Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '22#.#9.179.20':445
- '22#.#9.77.35':445
- '22#.#9.6.252':445
- '22#.#9.165.202':445
- '22#.#9.179.41':445
- '22#.#9.140.66':445
- '22#.#9.120.164':445
- '22#.#9.186.177':445
- '22#.#9.132.61':445
- '22#.#9.59.198':139
- '22#.#9.28.141':139
- '22#.#9.19.241':139
- '22#.#9.20.24':139
- '22#.#9.120.117':445
- '22#.#9.46.128':445
- '22#.#9.117.57':445
- '22#.#9.160.226':445
- '22#.#9.244.76':445
- '22#.#9.104.200':445
- '22#.#9.56.152':445
- '22#.#9.74.237':445
- '22#.#9.44.240':445
- '22#.#9.59.198':445
- '22#.#9.20.24':445
- '22#.#9.19.241':445
- '22#.#9.1.110':445
- '22#.#9.86.183':445
- '22#.#9.233.96':445
- '22#.#9.33.76':445
- '22#.#9.120.183':445
- '22#.19.0.48':445
- '22#.#9.48.216':445
- '22#.#9.84.48':445
- '22#.#9.60.65':445
- '22#.#9.216.123':445
- '22#.#9.1.110':139
- '22#.#9.46.128':139
- '22#.#9.132.61':139
- '22#.#9.160.226':139
- '22#.#9.120.117':139
- '22#.#9.179.20':139
- '22#.#9.77.35':139
- '22#.#9.6.252':139
- '22#.#9.165.202':139
- '22#.#9.117.57':139
- '22#.#9.19.245':445
- '22#.#9.241.196':445
- '22#.#9.133.241':445
- '22#.#9.244.133':445
- '22#.#9.161.119':445
- '22#.#9.196.161':445
- '22#.#9.128.87':445
- '22#.#9.117.119':445
- '22#.#9.120.164':139
- '22#.#9.84.48':139
- '22#.#9.86.183':139
- '22#.#9.216.123':139
- '22#.#9.48.216':139
- '22#.#9.104.200':139
- '22#.#9.56.152':139
- '22#.#9.44.240':139
- '22#.#9.74.237':139
- '22#.#9.60.65':139
- '22#.#9.140.66':139
- '22#.#9.244.76':139
- '22#.#9.186.177':139
- '22#.#9.179.41':139
- '22#.#9.233.96':139
- '22#.#9.33.76':139
- '22#.#9.120.183':139
- '22#.19.0.48':139
- '22#.#9.70.141':139
- '22#.#9.142.70':139
- '22#.#9.52.99':139
- '22#.#9.81.223':139
- '22#.#9.160.58':139
- '22#.#9.57.21':139
- '22#.#9.200.13':139
- '22#.#9.96.39':139
- '22#.#9.97.89':139
- '22#.#9.63.237':445
- '22#.#9.180.202':139
- '22#.#9.131.23':445
- '22#.#9.165.26':445
- '22#.#9.50.66':139
- '22#.#9.27.77':139
- '22#.19.0.29':139
- '22#.#9.112.41':139
- '22#.#9.106.58':139
- '22#.#9.60.155':139
- '22#.#9.80.60':139
- '22#.#9.231.112':139
- '22#.#9.155.231':139
- '22#.#9.231.151':139
- '22#.#9.77.71':139
- '22#.#9.59.80':139
- '22#.#9.132.215':139
- '22#.#9.112.170':139
- '22#.#9.3.243':139
- '22#.19.16.6':139
- '22#.#9.251.94':139
- '22#.#9.123.15':139
- '22#.#9.43.50':139
- '22#.#9.112.175':139
- '22#.#9.74.126':139
- '22#.#9.49.148':139
- '22#.#9.147.56':445
- '22#.19.39.3':139
- '22#.#9.57.38':139
- '22#.#9.145.253':139
- '22#.#9.108.139':139
- '22#.#9.229.209':139
- '22#.#9.147.56':139
- '22#.#9.223.56':139
- '22#.#9.123.111':139
- '22#.#9.220.247':139
- '22#.#9.51.239':139
- '22#.#9.146.83':139
- '22#.#9.28.141':445
- '22#.#9.27.190':139
- '22#.#9.236.10':139
- '22#.#9.70.45':139
- '22#.19.4.61':139
- '22#.#9.90.132':139
- '22#.#9.131.23':139
- '22#.#9.108.139':445
- '22#.19.39.3':445
- '22#.#9.220.247':445
- '22#.#9.145.253':445
- '22#.#9.123.111':445
- '22#.#9.229.209':445
- '22#.#9.57.38':445
- '22#.#9.223.56':445
- '22#.#9.70.45':445
- '22#.#9.27.190':445
- '22#.#9.51.239':445
- '22#.#9.165.26':139
- '22#.#9.63.237':139
- '22#.#9.90.132':445
- '22#.#9.236.10':445
- '22#.#9.146.83':445
- '22#.19.4.61':445
- '22#.#9.176.98':139
- '22#.#9.6.230':139
- '22#.#9.145.50':139
- '22#.#9.200.136':139
- '22#.#9.146.55':445
- '22#.#9.52.75':445
- '22#.#9.12.79':139
- '22#.#9.134.70':139
- '22#.#9.31.219':139
- '22#.#9.44.49':139
- '22#.#9.60.87':139
- '22#.#9.31.218':139
- '22#.#9.143.31':139
- '22#.#9.227.173':139
- '22#.#9.45.143':139
- '22#.#9.85.160':139
- '22#.#9.74.180':139
- '22#.#9.55.187':445
- '22#.#9.32.59':445
- '22#.#9.60.220':445
- '22#.#9.15.220':445
- '22#.#9.104.37':445
- '22#.#9.173.30':445
- '22#.#9.249.133':445
- '22#.#9.105.19':445
- '22#.#9.127.43':445
- '22#.#9.33.163':445
- '22#.#9.204.146':445
- '22#.#9.179.66':445
- '22#.#9.49.49':445
- '22#.#9.84.134':445
- '22#.#9.64.152':445
- '22#.#9.34.52':445
- '22#.#9.142.157':445
- '22#.#9.147.181':445
- '22#.#9.217.224':139
- '22#.#9.33.163':139
- '22#.#9.15.220':139
- '22#.#9.64.152':139
- '22#.#9.34.52':139
- '22#.#9.60.220':139
- '22#.#9.105.19':139
- '22#.#9.104.37':139
- '22#.#9.32.59':139
- '22#.#9.147.181':139
- '22#.#9.204.146':139
- '22#.#9.55.187':139
- '22#.#9.52.75':139
- '22#.#9.146.55':139
- '22#.#9.179.66':139
- '22#.#9.142.157':139
- '22#.#9.84.134':139
- '22#.#9.49.49':139
- '22#.#9.127.43':139
- '22#.#9.106.204':139
- '22#.#9.28.65':139
- '22#.#9.37.91':139
- '22#.#9.69.37':139
- '22#.#9.152.156':139
- '22#.#9.8.128':139
- '22#.#9.205.206':139
- '22#.#9.243.176':139
- '22#.#9.68.140':139
- '22#.#9.23.222':139
- '22#.#9.33.189':139
- '22#.#9.173.30':139
- '22#.#9.249.133':139
- '22#.#9.71.246':139
- '22#.#9.134.132':139
- '22#.#9.43.218':139
- '22#.#9.68.43':139
- '22#.#9.45.80':139
- '22#.#9.222.65':139
- '22#.#9.70.128':139
- '22#.#9.170.52':139
- '22#.#9.241.239':139
- '22#.#9.133.241':139
- '22#.#9.103.222':139
- '22#.#9.54.165':139
- '22#.#9.127.166':139
- '22#.#9.152.156':9988
- '22#.#9.227.173':9988
- '22#.#9.71.246':9988
- '22#.#9.205.206':9988
- '22#.#9.7.114':139
- '22#.#9.19.94':139
- '22#.#9.200.136':9988
- '22#.#9.139.66':139
- '22#.#9.244.133':139
- '22#.#9.170.52':445
- '22#.#9.45.80':445
- '22#.#9.127.166':445
- '22#.#9.70.128':445
- '22#.#9.54.165':445
- '22#.#9.241.239':445
- '22#.#9.222.65':445
- '22#.#9.103.222':445
- '22#.#9.19.94':445
- '22#.#9.128.87':139
- '22#.#9.117.119':139
- '22#.#9.19.245':139
- '22#.#9.241.196':139
- '22#.#9.139.66':445
- '22#.#9.7.114':445
- '22#.#9.161.119':139
- '22#.#9.196.161':139
- '22#.#9.43.218':9988
- '22#.#9.205.206':445
- '22#.#9.243.176':445
- '22#.#9.106.204':445
- '22#.#9.28.65':445
- '22#.#9.217.224':445
- '22#.#9.31.218':445
- '22#.#9.152.156':445
- '22#.#9.8.128':445
- '22#.#9.69.37':445
- '22#.#9.43.218':445
- '22#.#9.68.43':445
- '22#.#9.23.222':445
- '22#.#9.33.189':445
- '22#.#9.68.140':445
- '22#.#9.37.91':445
- '22#.#9.71.246':445
- '22#.#9.134.132':445
- '22#.#9.143.31':445
- '22#.#9.12.79':445
- '22#.#9.134.70':445
- '22#.#9.176.98':445
- '22#.#9.6.230':445
- '22#.#9.173.30':9988
- '22#.#9.68.43':9988
- '22#.#9.49.49':9988
- '22#.#9.204.146':9988
- '22#.#9.200.136':445
- '22#.#9.74.180':445
- '22#.#9.85.160':445
- '22#.#9.44.49':445
- '22#.#9.60.87':445
- '22#.#9.31.219':445
- '22#.#9.145.50':445
- '22#.#9.227.173':445
- '22#.#9.45.143':445