Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '14#.#23.121.245':139
- '14#.#23.21.74':139
- '14#.#23.119.101':445
- '14#.#23.220.12':445
- '14#.#23.100.246':445
- '14#.#23.110.132':139
- '14#.#23.45.185':139
- '14#.#23.35.240':139
- '14#.#23.80.10':139
- '14#.#23.81.64':139
- '14#.#23.241.81':139
- '14#.#23.148.165':445
- '14#.#23.226.120':445
- '14#.#23.234.44':445
- '14#.#23.183.157':445
- '14#.#23.21.110':445
- '14#.#23.25.152':445
- '14#.#23.176.233':445
- '14#.#23.220.136':445
- '14#.#23.6.198':445
- '14#.#23.131.123':445
- '14#.#23.161.234':445
- '14#.#23.154.217':445
- '14#.#23.71.150':139
- '14#.#23.48.25':139
- '14#.#23.30.172':139
- '14#.#23.15.106':139
- '14#.#23.242.68':139
- '14#.#23.34.74':139
- '14#.#23.158.229':139
- '14#.#23.211.5':139
- '14#.#23.41.32':139
- '14#.#23.51.116':139
- '14#.#23.63.159':139
- '14#.#23.253.63':139
- '14#.#23.81.145':139
- '14#.#23.48.102':139
- '14#.#23.52.169':139
- '14#.#23.248.25':139
- '14#.#23.141.62':139
- '14#.#23.26.146':139
- '14#.#23.152.140':139
- '14#.#23.82.191':139
- '14#.#23.58.36':139
- '14#.#23.118.57':139
- '14#.#23.91.185':139
- '14#.#23.227.67':139
- '14#.#23.19.9':445
- '14#.#23.252.34':445
- '14#.#23.167.33':445
- '14#.#23.25.130':445
- '14#.#23.236.93':445
- '14#.#23.99.209':445
- '14#.#23.127.106':445
- '14#.#23.56.54':445
- '14#.#23.53.50':445
- '14#.#23.108.45':445
- '14#.#23.18.76':445
- '14#.#23.19.109':445
- '14#.#23.112.92':445
- '14#.#23.144.134':445
- '14#.#23.94.112':445
- '14#.#23.24.205':445
- '14#.#23.0.207':445
- '14#.#23.116.234':445
- '14#.#23.158.119':445
- '14#.#23.60.131':445
- '14#.#23.40.25':445
- '14#.#23.131.90':445
- '14#.#23.239.125':445
- '14#.#23.30.123':445
- '14#.#23.31.34':445
- '14#.#23.131.123':139
- '14#.#23.220.136':139
- '14#.#23.154.217':139
- '14#.#23.176.233':139
- '14#.#23.161.234':139
- '14#.#23.6.198':139
- '14#.#23.119.101':139
- '14#.#23.92.42':445
- '14#.#23.100.246':139
- '14#.#23.148.165':139
- '14#.#23.220.12':139
- '14#.#23.234.44':139
- '14#.#23.140.192':445
- '14#.#23.245.140':445
- '14#.#23.60.239':445
- '14#.#23.49.11':445
- '14#.#23.21.108':445
- '14#.#23.92.42':139
- '14#.#23.183.157':139
- '14#.#23.226.120':139
- '14#.#23.25.152':139
- '14#.#23.19.9':139
- '14#.#23.21.110':139
- '14#.#23.205.86':139
- '14#.#23.114.1':445
- '14#.#23.61.8':445
- '14#.#23.120.140':445
- '14#.#23.174.114':445
- '14#.#23.129.156':445
- '14#.#23.3.22':445
- '14#.#23.246.186':139
- '14#.#23.251.246':139
- '14#.#23.129.64':445
- '14#.#23.80.177':445
- '14#.#23.78.81':445
- '14#.#23.58.96':445
- '14#.#23.129.64':139
- '14#.#23.12.99':445
- '14#.#23.78.81':139
- '14#.#23.3.22':139
- '14#.#23.80.177':139
- '14#.#23.125.192':445
- '14#.#23.26.103':445
- '14#.#23.190.131':445
- '14#.#23.114.26':445
- '14#.#23.180.86':445
- '14#.#23.25.138':445
- '14#.#23.213.251':139
- '14#.#23.80.21':139
- '14#.#23.136.125':139
- '14#.#23.196.242':139
- '14#.#23.80.57':139
- '14#.#23.39.252':139
- '14#.#23.152.10':139
- '14#.#23.52.189':139
- '14#.#23.15.131':139
- '14#.#23.120.25':139
- '14#.#23.1.128':139
- '14#.#23.58.159':139
- '14#.#23.189.182':139
- '14#.#23.185.24':139
- '14#.#23.140.185':139
- '14#.#23.181.140':139
- '14#.#23.181.52':139
- '14#.#23.219.244':139
- '14#.#23.6.224':139
- '14#.#23.43.64':139
- '14#.#23.118.43':139
- '14#.#23.64.153':139
- '14#.#23.150.230':139
- '14#.#23.24.72':139
- '14#.#23.61.8':139
- '14#.#23.152.140':445
- '14#.#23.91.185':445
- '14#.#23.52.169':445
- '14#.#23.248.25':445
- '14#.#23.48.102':445
- '14#.#23.227.67':445
- '14#.#23.81.145':445
- '14#.#23.242.68':445
- '14#.#23.58.36':445
- '14#.#23.118.57':445
- '14#.#23.82.191':445
- '14#.#23.26.146':445
- '14#.#23.110.132':445
- '14#.#23.81.64':445
- '14#.#23.21.74':445
- '14#.#23.133.125':139
- '14#.#23.121.245':445
- '14#.#23.241.81':445
- '14#.#23.71.150':445
- '14#.#23.141.62':445
- '14#.#23.35.240':445
- '14#.#23.80.10':445
- '14#.#23.45.185':445
- '14#.#23.34.74':445
- '14#.#23.114.26':139
- '14#.#23.26.103':139
- '14#.#23.25.138':139
- '14#.#23.125.192':139
- '14#.#23.180.86':139
- '14#.#23.190.131':139
- '14#.#23.120.140':139
- '14#.#23.114.1':139
- '14#.#23.129.156':139
- '14#.#23.58.96':139
- '14#.#23.174.114':139
- '14#.#23.12.99':139
- '14#.#23.158.229':445
- '14#.#23.63.159':445
- '14#.#23.30.172':445
- '14#.#23.15.106':445
- '14#.#23.48.25':445
- '14#.#23.253.63':445
- '14#.#23.205.86':445
- '14#.#23.133.125':445
- '14#.#23.41.32':445
- '14#.#23.51.116':445
- '14#.#23.211.5':445
- '14#.#23.161.134':445
- '14#.#23.115.198':445
- '14#.#23.148.231':445
- '14#.#23.139.122':445
- '14#.#23.215.182':445
- '14#.#23.67.180':445
- '14#.#23.139.193':445
- '14#.#23.109.41':445
- '14#.#23.40.194':445
- '14#.#23.86.233':445
- '14#.#23.109.230':445
- '14#.#23.4.110':445
- '14#.#23.28.95':445
- '14#.#23.97.9':445
- '14#.#23.221.85':445
- '14#.#23.145.99':139
- '14#.#23.239.53':139
- '14#.#23.136.185':139
- '14#.#23.68.176':445
- '14#.#23.177.13':445
- '14#.#23.188.176':445
- '14#.#23.13.123':445
- '14#.#23.100.35':445
- '14#.#23.154.213':445
- '14#.#23.50.140':445
- '14#.#23.223.166':445
- '14#.#23.131.13':445
- '14#.#23.19.168':445
- '14#.#23.170.251':445
- '14#.#23.76.123':445
- '14#.#23.136.64':445
- '14#.#23.29.143':445
- '14#.#23.112.242':445
- '14#.#23.197.102':445
- '14#.#23.28.113':445
- '14#.#23.217.35':445
- '14#.#23.55.234':445
- '14#.#23.101.50':445
- '14#.#23.200.13':445
- '14#.#23.185.83':445
- '14#.#23.14.54':445
- '14#.#23.188.241':445
- '14#.#23.183.75':445
- '14#.#23.238.228':445
- '14#.#23.52.75':445
- '14#.#23.74.100':445
- '14#.#23.253.234':445
- '14#.#23.229.225':445
- '14#.#23.48.60':139
- '14#.#23.109.230':139
- '14#.#23.4.110':139
- '14#.#23.139.193':139
- '14#.#23.115.198':139
- '14#.#23.148.231':139
- '14#.#23.86.233':139
- '14#.#23.14.54':139
- '14#.#23.188.241':139
- '14#.#23.50.140':139
- '14#.#23.109.41':139
- '14#.#23.40.194':139
- '14#.#23.139.122':139
- '14#.#23.100.35':139
- '14#.#23.154.213':139
- '14#.#23.68.176':139
- '14#.#23.221.85':139
- '14#.#23.97.9':139
- '14#.#23.13.123':139
- '14#.#23.215.182':139
- '14#.#23.67.180':139
- '14#.#23.28.95':139
- '14#.#23.177.13':139
- '14#.#23.188.176':139
- '14#.#23.185.83':139
- '14#.#23.28.113':139
- '14#.#23.217.35':139
- '14#.#23.136.64':139
- '14#.#23.223.166':139
- '14#.#23.131.13':139
- '14#.#23.112.242':139
- '14#.#23.137.113':139
- '14#.#23.222.252':139
- '14#.#23.29.143':139
- '14#.#23.184.140':139
- '14#.#23.197.102':139
- '14#.#23.19.168':139
- '14#.#23.253.234':139
- '14#.#23.170.251':139
- '14#.#23.183.75':139
- '14#.#23.101.50':139
- '14#.#23.200.13':139
- '14#.#23.52.75':139
- '14#.#23.74.100':139
- '14#.#23.76.123':139
- '14#.#23.238.228':139
- '14#.#23.55.234':139
- '14#.#23.229.225':139
- '14#.#23.184.140':445
- '14#.#23.116.234':139
- '14#.#23.24.205':139
- '14#.#23.0.207':139
- '14#.#23.152.78':139
- '14#.#23.161.134':139
- '14#.#23.144.134':139
- '14#.#23.30.123':139
- '14#.#23.131.90':139
- '14#.#23.239.125':139
- '14#.#23.94.112':139
- '14#.#23.158.119':139
- '14#.#23.18.98':139
- '14#.#23.72.13':445
- '14#.#23.175.68':445
- '14#.#23.226.174':445
- '14#.#23.46.192':445
- '14#.#23.175.53':445
- '14#.#23.166.150':445
- '14#.#23.69.204':139
- '14#.#23.0.87':139
- '14#.#23.168.90':445
- '14#.#23.204.70':445
- '14#.#23.10.156':445
- '14#.#23.60.131':139
- '14#.#23.21.108':139
- '14#.#23.60.239':139
- '14#.#23.49.11':139
- '14#.#23.53.50':139
- '14#.#23.31.34':139
- '14#.#23.140.192':139
- '14#.#23.18.98':445
- '14#.#23.152.78':445
- '14#.#23.0.87':445
- '14#.#23.245.140':139
- '14#.#23.69.204':445
- '14#.#23.56.54':139
- '14#.#23.99.209':139
- '14#.#23.25.130':139
- '14#.#23.236.93':139
- '14#.#23.40.25':139
- '14#.#23.112.92':139
- '14#.#23.252.34':139
- '14#.#23.19.109':139
- '14#.#23.108.45':139
- '14#.#23.18.76':139
- '14#.#23.167.33':139
- '14#.#23.127.106':139
- '14#.#23.135.139':445
- '14#.#23.4.110':9988
- '14#.#23.86.233':9988
- '14#.#23.109.230':9988
- '14#.#23.148.231':9988
- '14#.#23.139.193':9988
- '14#.#23.14.54':9988
- '14#.#23.238.228':9988
- '14#.#23.28.113':9988
- '14#.#23.229.225':9988
- '14#.#23.183.75':9988
- '14#.#23.253.234':9988
- '14#.#23.139.122':9988
- '14#.#23.239.53':445
- '14#.#23.136.185':445
- '14#.#23.48.60':445
- '14#.#23.137.113':445
- '14#.#23.222.252':445
- '14#.#23.145.99':445
- '14#.#23.177.13':9988
- '14#.#23.188.176':9988
- '14#.#23.154.213':9988
- '14#.#23.100.35':9988
- '14#.#23.13.123':9988
- '14#.#23.251.205':139
- '14#.#23.168.90':139
- '14#.#23.251.205':445
- '14#.#23.10.156':139
- '14#.#23.166.150':139
- '14#.#23.204.70':139
- '14#.#23.110.146':445
- '14#.#23.23.152':445
- '14#.#23.228.23':445
- '14#.#23.151.136':445
- '14#.#23.64.69':445
- '14#.#23.136.76':445
- '14#.#23.175.68':139
- '14#.#23.151.136':139
- '14#.#23.23.152':139
- '14#.#23.136.76':139
- '14#.#23.110.146':139
- '14#.#23.64.69':139
- '14#.#23.228.23':139
- '14#.#23.226.174':139
- '14#.#23.72.13':139
- '14#.#23.175.53':139
- '14#.#23.135.139':139
- '14#.#23.46.192':139