Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '22#.#10.146.18':445
- '22#.#10.54.97':445
- '22#.#10.231.42':445
- '22#.#10.69.203':445
- '22#.#10.21.121':445
- '22#.#10.139.21':445
- '22#.#10.168.65':445
- '22#.#10.170.11':445
- '22#.#10.42.221':445
- '22#.#10.154.150':139
- '22#.#10.5.177':139
- '22#.#10.187.52':139
- '22#.#10.149.62':139
- '22#.#10.33.172':445
- '22#.#10.56.17':445
- '22#.#10.98.124':445
- '22#.#10.172.59':445
- '22#.#10.155.51':445
- '22#.#10.48.128':445
- '22#.#10.187.52':445
- '22#.#10.133.186':445
- '22#.#10.46.133':445
- '22#.#10.5.177':445
- '22#.#10.155.213':139
- '22#.#10.149.62':445
- '22#.#10.154.150':445
- '22#.#10.186.96':445
- '22#.#10.97.90':445
- '22#.#10.127.254':445
- '22#.#10.162.192':445
- '22#.#10.21.111':445
- '22#.#10.21.18':445
- '22#.#10.96.220':445
- '22#.#10.28.128':445
- '22#.#10.142.146':445
- '22#.#10.33.172':139
- '22#.#10.56.17':139
- '22#.#10.98.124':139
- '22#.#10.172.59':139
- '22#.#10.69.203':139
- '22#.#10.146.18':139
- '22#.#10.42.221':139
- '22#.#10.231.42':139
- '22#.#10.90.206':445
- '22#.#10.53.137':445
- '22#.#10.103.82':445
- '22#.#10.27.18':445
- '22#.#10.23.150':445
- '22#.#10.37.132':445
- '22#.#10.164.22':445
- '22#.#10.144.102':445
- '22#.#10.120.144':445
- '22#.#10.54.97':139
- '22#.#10.21.18':139
- '22#.#10.96.220':139
- '22#.#10.28.128':139
- '22#.#10.142.146':139
- '22#.#10.46.133':139
- '22#.#10.48.128':139
- '22#.#10.186.96':139
- '22#.#10.133.186':139
- '22#.#10.127.254':139
- '22#.#10.21.121':139
- '22#.#10.139.21':139
- '22#.#10.168.65':139
- '22#.#10.170.11':139
- '22#.#10.21.111':139
- '22#.#10.97.90':139
- '22#.#10.155.51':139
- '22#.#10.162.192':139
- '22#.#10.36.102':139
- '22#.#10.148.132':139
- '22#.#10.78.249':139
- '22#.#10.187.249':139
- '22#.#10.141.235':139
- '22#.#10.237.137':139
- '22#.#10.100.254':139
- '22#.#10.28.180':139
- '22#.#10.5.12':139
- '22#.#10.127.22':139
- '22#.#10.254.118':445
- '22#.#10.82.81':445
- '22#.#10.194.115':445
- '22#.#10.118.132':445
- '22#.#10.234.162':139
- '22#.#10.83.75':139
- '22#.#10.121.134':445
- '22#.#10.163.66':139
- '22#.#10.117.156':139
- '22#.#10.245.194':139
- '22#.#10.44.207':139
- '22#.#10.170.10':139
- '22#.#10.94.27':139
- '22#.#10.198.94':139
- '22#.#10.249.198':139
- '22#.#10.106.184':139
- '22#.#10.104.81':139
- '22#.#10.10.140':139
- '22#.#10.190.85':139
- '22#.#10.106.55':139
- '22#.#10.217.130':139
- '22#.#10.120.70':139
- '22#.#10.49.242':139
- '22#.#10.38.27':139
- '22#.#10.174.110':139
- '22#.#10.153.187':139
- '22#.#10.179.196':139
- '22#.#10.124.44':139
- '22#.#10.249.150':139
- '22#.#10.114.89':139
- '22#.#10.118.132':139
- '22#.#10.254.118':139
- '22#.#10.182.14':139
- '22#.#10.194.115':139
- '22#.#10.151.87':139
- '22#.#10.49.30':139
- '22#.#10.221.18':139
- '22#.#10.220.50':139
- '22#.#10.123.158':139
- '22#.#10.61.23':139
- '22#.#10.50.30':139
- '22#.#10.51.211':139
- '22#.#10.62.35':139
- '22#.#10.82.81':139
- '22#.#10.151.87':445
- '22#.#10.249.150':445
- '22#.#10.61.23':445
- '22#.#10.50.30':445
- '22#.#10.124.44':445
- '22#.#10.182.14':445
- '22#.#10.114.89':445
- '22#.#10.179.196':445
- '22#.#10.62.35':445
- '22#.#10.36.102':445
- '22#.#10.220.50':445
- '22#.#10.121.134':139
- '22#.#10.155.213':445
- '22#.#10.221.18':445
- '22#.#10.51.211':445
- '22#.#10.123.158':445
- '22#.#10.49.30':445
- '22#.#10.17.239':445
- '22#.#10.10.29':139
- '22#.#10.5.76':139
- '22#.#10.112.148':139
- '22#.#10.216.144':139
- '22#.#10.35.110':139
- '22#.#10.187.85':445
- '22#.#10.64.39':139
- '22#.#10.180.27':139
- '22#.#10.188.5':139
- '22#.#10.52.144':139
- '22#.#10.199.5':139
- '22#.#10.236.69':139
- '22#.#10.143.236':139
- '22#.#10.161.77':139
- '22#.#10.5.192':139
- '22#.#10.208.46':139
- '22#.#10.123.207':139
- '22#.#10.46.99':445
- '22#.#10.175.91':445
- '22#.#10.1.85':445
- '22#.#10.18.91':445
- '22#.#10.218.254':445
- '22#.#10.138.124':445
- '22#.#10.60.80':445
- '22#.#10.244.90':445
- '22#.#10.7.73':445
- '22#.#10.12.210':445
- '22#.#10.191.166':445
- '22#.#10.166.187':445
- '22#.#10.81.93':445
- '22#.#10.101.88':445
- '22#.#10.213.127':445
- '22#.#10.125.95':445
- '22#.#10.96.119':445
- '22#.#10.38.158':445
- '22#.#10.18.91':139
- '22#.#10.218.254':139
- '22#.#10.125.95':139
- '22#.#10.12.210':139
- '22#.#10.244.90':139
- '22#.#10.7.73':139
- '22#.#10.175.91':139
- '22#.#10.1.85':139
- '22#.#10.213.127':139
- '22#.#10.46.99':139
- '22#.#10.101.88':139
- '22#.#10.191.166':139
- '22#.#10.187.85':139
- '22#.#10.96.119':139
- '22#.#10.38.158':139
- '22#.#10.166.187':139
- '22#.#10.81.93':139
- '22#.#10.138.124':139
- '22#.#10.47.119':139
- '22#.#10.255.218':139
- '22#.#10.205.65':139
- '22#.#10.20.220':139
- '22#.#10.165.46':139
- '22#.#10.244.107':139
- '22#.#10.75.159':139
- '22#.#10.2.191':139
- '22#.#10.206.243':139
- '22#.#10.40.177':139
- '22#.#10.245.13':139
- '22#.#10.60.80':139
- '22#.#10.52.84':139
- '22#.#10.192.178':139
- '22#.#10.66.222':139
- '22#.#10.45.12':139
- '22#.#10.196.18':139
- '22#.#10.52.84':445
- '22#.#10.225.112':139
- '22#.#10.20.162':139
- '22#.#10.31.237':139
- '22#.#10.83.206':139
- '22#.#10.27.18':139
- '22#.#10.23.150':139
- '22#.#10.238.167':139
- '22#.#10.17.239':139
- '22#.#10.94.132':139
- '22#.#10.5.192':9988
- '22#.#10.28.63':139
- '22#.#10.20.220':9988
- '22#.#10.244.107':9988
- '22#.#10.131.241':139
- '22#.#10.178.131':139
- '22#.#10.211.162':139
- '22#.#10.78.110':139
- '22#.#10.53.137':139
- '22#.#10.94.132':445
- '22#.#10.31.237':445
- '22#.#10.131.241':445
- '22#.#10.178.131':445
- '22#.#10.20.162':445
- '22#.#10.238.167':445
- '22#.#10.83.206':445
- '22#.#10.225.112':445
- '22#.#10.78.110':445
- '22#.#10.120.144':139
- '22#.#10.37.132':139
- '22#.#10.103.82':139
- '22#.#10.144.102':139
- '22#.#10.28.63':445
- '22#.#10.211.162':445
- '22#.#10.164.22':139
- '22#.#10.90.206':139
- '22#.#10.75.159':445
- '22#.#10.2.191':445
- '22#.#10.47.119':445
- '22#.#10.255.218':445
- '22#.#10.236.69':445
- '22#.#10.143.236':445
- '22#.#10.165.46':445
- '22#.#10.244.107':445
- '22#.#10.20.220':445
- '22#.#10.45.12':445
- '22#.#10.196.18':445
- '22#.#10.40.177':445
- '22#.#10.245.13':445
- '22#.#10.206.243':445
- '22#.#10.205.65':445
- '22#.#10.192.178':445
- '22#.#10.66.222':445
- '22#.#10.52.144':445
- '22#.#10.180.27':445
- '22#.#10.35.110':445
- '22#.#10.5.76':445
- '22#.#10.64.39':445
- '22#.#10.96.119':9988
- '22#.#10.45.12':9988
- '22#.#10.38.158':9988
- '22#.#10.81.93':9988
- '22#.#10.10.29':445
- '22#.#10.123.207':445
- '22#.#10.161.77':445
- '22#.#10.199.5':445
- '22#.#10.208.46':445
- '22#.#10.112.148':445
- '22#.#10.216.144':445
- '22#.#10.5.192':445
- '22#.#10.188.5':445