Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '19#.#1.1.161':445
- '19#.#1.189.231':445
- '19#.#1.13.53':445
- '19#.#1.225.138':445
- '19#.#1.84.23':445
- '19#.41.34.1':445
- '19#.41.91.6':445
- '19#.#1.248.230':445
- '19#.#1.220.174':445
- '19#.#1.77.159':139
- '19#.#1.8.109':139
- '19#.#1.97.112':139
- '19#.#1.156.251':139
- '19#.#1.160.103':139
- '19#.#1.243.137':445
- '19#.#1.153.243':445
- '19#.#1.66.219':139
- '19#.#1.138.50':445
- '19#.#1.134.46':445
- '19#.#1.57.93':445
- '19#.#1.208.26':445
- '19#.#1.163.209':445
- '19#.#1.38.74':445
- '19#.#1.97.112':445
- '19#.#1.156.251':445
- '19#.#1.237.85':445
- '19#.41.2.53':445
- '19#.#1.180.105':445
- '19#.#1.61.34':445
- '19#.#1.117.220':445
- '19#.#1.161.94':445
- '19#.#1.238.70':445
- '19#.#1.92.172':445
- '19#.#1.185.203':445
- '19#.#1.165.119':445
- '19#.#1.125.206':445
- '19#.#1.13.53':139
- '19#.#1.225.138':139
- '19#.#1.243.137':139
- '19#.#1.153.243':139
- '19#.#1.1.161':139
- '19#.#1.248.230':139
- '19#.#1.220.174':139
- '19#.#1.189.231':139
- '19#.#1.84.23':139
- '19#.#1.210.20':445
- '19#.#1.20.77':445
- '19#.#1.169.235':445
- '19#.#1.59.219':445
- '19#.#1.63.20':445
- '19#.#1.50.122':445
- '19#.#1.138.50':139
- '19#.#1.70.187':445
- '19#.#1.48.32':445
- '19#.#1.208.26':139
- '19#.#1.163.209':139
- '19#.#1.92.172':139
- '19#.#1.185.203':139
- '19#.#1.134.46':139
- '19#.#1.237.85':139
- '19#.41.2.53':139
- '19#.#1.57.93':139
- '19#.#1.38.74':139
- '19#.#1.117.220':139
- '19#.#1.161.94':139
- '19#.41.34.1':139
- '19#.41.91.6':139
- '19#.#1.180.105':139
- '19#.#1.165.119':139
- '19#.#1.125.206':139
- '19#.#1.61.34':139
- '19#.#1.238.70':139
- '19#.#1.230.76':139
- '19#.#1.129.168':139
- '19#.#1.5.165':139
- '19#.#1.108.61':139
- '19#.#1.68.97':139
- '19#.#1.215.6':139
- '19#.#1.180.215':139
- '19#.#1.244.87':139
- '19#.#1.6.233':139
- '19#.#1.28.222':139
- '19#.#1.220.152':139
- '19#.#1.119.130':445
- '19#.#1.17.39':445
- '19#.#1.124.244':139
- '19#.#1.3.138':139
- '19#.#1.179.9':139
- '19#.#1.130.209':139
- '19#.#1.1.217':139
- '19#.#1.16.150':139
- '19#.#1.94.117':139
- '19#.#1.209.225':139
- '19#.#1.101.141':139
- '19#.#1.77.89':139
- '19#.#1.41.11':139
- '19#.#1.183.166':139
- '19#.#1.227.80':139
- '19#.#1.239.118':139
- '19#.#1.85.124':139
- '19#.#1.82.76':139
- '19#.#1.8.245':139
- '19#.#1.29.191':139
- '19#.#1.211.216':139
- '19#.#1.97.84':139
- '19#.#1.1.198':139
- '19#.#1.227.61':139
- '19#.#1.140.187':139
- '19#.#1.103.25':139
- '19#.#1.189.250':139
- '19#.#1.112.34':139
- '19#.#1.68.111':139
- '19#.#1.69.35':139
- '19#.#1.4.154':139
- '19#.#1.215.90':139
- '19#.#1.169.240':139
- '19#.#1.191.145':139
- '19#.#1.160.103':445
- '19#.#1.66.219':445
- '19#.#1.77.159':445
- '19#.#1.8.109':445
- '19#.#1.139.90':139
- '19#.#1.159.25':139
- '19#.#1.34.159':139
- '19#.#1.114.4':139
- '19#.#1.129.117':139
- '19#.#1.189.250':445
- '19#.#1.69.35':445
- '19#.#1.68.111':445
- '19#.#1.103.25':445
- '19#.#1.169.240':445
- '19#.#1.215.90':445
- '19#.#1.51.65':445
- '19#.#1.191.145':445
- '19#.#1.4.154':445
- '19#.#1.17.39':139
- '19#.#1.139.90':445
- '19#.#1.51.65':139
- '19#.#1.119.130':139
- '19#.#1.114.4':445
- '19#.#1.34.159':445
- '19#.#1.112.34':445
- '19#.#1.129.117':445
- '19#.#1.159.25':445
- '19#.#1.235.137':445
- '19#.#1.37.250':139
- '19#.#1.255.68':139
- '19#.#1.138.46':139
- '19#.#1.108.247':139
- '19#.#1.168.197':139
- '19#.#1.182.72':445
- '19#.#1.70.38':445
- '19#.#1.77.95':139
- '19#.#1.102.125':445
- '19#.#1.2.215':139
- '19#.#1.210.82':139
- '19#.#1.230.113':139
- '19#.#1.47.33':139
- '19#.#1.177.45':139
- '19#.#1.166.153':139
- '19#.#1.46.44':139
- '19#.#1.35.85':139
- '19#.#1.82.245':139
- '19#.#1.69.24':445
- '19#.#1.87.69':445
- '19#.#1.108.67':445
- '19#.#1.23.135':445
- '19#.#1.30.130':445
- '19#.#1.58.123':445
- '19#.#1.207.247':445
- '19#.#1.36.33':445
- '19#.#1.145.190':445
- '19#.#1.25.63':445
- '19#.#1.143.166':445
- '19#.#1.220.229':445
- '19#.#1.212.79':445
- '19#.#1.75.20':445
- '19#.#1.10.224':445
- '19#.41.4.96':445
- '19#.#1.120.238':445
- '19#.#1.198.124':445
- '19#.41.4.96':139
- '19#.#1.108.67':139
- '19#.#1.198.124':139
- '19#.#1.10.224':139
- '19#.#1.23.135':139
- '19#.#1.30.130':139
- '19#.#1.36.33':139
- '19#.#1.69.24':139
- '19#.#1.87.69':139
- '19#.#1.102.125':139
- '19#.#1.25.63':139
- '19#.#1.220.229':139
- '19#.#1.212.79':139
- '19#.#1.70.38':139
- '19#.#1.75.20':139
- '19#.#1.120.238':139
- '19#.#1.182.72':139
- '19#.#1.143.166':139
- '19#.#1.168.118':139
- '19#.#1.33.53':139
- '19#.#1.25.242':139
- '19#.#1.87.236':139
- '19#.#1.242.206':139
- '19#.#1.191.15':139
- '19#.41.4.24':139
- '19#.#1.113.87':139
- '19#.#1.15.113':139
- '19#.#1.207.247':139
- '19#.#1.249.127':139
- '19#.#1.145.190':139
- '19#.#1.58.123':139
- '19#.#1.178.214':139
- '19#.#1.140.14':139
- '19#.#1.241.123':139
- '19#.#1.149.66':139
- '19#.#1.67.214':139
- '19#.#1.166.58':139
- '19#.#1.129.243':139
- '19#.#1.138.46':9988
- '19#.#1.168.197':9988
- '19#.#1.88.86':139
- '19#.#1.94.125':139
- '19#.#1.74.211':139
- '19#.#1.252.11':139
- '19#.#1.188.251':139
- '19#.#1.168.118':9988
- '19#.#1.242.206':9988
- '19#.#1.58.123':9988
- '19#.#1.87.236':9988
- '19#.#1.113.87':9988
- '19#.#1.2.215':9988
- '19#.#1.47.33':9988
- '19#.#1.15.113':9988
- '19#.#1.191.15':9988
- '19#.#1.129.243':445
- '19#.#1.88.86':445
- '19#.#1.50.122':139
- '19#.#1.166.58':445
- '19#.#1.252.11':445
- '19#.#1.74.211':445
- '19#.#1.137.146':445
- '19#.#1.188.251':445
- '19#.#1.94.125':445
- '19#.#1.169.235':139
- '19#.#1.59.219':139
- '19#.#1.137.146':139
- '19#.#1.235.137':139
- '19#.#1.210.20':139
- '19#.#1.70.187':139
- '19#.#1.48.32':139
- '19#.#1.20.77':139
- '19#.#1.63.20':139
- '19#.#1.113.87':445
- '19#.#1.15.113':445
- '19#.#1.33.53':445
- '19#.#1.242.206':445
- '19#.#1.191.15':445
- '19#.#1.47.33':445
- '19#.#1.2.215':445
- '19#.41.4.24':445
- '19#.#1.230.113':445
- '19#.#1.149.66':445
- '19#.#1.67.214':445
- '19#.#1.249.127':445
- '19#.#1.178.214':445
- '19#.#1.140.14':445
- '19#.#1.87.236':445
- '19#.#1.168.118':445
- '19#.#1.241.123':445
- '19#.#1.25.242':445
- '19#.#1.77.95':445
- '19#.#1.70.38':9988
- '19#.#1.255.68':445
- '19#.#1.168.197':445
- '19#.#1.143.166':9988
- '19#.#1.120.238':9988
- '19#.#1.198.124':9988
- '19#.#1.212.79':9988
- '19#.#1.102.125':9988
- '19#.#1.35.85':445
- '19#.#1.82.245':445
- '19#.#1.210.82':445
- '19#.#1.177.45':445
- '19#.#1.166.153':445
- '19#.#1.108.247':445
- '19#.#1.37.250':445
- '19#.#1.46.44':445
- '19#.#1.138.46':445