Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '62.##.208.219':445
- '62.##.68.211':445
- '62.##.187.127':445
- '62.##.149.17':445
- '62.##.137.75':445
- '62.##.189.250':445
- '62.##.235.220':445
- '62.##.40.222':445
- '62.##.110.104':445
- '62.##.153.171':445
- '62.#6.93.98':445
- '62.##.140.82':445
- '62.#6.49.27':445
- '62.##.109.63':445
- '62.##.145.15':445
- '62.##.107.145':445
- '62.##.112.166':445
- '62.#6.75.60':445
- '62.##.153.42':445
- '62.##.105.37':445
- '62.#6.1.19':445
- '62.##.220.138':445
- '62.##.52.194':445
- '62.#6.56.88':445
- '62.##.144.99':445
- '62.##.122.163':445
- '62.##.91.230':445
- '62.##.53.144':445
- '62.##.163.53':445
- '62.##.44.127':445
- '62.##.245.252':445
- '62.#6.8.102':445
- '62.#6.61.9':445
- '62.##.252.106':445
- '62.##.228.217':445
- '62.##.101.30':445
- '62.##.160.69':445
- '62.##.32.229':445
- '62.#6.2.214':445
- '62.##.228.217':139
- '62.##.32.229':139
- '62.##.245.252':139
- '62.#6.8.102':139
- '62.#6.2.214':139
- '62.##.44.127':139
- '62.##.52.194':139
- '62.##.101.30':139
- '62.##.160.69':139
- '62.##.252.106':139
- '62.##.137.75':139
- '62.##.40.222':139
- '62.##.208.219':139
- '62.##.68.211':139
- '62.##.110.104':139
- '62.##.105.37':139
- '62.#6.61.9':139
- '62.##.189.250':139
- '62.##.235.220':139
- '62.#6.56.88':139
- '62.##.175.249':139
- '62.##.63.108':139
- '62.##.216.117':139
- '62.##.196.246':139
- '62.##.54.200':139
- '62.##.30.124':445
- '62.##.115.242':445
- '62.##.223.133':445
- '62.##.222.159':445
- '62.##.128.211':139
- '62.##.144.99':139
- '62.##.53.144':139
- '62.#6.1.19':139
- '62.##.220.138':139
- '62.##.163.53':139
- '62.#6.68.70':139
- '62.#6.26.44':139
- '62.##.122.163':139
- '62.##.91.230':139
- '62.#6.68.70':445
- '62.##.18.177':139
- '62.#6.11.19':139
- '62.##.184.182':139
- '62.##.104.200':139
- '62.#6.4.11':139
- '62.##.85.166':139
- '62.#6.26.26':139
- '62.##.210.152':139
- '62.##.81.128':139
- '62.##.146.172':139
- '62.##.209.49':139
- '62.##.188.55':139
- '62.#6.44.29':139
- '62.#6.50.44':139
- '62.##.23.177':139
- '62.##.241.214':139
- '62.##.64.181':139
- '62.##.249.90':139
- '62.##.214.177':139
- '62.##.250.209':445
- '62.##.248.251':445
- '62.#6.31.45':445
- '62.##.156.162':445
- '62.##.153.36':445
- '62.##.181.174':445
- '62.##.208.155':445
- '62.##.130.94':445
- '62.##.120.181':445
- '62.#6.9.4':445
- '62.##.54.144':445
- '62.#6.90.33':445
- '62.##.74.185':445
- '62.#6.68.93':445
- '62.##.155.50':445
- '62.##.228.241':445
- '62.##.169.18':445
- '62.#6.2.162':445
- '62.#6.57.2':445
- '62.##.163.176':445
- '62.##.228.241':139
- '62.#6.57.2':139
- '62.#6.90.33':139
- '62.##.74.185':139
- '62.##.163.176':139
- '62.##.54.144':139
- '62.##.156.162':139
- '62.##.169.18':139
- '62.#6.2.162':139
- '62.##.155.50':139
- '62.##.216.117':445
- '62.##.196.246':445
- '62.#6.26.44':445
- '62.##.128.211':445
- '62.##.175.249':445
- '62.##.250.209':139
- '62.#6.68.93':139
- '62.##.63.108':445
- '62.##.54.200':445
- '62.##.153.36':139
- '62.#6.97.36':139
- '62.##.138.96':139
- '62.##.44.161':139
- '62.#6.36.44':139
- '62.##.222.137':139
- '62.##.24.204':139
- '62.#6.29.44':139
- '62.##.203.222':139
- '62.##.159.203':139
- '62.##.103.241':139
- '62.##.181.174':139
- '62.##.120.181':139
- '62.##.248.251':139
- '62.#6.31.45':139
- '62.#6.9.4':139
- '62.##.127.32':139
- '62.##.200.146':139
- '62.##.208.155':139
- '62.##.130.94':139
- '62.##.24.205':445
- '62.##.114.87':445
- '62.##.12.154':139
- '62.##.63.132':139
- '62.#6.37.47':445
- '62.##.186.182':445
- '62.##.87.186':445
- '62.##.105.36':445
- '62.##.119.79':445
- '62.##.118.251':139
- '62.##.201.96':139
- '62.##.191.106':139
- '62.#6.3.130':139
- '62.##.53.125':139
- '62.##.135.192':139
- '62.##.59.156':139
- '62.##.77.127':139
- '62.#6.41.61':139
- '62.##.73.130':139
- '62.##.76.229':445
- '62.##.245.17':445
- '62.##.233.103':445
- '62.##.229.31':445
- '62.##.11.163':445
- '62.##.123.250':445
- '62.#6.217.2':445
- '62.##.124.154':445
- '62.##.28.223':445
- '62.#6.15.2':445
- '62.##.32.124':445
- '62.##.104.61':445
- '62.##.69.215':445
- '62.##.195.110':445
- '62.##.248.195':445
- '62.##.131.248':445
- '62.##.226.212':445
- '62.##.52.237':445
- '62.##.12.130':445
- '62.##.58.125':445
- '62.##.131.248':139
- '62.##.12.130':139
- '62.##.104.61':139
- '62.##.69.215':139
- '62.##.58.125':139
- '62.##.32.124':139
- '62.##.229.31':139
- '62.##.226.212':139
- '62.##.52.237':139
- '62.##.248.195':139
- '62.#6.37.47':139
- '62.##.105.36':139
- '62.##.114.87':139
- '62.##.24.205':139
- '62.##.119.79':139
- '62.##.76.229':139
- '62.##.195.110':139
- '62.##.186.182':139
- '62.##.87.186':139
- '62.##.11.163':139
- '62.##.188.30':139
- '62.##.149.84':139
- '62.##.109.254':139
- '62.#6.50.34':139
- '62.##.109.187':139
- '62.#6.83.36':139
- '62.##.163.193':139
- '62.##.74.199':139
- '62.##.152.154':139
- '62.##.116.23':139
- '62.##.123.250':139
- '62.##.28.223':139
- '62.##.245.17':139
- '62.##.233.103':139
- '62.#6.15.2':139
- '62.#6.49.61':139
- '62.#6.101.1':139
- '62.#6.217.2':139
- '62.##.124.154':139
- '62.#6.49.61':445
- '62.##.160.192':139
- '62.##.139.10':139
- '62.#6.15.1':139
- '62.##.85.240':139
- '62.##.12.224':445
- '62.##.208.202':445
- '62.##.29.186':445
- '62.##.73.169':445
- '62.##.244.171':445
- '62.##.29.186':139
- '62.#6.217.2':9988
- '62.##.124.154':9988
- '62.##.11.163':9988
- '62.##.123.250':9988
- '62.#6.101.1':9988
- '62.##.244.171':139
- '62.##.208.202':139
- '62.##.12.224':139
- '62.##.73.169':139
- '62.#6.15.1':445
- '62.#6.75.60':139
- '62.##.153.42':139
- '62.##.140.82':139
- '62.##.145.15':139
- '62.##.107.145':139
- '62.##.187.127':139
- '62.##.149.17':139
- '62.##.112.166':139
- '62.##.153.171':139
- '62.#6.93.98':139
- '62.##.139.10':445
- '62.##.223.133':139
- '62.##.85.240':445
- '62.##.160.192':445
- '62.##.222.159':139
- '62.#6.49.27':139
- '62.##.109.63':139
- '62.##.30.124':139
- '62.##.115.242':139
- '62.##.53.125':445
- '62.##.201.96':445
- '62.##.163.193':445
- '62.#6.3.130':445
- '62.##.191.106':445
- '62.##.73.130':445
- '62.##.59.156':445
- '62.##.135.192':445
- '62.#6.41.61':445
- '62.#6.83.36':445
- '62.##.109.254':445
- '62.#6.50.34':445
- '62.#6.101.1':445
- '62.##.116.23':445
- '62.##.188.30':445
- '62.##.74.199':445
- '62.##.152.154':445
- '62.##.149.84':445
- '62.##.109.187':445
- '62.##.77.127':445
- '62.##.131.248':9988
- '62.##.12.130':9988
- '62.##.76.229':9988
- '62.##.69.215':9988
- '62.##.58.125':9988
- '62.##.32.124':9988
- '62.##.229.31':9988
- '62.##.226.212':9988
- '62.##.52.237':9988
- '62.##.87.186':9988
- '62.##.63.132':445
- '62.##.114.87':9988
- '62.##.118.251':445
- '62.##.12.154':445
- '62.##.24.205':9988
- '62.##.119.79':9988
- '62.##.186.182':9988
- '62.#6.37.47':9988
- '62.##.105.36':9988