Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##.158.59':139
- '88.##.53.193':139
- '88.##.59.139':139
- '88.##.53.186':139
- '88.##.45.209':139
- '88.#3.45.58':139
- '88.##.114.71':139
- '88.##.204.76':139
- '88.##.207.239':139
- '88.##.109.90':139
- '88.##.193.227':139
- '88.##.88.157':139
- '88.#3.8.136':139
- '88.##.156.198':139
- '88.#3.9.101':139
- '88.#3.62.97':139
- '88.##.157.235':139
- '88.#3.3.158':139
- '88.##.23.180':139
- '88.#3.240.7':139
- '88.#3.22.6':139
- '88.##.89.101':139
- '88.#3.240.7':445
- '88.#3.22.6':445
- '88.#3.8.136':445
- '88.##.156.198':445
- '88.##.88.157':445
- '88.##.193.227':445
- '88.##.53.186':445
- '88.#3.3.158':445
- '88.##.23.180':445
- '88.##.157.235':445
- '88.#3.62.97':445
- '88.##.221.48':139
- '88.##.40.232':139
- '88.#3.15.89':139
- '88.#3.24.67':139
- '88.#3.8.102':139
- '88.##.100.225':445
- '88.#3.9.101':445
- '88.#3.1.88':445
- '88.##.105.115':139
- '88.##.112.101':445
- '88.##.206.217':139
- '88.##.34.240':139
- '88.##.217.51':139
- '88.#3.5.204':139
- '88.##.143.246':139
- '88.##.163.189':139
- '88.##.43.183':445
- '88.##.201.47':139
- '88.##.78.132':139
- '88.##.85.175':139
- '88.##.147.168':139
- '88.##.29.110':139
- '88.##.152.75':139
- '88.##.132.56':139
- '88.##.43.183':139
- '88.#3.57.12':139
- '88.##.209.234':139
- '88.##.40.147':139
- '88.##.206.216':139
- '88.#3.143.3':139
- '88.#3.31.88':139
- '88.#3.57.12':445
- '88.##.78.132':445
- '88.##.85.175':445
- '88.##.34.240':445
- '88.##.217.51':445
- '88.##.206.217':445
- '88.#3.1.88':139
- '88.##.100.225':139
- '88.##.112.101':139
- '88.##.201.47':445
- '88.##.163.189':445
- '88.##.143.246':445
- '88.#3.143.3':445
- '88.#3.31.88':445
- '88.##.152.75':445
- '88.##.132.56':445
- '88.##.29.110':445
- '88.##.147.168':445
- '88.#3.5.204':445
- '88.##.40.147':445
- '88.##.206.216':445
- '88.##.209.234':445
- '88.##.45.209':445
- '88.##.235.111':139
- '88.##.123.235':139
- '88.##.111.18':139
- '88.#3.48.23':445
- '88.#3.85.65':139
- '88.##.27.101':139
- '88.##.149.225':139
- '88.#3.35.30':139
- '88.#3.5.124':139
- '88.##.249.181':139
- '88.##.135.224':445
- '88.##.131.38':445
- '88.##.28.117':445
- '88.##.91.104':445
- '88.##.67.192':445
- '88.##.243.26':445
- '88.##.231.95':445
- '88.##.215.75':445
- '88.##.200.248':445
- '88.#3.56.21':445
- '88.##.81.157':445
- '88.##.50.127':139
- '88.##.117.203':139
- '88.#3.1.118':139
- '88.##.95.224':139
- '88.##.170.59':139
- '88.#3.161.6':139
- '88.#3.6.221':139
- '88.##.230.111':139
- '88.##.21.149':139
- '88.##.195.214':139
- '88.#3.37.50':139
- '88.##.130.37':139
- '88.##.249.71':139
- '88.##.157.249':139
- '88.##.71.157':139
- '88.##.62.118':139
- '88.##.168.230':139
- '88.##.133.232':139
- '88.##.181.110':139
- '88.##.232.88':139
- '88.##.26.194':139
- '88.##.150.27':139
- '88.##.105.115':445
- '88.#3.80.38':139
- '88.##.40.232':445
- '88.#3.15.89':445
- '88.##.221.48':445
- '88.##.24.248':139
- '88.#3.22.75':139
- '88.#3.48.36':139
- '88.#3.27.80':139
- '88.##.138.117':139
- '88.#3.8.102':445
- '88.##.207.239':445
- '88.##.109.90':445
- '88.##.53.193':445
- '88.##.59.139':445
- '88.##.158.59':445
- '88.##.89.101':445
- '88.#3.24.67':445
- '88.##.114.71':445
- '88.##.204.76':445
- '88.#3.45.58':445
- '88.##.228.45':139
- '88.#3.27.80':445
- '88.##.138.117':445
- '88.#3.80.38':445
- '88.##.135.224':139
- '88.#3.48.23':139
- '88.##.228.45':445
- '88.##.212.253':445
- '88.##.24.248':445
- '88.#3.48.36':445
- '88.#3.22.75':445
- '88.##.215.75':139
- '88.##.91.104':139
- '88.##.131.38':139
- '88.##.243.26':139
- '88.##.212.253':139
- '88.##.67.192':139
- '88.##.200.248':139
- '88.##.231.95':139
- '88.##.81.157':139
- '88.##.28.117':139
- '88.#3.56.21':139
- '88.##.108.36':445
- '88.#3.10.7':445
- '88.#3.79.64':445
- '88.##.17.240':445
- '88.##.179.204':445
- '88.##.142.201':445
- '88.##.196.201':445
- '88.##.205.25':445
- '88.##.140.65':445
- '88.#3.67.37':445
- '88.##.127.44':445
- '88.#3.87.84':445
- '88.##.47.100':139
- '88.##.208.159':139
- '88.##.111.112':139
- '88.##.107.59':139
- '88.##.29.230':139
- '88.#3.58.79':445
- '88.##.183.47':445
- '88.##.101.159':139
- '88.##.21.132':139
- '88.##.82.151':139
- '88.#3.61.92':445
- '88.##.189.45':445
- '88.##.164.240':445
- '88.##.152.29':445
- '88.##.47.111':445
- '88.##.155.59':445
- '88.##.226.152':445
- '88.##.22.174':445
- '88.##.28.213':445
- '88.#3.6.103':445
- '88.##.81.199':445
- '88.##.144.13':445
- '88.##.105.71':445
- '88.##.133.60':445
- '88.##.231.110':445
- '88.##.91.170':445
- '88.##.118.38':445
- '88.#3.2.100':445
- '88.#3.228.2':445
- '88.##.136.31':445
- '88.##.240.157':445
- '88.##.106.16':445
- '88.##.91.170':139
- '88.##.118.38':139
- '88.#3.61.92':139
- '88.##.196.201':139
- '88.##.205.25':139
- '88.##.240.157':139
- '88.##.106.16':139
- '88.##.133.60':139
- '88.##.231.110':139
- '88.##.105.71':139
- '88.##.140.65':139
- '88.##.179.204':139
- '88.##.142.201':139
- '88.#3.87.84':139
- '88.#3.58.79':139
- '88.##.183.47':139
- '88.#3.67.37':139
- '88.##.127.44':139
- '88.#3.79.64':139
- '88.##.17.240':139
- '88.#3.10.7':139
- '88.##.136.31':139
- '88.##.34.149':139
- '88.##.240.221':139
- '88.##.209.34':139
- '88.##.226.152':139
- '88.##.22.174':139
- '88.##.159.37':139
- '88.##.59.228':139
- '88.##.110.216':139
- '88.##.196.68':139
- '88.##.215.239':139
- '88.##.28.213':139
- '88.##.47.111':139
- '88.##.155.59':139
- '88.##.144.13':139
- '88.#3.2.100':139
- '88.#3.228.2':139
- '88.#3.6.103':139
- '88.##.81.199':139
- '88.##.164.240':139
- '88.##.152.29':139
- '88.##.189.45':139
- '88.##.209.34':445
- '88.##.152.61':445
- '88.##.28.152':445
- '88.##.137.127':445
- '88.#3.5.75':139
- '88.##.108.36':139
- '88.#3.4.174':445
- '88.##.174.122':445
- '88.##.107.24':445
- '88.##.178.167':445
- '88.##.93.124':445
- '88.##.12.197':139
- '88.##.171.218':139
- '88.##.151.203':139
- '88.##.75.107':139
- '88.##.180.92':139
- '88.##.93.180':139
- '88.##.177.164':139
- '88.#3.37.48':139
- '88.#3.3.88':139
- '88.#3.5.152':139
- '88.##.51.178':139
- '88.##.56.238':445
- '88.#3.5.152':445
- '88.##.51.178':445
- '88.##.151.203':445
- '88.##.75.107':445
- '88.##.171.218':445
- '88.##.12.197':445
- '88.#3.5.75':445
- '88.#3.37.48':445
- '88.#3.3.88':445
- '88.##.177.164':445
- '88.##.93.180':445
- '88.#3.2.85':445
- '88.#3.65.2':445
- '88.#3.35.54':445
- '88.##.220.20':445
- '88.##.211.184':445
- '88.##.16.132':445
- '88.##.49.110':445
- '88.##.180.92':445
- '88.##.223.166':445
- '88.##.122.185':445
- '88.##.101.159':445
- '88.#3.58.79':9988
- '88.##.82.151':445
- '88.##.208.159':445
- '88.##.21.132':445
- '88.##.127.44':9988
- '88.##.196.201':9988
- '88.#3.67.37':9988
- '88.##.183.47':9988
- '88.##.17.240':9988
- '88.##.47.100':445
- '88.##.215.239':445
- '88.##.110.216':445
- '88.##.196.68':445
- '88.##.34.149':445
- '88.##.240.221':445
- '88.##.29.230':445
- '88.##.111.112':445
- '88.##.107.59':445
- '88.##.159.37':445
- '88.##.59.228':445
- '88.##.205.25':9988
- '88.#3.35.54':139
- '88.#3.2.85':139
- '88.##.211.184':139
- '88.#3.4.174':139
- '88.##.56.238':139
- '88.##.49.110':139
- '88.##.16.132':139
- '88.##.122.185':139
- '88.#3.65.2':139
- '88.##.223.166':139
- '88.##.174.122':139
- '88.##.137.127':139
- '88.##.152.61':139
- '88.##.189.45':9988
- '88.#3.61.92':9988
- '88.##.91.170':9988
- '88.##.107.24':139
- '88.##.220.20':139
- '88.##.93.124':139
- '88.##.28.152':139
- '88.##.178.167':139