Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '69.##.157.15':445
- '69.##.63.245':445
- '69.##.70.232':445
- '69.##.249.246':445
- '69.#5.40.30':445
- '69.##.49.223':445
- '69.##.220.126':445
- '69.##.189.40':445
- '69.##.53.119':445
- '69.##.57.201':445
- '69.##.142.147':445
- '69.##.141.236':445
- '69.##.114.238':445
- '69.#5.49.91':445
- '69.##.90.190':445
- '69.##.251.178':445
- '69.##.26.164':445
- '69.#5.15.81':445
- '69.##.228.11':445
- '69.##.122.213':445
- '69.##.57.224':445
- '69.##.153.236':445
- '69.##.174.47':445
- '69.#5.80.93':445
- '69.##.117.178':139
- '69.##.81.209':139
- '69.##.40.107':139
- '69.##.91.200':139
- '69.##.152.152':445
- '69.##.231.167':445
- '69.##.244.138':445
- '69.##.140.104':445
- '69.##.122.103':445
- '69.#5.94.25':445
- '69.##.236.93':445
- '69.##.133.18':445
- '69.##.136.41':445
- '69.##.109.239':445
- '69.##.70.232':139
- '69.##.249.246':139
- '69.##.90.190':139
- '69.##.251.178':139
- '69.##.157.15':139
- '69.##.189.40':139
- '69.##.53.119':139
- '69.##.63.245':139
- '69.#5.40.30':139
- '69.##.141.236':139
- '69.##.114.238':139
- '69.##.239.136':139
- '69.##.109.239':139
- '69.##.57.201':139
- '69.##.26.164':139
- '69.#5.15.81':139
- '69.##.142.147':139
- '69.#5.49.91':139
- '69.##.49.223':139
- '69.##.153.236':139
- '69.##.174.47':139
- '69.#5.94.25':139
- '69.##.236.93':139
- '69.##.122.213':139
- '69.#5.81.58':445
- '69.##.239.136':445
- '69.##.57.224':139
- '69.#5.80.93':139
- '69.##.244.138':139
- '69.##.140.104':139
- '69.##.220.126':139
- '69.##.228.11':139
- '69.##.152.152':139
- '69.##.133.18':139
- '69.##.136.41':139
- '69.##.231.167':139
- '69.##.122.103':139
- '69.##.113.251':139
- '69.#5.232.9':139
- '69.##.31.240':139
- '69.##.240.12':139
- '69.##.172.239':139
- '69.##.186.122':139
- '69.##.247.72':139
- '69.##.97.141':139
- '69.##.14.197':139
- '69.##.75.213':139
- '69.##.141.27':139
- '69.##.53.254':139
- '69.##.129.174':139
- '69.##.167.45':139
- '69.#5.66.37':139
- '69.#5.63.73':139
- '69.##.84.104':139
- '69.##.42.155':139
- '69.##.209.145':139
- '69.#5.194.6':445
- '69.##.215.114':445
- '69.##.99.212':445
- '69.##.229.75':445
- '69.#5.8.16':445
- '69.#5.42.48':445
- '69.##.53.254':445
- '69.#5.95.62':445
- '69.##.247.230':445
- '69.##.165.54':139
- '69.##.46.168':139
- '69.##.93.203':139
- '69.##.148.229':139
- '69.##.63.187':139
- '69.##.96.244':445
- '69.##.124.239':445
- '69.##.230.167':445
- '69.##.156.32':445
- '69.#5.42.48':139
- '69.##.40.107':445
- '69.##.91.200':445
- '69.##.125.169':139
- '69.##.50.124':139
- '69.##.117.178':445
- '69.##.117.98':445
- '69.##.172.202':445
- '69.##.81.209':445
- '69.##.29.177':445
- '69.##.172.202':139
- '69.##.169.116':139
- '69.##.29.177':139
- '69.##.117.98':139
- '69.##.166.70':139
- '69.#5.32.96':139
- '69.##.16.167':139
- '69.##.105.114':139
- '69.#5.81.72':139
- '69.##.169.116':445
- '69.##.99.212':139
- '69.##.229.75':139
- '69.##.96.244':139
- '69.##.124.239':139
- '69.#5.194.6':139
- '69.#5.95.62':139
- '69.##.247.230':139
- '69.##.215.114':139
- '69.#5.8.16':139
- '69.#5.81.72':445
- '69.#5.32.96':445
- '69.##.166.70':445
- '69.##.105.114':445
- '69.##.16.167':445
- '69.##.230.167':139
- '69.##.156.32':139
- '69.##.125.169':445
- '69.##.50.124':445
- '69.#5.81.58':139
- '69.##.171.214':139
- '69.##.13.153':139
- '69.##.18.141':139
- '69.##.214.119':139
- '69.##.246.113':445
- '69.#5.241.3':445
- '69.##.21.127':445
- '69.##.102.178':445
- '69.#5.4.103':445
- '69.##.230.225':139
- '69.##.79.212':139
- '69.##.206.214':139
- '69.##.44.202':139
- '69.##.238.170':139
- '69.##.24.218':139
- '69.##.132.237':139
- '69.##.145.200':139
- '69.##.216.53':139
- '69.##.244.125':445
- '69.#5.33.36':445
- '69.##.227.32':445
- '69.#5.88.31':445
- '69.#5.36.32':445
- '69.##.146.136':445
- '69.##.226.177':445
- '69.##.108.119':445
- '69.#5.66.76':445
- '69.#5.53.65':445
- '69.##.127.163':445
- '69.##.106.64':445
- '69.##.115.225':445
- '69.##.163.179':445
- '69.#5.78.63':445
- '69.##.92.187':445
- '69.##.207.243':445
- '69.##.40.174':445
- '69.##.188.40':445
- '69.##.214.115':139
- '69.##.40.174':139
- '69.##.188.40':139
- '69.##.106.64':139
- '69.#5.78.63':139
- '69.##.92.187':139
- '69.#5.36.32':139
- '69.#5.33.36':139
- '69.##.207.243':139
- '69.#5.88.31':139
- '69.#5.4.103':139
- '69.#5.241.3':139
- '69.##.102.178':139
- '69.##.246.113':139
- '69.##.21.127':139
- '69.##.163.179':139
- '69.##.127.163':139
- '69.##.244.125':139
- '69.##.115.225':139
- '69.##.227.32':139
- '69.#5.56.58':139
- '69.##.130.21':139
- '69.##.47.251':139
- '69.##.164.192':139
- '69.#5.89.70':139
- '69.##.166.170':139
- '69.##.115.18':139
- '69.##.79.192':139
- '69.#5.85.7':139
- '69.#5.53.65':139
- '69.##.226.177':139
- '69.##.146.136':139
- '69.#5.66.76':139
- '69.##.108.119':139
- '69.#5.0.65':139
- '69.#5.0.103':139
- '69.##.45.126':139
- '69.##.198.44':139
- '69.##.241.63':139
- '69.##.48.115':139
- '69.##.164.171':139
- '69.##.216.237':139
- '69.##.80.209':139
- '69.##.200.171':139
- '69.#5.25.19':139
- '69.##.225.64':139
- '69.##.147.39':139
- '69.##.47.251':9988
- '69.##.164.192':9988
- '69.##.227.32':9988
- '69.#5.53.65':9988
- '69.#5.56.58':9988
- '69.#5.2.252':139
- '69.#5.81.34':139
- '69.##.130.21':9988
- '69.#5.85.7':9988
- '69.##.107.185':139
- '69.##.147.39':445
- '69.##.200.171':445
- '69.##.80.209':445
- '69.##.225.64':445
- '69.#5.25.19':445
- '69.##.96.227':445
- '69.#5.93.94':445
- '69.##.107.185':445
- '69.##.194.239':445
- '69.#5.93.94':139
- '69.#5.2.252':445
- '69.##.194.239':139
- '69.##.96.227':139
- '69.#5.81.34':445
- '69.##.241.63':445
- '69.##.48.115':445
- '69.##.164.171':445
- '69.##.216.237':445
- '69.##.40.174':9988
- '69.##.166.170':445
- '69.##.115.18':445
- '69.##.79.192':445
- '69.#5.85.7':445
- '69.##.214.115':445
- '69.##.230.225':445
- '69.##.79.212':445
- '69.##.206.214':445
- '69.##.44.202':445
- '69.#5.0.65':445
- '69.#5.0.103':445
- '69.##.45.126':445
- '69.##.198.44':445
- '69.##.47.251':445
- '69.##.130.21':445
- '69.#5.89.70':445
- '69.##.164.192':445
- '69.#5.56.58':445
- '69.##.238.170':445
- '69.##.21.127':9988
- '69.##.115.225':9988
- '69.#5.241.3':9988
- '69.##.102.178':9988
- '69.##.244.125':9988
- '69.##.106.64':9988
- '69.#5.78.63':9988
- '69.##.163.179':9988
- '69.##.127.163':9988
- '69.##.24.218':445
- '69.##.132.237':445
- '69.##.145.200':445
- '69.##.216.53':445
- '69.##.18.141':445
- '69.##.13.153':445
- '69.##.246.113':9988
- '69.##.214.119':445
- '69.##.171.214':445