Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '13#.#.159.135':139
- '13#.#.105.14':139
- '13#.#.42.208':139
- '13#.#.34.139':139
- '13#.#.153.162':139
- '13#.6.39.16':139
- '13#.#.112.203':139
- '13#.#.110.76':139
- '13#.#.118.161':139
- '13#.#.155.229':139
- '13#.#.138.175':139
- '13#.#.35.243':139
- '13#.#.124.13':139
- '13#.#.242.252':139
- '13#.6.87.81':139
- '13#.#.50.220':139
- '13#.#.224.17':139
- '13#.#.161.50':139
- '13#.6.78.75':139
- '13#.#.182.227':139
- '13#.#.158.55':139
- '13#.#.158.55':445
- '13#.6.78.75':445
- '13#.#.182.227':445
- '13#.#.35.243':445
- '13#.#.124.13':445
- '13#.#.34.139':445
- '13#.#.153.162':445
- '13#.#.138.175':445
- '13#.#.224.17':445
- '13#.#.161.50':445
- '13#.#.242.252':445
- '13#.#.192.162':445
- '13#.#.181.93':445
- '13#.#.40.101':139
- '13#.#.232.112':139
- '13#.#.38.232':139
- '13#.6.87.81':445
- '13#.#.50.220':445
- '13#.6.5.163':445
- '13#.#.31.105':445
- '13#.#.137.225':445
- '13#.#.159.157':139
- '13#.6.2.69':445
- '13#.#.104.21':139
- '13#.#.197.55':139
- '13#.#.169.249':139
- '13#.#.147.119':445
- '13#.#.42.147':445
- '13#.#.120.53':445
- '13#.#.22.160':445
- '13#.6.53.81':445
- '13#.6.56.0':139
- '13#.#.51.206':139
- '13#.#.159.237':139
- '13#.6.238.5':139
- '13#.#.146.117':139
- '13#.#.196.46':139
- '13#.#.211.221':139
- '13#.#.107.18':139
- '13#.6.50.73':139
- '13#.#.184.177':139
- '13#.#.254.192':139
- '13#.#.104.21':445
- '13#.#.159.157':445
- '13#.#.169.249':445
- '13#.6.56.0':445
- '13#.#.197.55':445
- '13#.#.137.225':139
- '13#.6.5.163':139
- '13#.#.31.105':139
- '13#.#.192.162':139
- '13#.#.181.93':139
- '13#.#.107.18':445
- '13#.6.238.5':445
- '13#.#.51.206':445
- '13#.#.196.46':445
- '13#.#.180.10':445
- '13#.#.146.117':445
- '13#.6.50.73':445
- '13#.#.211.221':445
- '13#.#.254.192':445
- '13#.#.159.237':445
- '13#.#.184.177':445
- '13#.#.182.44':139
- '13#.#.158.62':139
- '13#.#.76.135':139
- '13#.#.54.126':445
- '13#.#.52.208':445
- '13#.#.58.189':139
- '13#.#.182.58':139
- '13#.#.213.157':139
- '13#.#.85.171':139
- '13#.6.98.86':139
- '13#.6.127.3':445
- '13#.6.72.86':445
- '13#.6.11.69':445
- '13#.#.46.194':445
- '13#.#.187.137':445
- '13#.#.156.186':445
- '13#.#.54.220':445
- '13#.6.129.9':445
- '13#.6.44.76':445
- '13#.#.97.103':445
- '13#.#.152.136':445
- '13#.#.103.126':139
- '13#.6.77.32':139
- '13#.#.126.208':139
- '13#.#.205.49':139
- '13#.#.207.11':139
- '13#.#.32.117':139
- '13#.#.100.50':139
- '13#.#.19.187':139
- '13#.#.250.205':139
- '13#.#.50.100':139
- '13#.6.49.77':139
- '13#.#.132.223':139
- '13#.#.100.59':139
- '13#.#.12.188':139
- '13#.#.221.164':139
- '13#.6.21.57':139
- '13#.#.178.220':139
- '13#.#.76.178':139
- '13#.#.207.73':139
- '13#.#.109.188':139
- '13#.#.97.135':139
- '13#.#.251.119':139
- '13#.#.67.141':139
- '13#.#.254.24':139
- '13#.#.215.67':139
- '13#.#.75.214':139
- '13#.#.137.21':139
- '13#.#.187.137':139
- '13#.#.252.199':139
- '13#.6.7.99':139
- '13#.#.217.16':139
- '13#.#.40.101':445
- '13#.#.118.161':445
- '13#.#.155.229':445
- '13#.#.105.14':445
- '13#.#.42.208':445
- '13#.#.159.135':445
- '13#.#.232.112':445
- '13#.#.38.232':445
- '13#.#.112.203':445
- '13#.#.110.76':445
- '13#.6.39.16':445
- '13#.#.254.24':445
- '13#.#.251.119':445
- '13#.#.75.214':445
- '13#.#.52.208':139
- '13#.#.215.67':445
- '13#.#.252.199':445
- '13#.#.137.21':445
- '13#.#.217.16':445
- '13#.#.67.141':445
- '13#.6.7.99':445
- '13#.#.54.126':139
- '13#.6.11.69':139
- '13#.#.97.103':139
- '13#.6.72.86':139
- '13#.#.156.186':139
- '13#.#.46.194':139
- '13#.6.129.9':139
- '13#.6.127.3':139
- '13#.#.54.220':139
- '13#.#.152.136':139
- '13#.6.44.76':139
- '13#.#.180.10':139
- '13#.#.59.100':445
- '13#.#.209.247':445
- '13#.#.67.240':445
- '13#.6.23.91':445
- '13#.#.225.23':445
- '13#.#.98.119':445
- '13#.#.24.115':445
- '13#.#.145.208':445
- '13#.#.226.49':445
- '13#.#.36.159':445
- '13#.#.90.183':445
- '13#.#.120.195':139
- '13#.6.37.68':139
- '13#.#.102.80':139
- '13#.#.22.223':139
- '13#.6.80.22':139
- '13#.#.116.245':139
- '13#.#.126.51':445
- '13#.#.245.99':139
- '13#.#.214.231':139
- '13#.#.74.191':139
- '13#.#.167.122':445
- '13#.#.146.167':445
- '13#.6.32.27':445
- '13#.#.128.202':445
- '13#.6.79.12':445
- '13#.6.52.15':445
- '13#.#.229.13':445
- '13#.6.19.34':445
- '13#.#.153.146':445
- '13#.6.32.4':445
- '13#.#.137.207':445
- '13#.#.13.201':445
- '13#.#.150.44':445
- '13#.#.17.246':445
- '13#.6.37.72':445
- '13#.#.162.77':445
- '13#.#.114.243':445
- '13#.6.49.59':445
- '13#.#.159.144':445
- '13#.#.172.35':445
- '13#.#.130.226':445
- '13#.#.17.246':139
- '13#.#.13.201':139
- '13#.#.162.77':139
- '13#.#.24.115':139
- '13#.6.37.72':139
- '13#.#.159.144':139
- '13#.#.114.243':139
- '13#.#.130.226':139
- '13#.#.150.44':139
- '13#.#.172.35':139
- '13#.#.98.119':139
- '13#.#.225.23':139
- '13#.#.67.240':139
- '13#.6.23.91':139
- '13#.#.90.183':139
- '13#.#.126.51':139
- '13#.#.36.159':139
- '13#.#.145.208':139
- '13#.#.226.49':139
- '13#.#.59.100':139
- '13#.#.209.247':139
- '13#.#.124.65':139
- '13#.#.108.174':139
- '13#.#.110.50':139
- '13#.#.229.13':139
- '13#.#.97.230':139
- '13#.#.167.38':139
- '13#.#.114.201':139
- '13#.#.112.214':139
- '13#.6.46.56':139
- '13#.#.213.252':139
- '13#.6.52.15':139
- '13#.6.79.12':139
- '13#.6.32.27':139
- '13#.#.128.202':139
- '13#.6.49.59':139
- '13#.#.137.207':139
- '13#.6.32.4':139
- '13#.6.19.34':139
- '13#.#.153.146':139
- '13#.#.167.122':139
- '13#.#.146.167':139
- '13#.#.117.165':445
- '13#.#.193.152':445
- '13#.#.81.117':445
- '13#.#.50.182':139
- '13#.#.96.178':139
- '13#.6.63.55':445
- '13#.6.56.39':445
- '13#.#.154.166':445
- '13#.#.170.121':445
- '13#.6.31.38':445
- '13#.#.220.79':139
- '13#.6.24.61':139
- '13#.#.183.83':139
- '13#.6.13.85':139
- '13#.#.104.41':139
- '13#.#.88.108':139
- '13#.#.51.220':139
- '13#.#.31.208':139
- '13#.6.23.93':139
- '13#.#.157.183':139
- '13#.#.169.34':139
- '13#.#.96.178':445
- '13#.6.2.69':139
- '13#.#.50.182':445
- '13#.#.31.208':445
- '13#.#.220.79':445
- '13#.#.147.119':139
- '13#.#.42.147':139
- '13#.#.120.53':139
- '13#.#.22.160':139
- '13#.6.53.81':139
- '13#.#.51.220':445
- '13#.#.88.108':445
- '13#.6.13.85':445
- '13#.#.104.41':445
- '13#.#.189.117':445
- '13#.6.0.151':445
- '13#.#.169.34':445
- '13#.6.23.93':445
- '13#.#.157.183':445
- '13#.6.24.61':445
- '13#.#.183.83':445
- '13#.#.214.231':445
- '13#.#.74.191':445
- '13#.6.37.68':445
- '13#.#.102.80':445
- '13#.#.120.195':445
- '13#.#.67.240':9988
- '13#.#.59.100':9988
- '13#.6.23.91':9988
- '13#.#.245.99':445
- '13#.#.116.245':445
- '13#.6.80.22':445
- '13#.#.108.174':445
- '13#.6.46.56':445
- '13#.#.124.65':445
- '13#.#.97.230':445
- '13#.#.110.50':445
- '13#.#.114.201':445
- '13#.#.22.223':445
- '13#.#.167.38':445
- '13#.#.213.252':445
- '13#.#.112.214':445
- '13#.#.170.121':139
- '13#.6.31.38':139
- '13#.#.193.152':139
- '13#.#.81.117':139
- '13#.#.117.165':139
- '13#.#.189.117':139
- '13#.6.0.151':139
- '13#.6.56.39':139
- '13#.#.154.166':139
- '13#.6.63.55':139
- '13#.6.52.15':9988
- '13#.#.13.201':9988
- '13#.#.150.44':9988
- '13#.#.24.115':9988
- '13#.#.36.159':9988
- '13#.#.98.119':9988
- '13#.6.19.34':9988
- '13#.#.124.65':9988
- '13#.6.32.4':9988
- '13#.#.172.35':9988
- '13#.#.114.243':9988