Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#14.12.137':139
- '20#.#14.59.95':139
- '20#.#14.43.199':139
- '20#.#14.35.115':139
- '20#.#14.144.181':139
- '20#.#14.131.197':139
- '20#.#14.226.40':139
- '20#.#14.249.42':139
- '20#.#14.186.205':139
- '20#.#14.27.221':139
- '20#.#14.76.16':139
- '20#.#14.54.8':139
- '20#.#14.155.253':139
- '20#.#14.13.148':139
- '20#.#14.4.224':139
- '20#.#14.134.5':139
- '20#.#14.21.233':139
- '20#.#14.224.5':139
- '20#.#14.153.65':445
- '20#.#14.250.19':445
- '20#.#14.97.130':445
- '20#.#14.126.135':445
- '20#.#14.240.249':445
- '20#.#14.18.128':445
- '20#.#14.119.247':445
- '20#.#14.28.241':445
- '20#.#14.128.28':445
- '20#.#14.52.228':139
- '20#.#14.246.92':139
- '20#.#14.25.68':139
- '20#.#14.125.32':139
- '20#.#14.32.127':139
- '20#.#14.94.184':445
- '20#.#14.55.240':445
- '20#.#14.14.128':445
- '20#.#14.215.22':445
- '20#.#14.215.22':139
- '20#.#14.94.184':139
- '20#.#14.130.84':445
- '20#.#14.14.128':139
- '20#.#14.55.240':139
- '20#.#14.153.65':139
- '20#.#14.250.19':139
- '20#.#14.97.130':139
- '20#.#14.126.135':139
- '20#.#14.9.20':445
- '20#.#14.173.9':445
- '20#.#14.21.108':445
- '20#.#14.20.21':445
- '20#.#14.13.104':445
- '20#.#14.130.84':139
- '20#.#14.86.211':445
- '20#.#14.3.184':445
- '20#.#14.86.211':139
- '20#.#14.28.13':139
- '20#.#14.208.196':139
- '20#.#14.68.64':139
- '20#.#14.35.110':139
- '20#.#14.46.71':139
- '20#.#14.248.174':139
- '20#.#14.128.249':139
- '20#.#14.124.177':139
- '20#.#14.50.11':139
- '20#.#14.128.28':139
- '20#.#14.18.128':139
- '20#.#14.240.249':139
- '20#.#14.28.241':139
- '20#.#14.119.247':139
- '20#.#14.13.224':139
- '20#.#14.28.104':139
- '20#.#14.108.244':139
- '20#.#14.192.153':139
- '20#.#14.108.244':445
- '20#.#14.58.46':139
- '20#.#14.109.44':139
- '20#.#14.56.7':139
- '20#.#14.238.42':139
- '20#.#14.231.241':139
- '20#.#14.117.18':139
- '20#.#14.220.204':139
- '20#.#14.135.117':139
- '20#.#14.123.43':139
- '20#.#14.114.117':445
- '20#.#14.112.114':139
- '20#.#14.114.117':139
- '20#.#14.116.76':445
- '20#.#14.64.61':139
- '20#.#14.197.181':139
- '20#.#14.29.95':139
- '20#.#14.108.93':139
- '20#.#14.46.108':139
- '20#.#14.179.112':139
- '20#.#14.64.157':139
- '20#.#14.166.228':139
- '20#.#14.113.8':139
- '20#.#14.171.209':139
- '20#.#14.222.131':139
- '20#.#14.133.204':139
- '20#.#14.121.81':139
- '20#.#14.108.113':139
- '20#.#14.109.220':139
- '20#.#14.180.131':139
- '20#.#14.112.182':139
- '20#.#14.9.95':139
- '20#.#14.37.233':139
- '20#.#14.138.218':139
- '20#.#14.230.68':139
- '20#.#14.198.124':139
- '20#.#14.165.233':139
- '20#.#14.128.249':445
- '20#.#14.54.8':445
- '20#.#14.50.11':445
- '20#.#14.248.174':445
- '20#.#14.155.253':445
- '20#.#14.13.148':445
- '20#.#14.21.233':445
- '20#.#14.27.221':445
- '20#.#14.76.16':445
- '20#.#14.28.104':445
- '20#.#14.68.64':445
- '20#.#14.192.153':445
- '20#.#14.13.224':445
- '20#.#14.35.110':445
- '20#.#14.46.71':445
- '20#.#14.124.177':445
- '20#.#14.28.13':445
- '20#.#14.208.196':445
- '20#.#14.226.40':445
- '20#.#14.25.68':445
- '20#.#14.186.205':445
- '20#.#14.131.197':445
- '20#.#14.125.32':445
- '20#.#14.32.127':445
- '20#.#14.116.76':139
- '20#.#14.52.228':445
- '20#.#14.246.92':445
- '20#.#14.134.5':445
- '20#.#14.43.199':445
- '20#.#14.224.5':445
- '20#.#14.4.224':445
- '20#.#14.35.115':445
- '20#.#14.144.181':445
- '20#.#14.249.42':445
- '20#.#14.12.137':445
- '20#.#14.59.95':445
- '20#.#14.12.216':445
- '20#.#14.10.118':139
- '20#.#14.112.80':139
- '20#.#14.119.161':139
- '20#.#14.226.118':139
- '20#.#14.6.137':139
- '20#.#14.252.140':445
- '20#.#14.172.253':445
- '20#.#14.30.34':139
- '20#.#14.29.61':445
- '20#.#14.171.174':139
- '20#.#14.109.0':139
- '20#.#14.187.92':139
- '20#.#14.241.24':139
- '20#.#14.41.175':139
- '20#.#14.226.171':139
- '20#.#14.160.195':139
- '20#.#14.214.97':139
- '20#.#14.64.16':139
- '20#.#14.58.43':445
- '20#.#14.62.117':445
- '20#.#14.114.135':445
- '20#.#14.188.148':445
- '20#.#14.51.188':445
- '20#.#14.207.27':445
- '20#.#14.220.207':445
- '20#.#14.80.188':445
- '20#.#14.28.59':445
- '20#.#14.85.165':445
- '20#.#14.89.230':445
- '20#.#14.26.102':445
- '20#.#14.9.227':445
- '20#.#14.70.168':445
- '20#.#14.52.205':445
- '20#.#14.61.243':445
- '20#.#14.132.191':445
- '20#.#14.204.152':445
- '20#.#14.61.243':139
- '20#.#14.114.135':139
- '20#.#14.204.152':139
- '20#.#14.52.205':139
- '20#.#14.188.148':139
- '20#.#14.51.188':139
- '20#.#14.80.188':139
- '20#.#14.58.43':139
- '20#.#14.62.117':139
- '20#.#14.29.61':139
- '20#.#14.252.140':139
- '20#.#14.26.102':139
- '20#.#14.172.253':139
- '20#.#14.9.227':139
- '20#.#14.70.168':139
- '20#.#14.132.191':139
- '20#.#14.85.165':139
- '20#.#14.89.230':139
- '20#.#14.9.74':139
- '20#.#14.69.83':139
- '20#.#14.111.14':139
- '20#.#14.127.199':139
- '20#.#14.127.185':139
- '20#.#14.118.214':139
- '20#.#14.92.244':139
- '20#.#14.116.103':139
- '20#.#14.11.28':139
- '20#.#14.220.207':139
- '20#.#14.105.48':139
- '20#.#14.28.59':139
- '20#.#14.207.27':139
- '20#.#14.109.243':139
- '20#.#14.141.76':139
- '20#.#14.119.17':139
- '20#.#14.181.109':139
- '20#.#14.242.180':139
- '20#.#14.105.48':445
- '20#.#14.68.26':139
- '20#.#14.65.28':139
- '20#.#14.240.100':139
- '20#.#14.146.197':139
- '20#.#14.207.178':139
- '20#.#14.16.33':139
- '20#.#14.109.10':139
- '20#.#14.96.101':139
- '20#.#14.1.135':139
- '20#.#14.61.243':9988
- '20#.#14.132.191':9988
- '20#.#14.252.140':9988
- '20#.#14.89.230':9988
- '20#.#14.85.165':9988
- '20#.#14.26.102':9988
- '20#.#14.29.61':9988
- '20#.#14.9.227':9988
- '20#.#14.58.43':9988
- '20#.#14.65.28':445
- '20#.#14.207.178':445
- '20#.#14.146.197':445
- '20#.#14.68.26':445
- '20#.#14.96.101':445
- '20#.#14.109.10':445
- '20#.#14.188.119':445
- '20#.#14.1.135':445
- '20#.#14.16.33':445
- '20#.#14.21.108':139
- '20#.#14.20.21':139
- '20#.#14.188.119':139
- '20#.#14.12.216':139
- '20#.#14.9.20':139
- '20#.#14.3.184':139
- '20#.#14.240.100':445
- '20#.#14.173.9':139
- '20#.#14.13.104':139
- '20#.#14.11.28':445
- '20#.#14.118.214':445
- '20#.#14.127.185':445
- '20#.#14.116.103':445
- '20#.#14.92.244':445
- '20#.#14.171.174':445
- '20#.#14.109.0':445
- '20#.#14.187.92':445
- '20#.#14.241.24':445
- '20#.#14.242.180':445
- '20#.#14.141.76':445
- '20#.#14.109.243':445
- '20#.#14.181.109':445
- '20#.#14.119.17':445
- '20#.#14.9.74':445
- '20#.#14.69.83':445
- '20#.#14.111.14':445
- '20#.#14.127.199':445
- '20#.#14.70.168':9988
- '20#.#14.51.188':9988
- '20#.#14.6.137':445
- '20#.#14.30.34':445
- '20#.#14.204.152':9988
- '20#.#14.62.117':9988
- '20#.#14.80.188':9988
- '20#.#14.188.148':9988
- '20#.#14.114.135':9988
- '20#.#14.64.16':445
- '20#.#14.226.171':445
- '20#.#14.41.175':445
- '20#.#14.214.97':445
- '20#.#14.160.195':445
- '20#.#14.10.118':445
- '20#.#14.112.80':445
- '20#.#14.119.161':445
- '20#.#14.226.118':445