.106':445
- '58.#3.98.76':445
- '58.#3.200.7':445
- '58.##.204.20':445
- '58.#3.85.13':445
- '58.##.25.253':445
- '58.#3.12.3':445
- '58.##.106.199':445
- '58.##.146.106':445
- '58.##.20.106':445
- '58.#3.3.4':445
- '58.##.111.44':445
- '58.##.37.152':445
- '58.#3.56.77':445
- '58.#3.37.68':445
- '58.##.66.110':445
- '58.#3.58.81':445
- '58.##.77.195':445
- '58.##.130.195':445
- '58.#3.11.22':445
- '58.##.100.177':445
- '58.##.226.160':445
- '58.##.134.47':445
- '58.#3.68.25':445
- '58.##.164.148':445
- '58.##.74.194':445
- '58.##.230.241':445
- '58.#3.9.3':445
- '58.##.175.81':445
- '58.##.147.93':445
- '58.##.183.56':445
- '58.##.25.162':445
- '58.##.214.63':445
- '58.##.21.210':445
- '58.#3.56.52':445
- '58.##.105.183':445
- '58.##.193.143':139
- '58.##.21.233':139
- '58.##.235.63':139
- '58.##.79.235':139
- '58.#3.92.19':139
- '58.##.148.91':139
- '58.##.60.149':139
- '58.#3.116.5':139
- '58.##.107.219':139
- '58.#3.64.8':139
- '58.##.137.146':139
- '58.##.36.148':139
- '58.##.72.232':139
- '58.##.146.106':139
- '58.#3.98.76':139
- '58.##.166.75':139
- '58.##.106.199':139
- '58.##.204.20':139
- '58.##.20.106':139
- '58.#3.85.13':139
- '58.##.25.253':139
- '58.#3.12.3':139
- '58.#3.200.7':139
- '58.##.135.109':139
- '58.##.186.106':139
- '58.##.175.81':139
- '58.##.111.44':139
- '58.##.37.152':139
- '58.#3.56.77':139
- '58.#3.37.68':139
- '58.#3.58.81':139
- '58.##.66.110':139
- '58.##.77.195':139
- '58.##.130.195':139
- '58.#3.11.22':139
- '58.##.100.177':139
- '58.##.226.160':139
- '58.##.134.47':139
- '58.#3.68.25':139
- '58.##.164.148':139
- '58.##.74.194':139
- '58.##.230.241':139
- '58.#3.3.4':139
- '58.#3.9.3':139
- '58.##.147.93':139
- '58.##.183.56':139
- '58.##.214.63':139
- '58.##.25.162':139
- '58.##.105.183':139
- '58.##.21.210':139
- '58.#3.56.52':139
- '58.##.20.106':9988
- '58.##.83.194':445
- '58.##.45.157':445
- '58.#3.93.86':445
- '58.#3.85.1':139
- '58.#3.90.85':445
- '58.##.121.252':445
- '58.##.210.106':139
- '58.##.13.119':139
- '58.##.103.103':139
- '58.#3.85.1':445
- '58.##.142.242':139
- '58.##.101.88':139
- '58.#3.93.86':139
- '58.##.37.167':445
- '58.##.80.106':445
- '58.##.100.192':445
- '58.##.248.75':445
- '58.##.131.169':445
- '58.##.45.248':445
- '58.##.121.252':139
- '58.##.83.194':139
- '58.##.45.157':139
- '58.#3.3.59':445
- '58.##.100.221':445
- '58.#3.90.85':139
- '58.##.131.108':139
- '58.##.154.218':139
- '58.##.241.143':139
- '58.##.155.241':139
- '58.##.153.79':139
- '58.##.205.53':139
- '58.#3.25.34':139
- '58.##.89.156':139
- '58.##.66.221':139
- '58.##.21.194':139
- '58.##.71.156':139
- '58.##.100.211':139
- '58.##.33.182':139
- '58.##.142.107':139
- '58.#3.53.0':139
- '58.#3.75.32':139
- '58.#3.64.55':139
- '58.##.150.130':139
- '58.##.61.157':139
- '58.##.115.219':139
- '58.#3.33.96':139
- '58.##.50.228':139
- '58.##.246.237':139
- '58.##.164.64':139
- '58.##.74.134':139
- '58.##.104.82':139
- '58.#3.65.2':139
- '58.#3.8.23':139
- '58.##.112.221':139
- '58.##.22.167':139
- '58.#3.39.22':139
- '58.##.136.171':139
- '58.##.128.49':139
- '58.#3.21.60':139
- '58.##.27.190':139
- '58.##.103.112':139
- '58.##.37.158':139
- '58.#3.35.55':139
- '58.#3.11.22':9988
- '58.##.230.241':9988
- '58.##.183.56':9988
- '58.##.25.162':9988
- '58.##.148.91':9988
- '58.##.21.233':9988
- '58.##.175.81':9988
- '58.##.100.177':9988
- '58.#3.56.77':9988
- '58.##.226.160':9988
- '58.#3.68.25':9988
- '58.#3.37.68':9988
- '58.##.111.44':9988
- '58.##.53.116':139
- '58.##.103.112':445
- '58.##.37.158':445
- '58.#3.35.55':445
- '58.#3.65.2':445
- '58.#3.8.23':445
- '58.##.112.221':445
- '58.##.53.116':445
- '58.##.53.220':445
- '58.#3.75.75':445
- '58.##.128.49':445
- '58.#3.21.60':445
- '58.##.27.190':445
- '58.##.136.171':445
- '58.##.131.169':139
- '58.##.45.248':139
- '58.##.37.167':139
- '58.##.53.220':139
- '58.#3.75.75':139
- '58.##.248.75':139
- '58.##.100.221':139
- '58.##.22.167':445
- '58.#3.39.22':445
- '58.##.80.106':139
- '58.##.100.192':139
- '58.#3.3.59':139