Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.##.197.74':445
- '82.##.248.144':445
- '82.##.74.140':445
- '82.##.85.108':445
- '82.##.188.131':445
- '82.##.151.154':445
- '82.##.126.100':445
- '82.##.166.56':445
- '82.##.184.33':445
- '82.##.56.100':445
- '82.##.192.110':445
- '82.##.133.76':445
- '82.##.149.57':445
- '82.#1.70.55':445
- '82.##.123.11':445
- '82.##.189.122':445
- '82.##.100.215':445
- '82.##.181.177':445
- '82.#1.12.64':445
- '82.##.180.238':445
- '82.##.123.223':445
- '82.##.135.97':445
- '82.#1.2.238':445
- '82.#1.10.35':445
- '82.#1.53.27':445
- '82.##.155.200':445
- '82.##.164.205':445
- '82.#1.36.3':445
- '82.##.243.40':445
- '82.#1.30.39':445
- '82.##.157.129':445
- '82.##.13.205':445
- '82.##.132.91':445
- '82.##.249.93':445
- '82.##.250.54':445
- '82.##.63.131':445
- '82.##.41.172':445
- '82.##.130.16':445
- '82.#1.23.2':445
- '82.##.226.14':445
- '82.##.165.44':445
- '82.##.157.129':139
- '82.##.13.205':139
- '82.##.132.91':139
- '82.##.249.93':139
- '82.##.250.54':139
- '82.##.63.131':139
- '82.##.41.172':139
- '82.##.130.16':139
- '82.#1.23.2':139
- '82.##.226.14':139
- '82.##.197.74':139
- '82.##.248.144':139
- '82.##.74.140':139
- '82.##.85.108':139
- '82.##.188.131':139
- '82.##.151.154':139
- '82.##.126.100':139
- '82.##.166.56':139
- '82.##.184.33':139
- '82.##.56.100':139
- '82.##.143.108':139
- '82.##.146.143':139
- '82.##.142.227':139
- '82.#1.9.234':139
- '82.##.87.212':139
- '82.##.242.35':445
- '82.##.234.58':445
- '82.##.39.244':445
- '82.#1.6.146':139
- '82.#1.74.6':139
- '82.##.123.223':139
- '82.##.135.97':139
- '82.#1.2.238':139
- '82.#1.10.35':139
- '82.#1.53.27':139
- '82.##.155.200':139
- '82.##.164.205':139
- '82.#1.36.3':139
- '82.##.243.40':139
- '82.#1.30.39':139
- '82.#1.9.234':445
- '82.##.112.191':139
- '82.##.32.112':139
- '82.##.145.249':139
- '82.##.104.213':139
- '82.##.161.152':139
- '82.##.202.223':445
- '82.##.48.220':445
- '82.##.223.187':445
- '82.##.109.75':139
- '82.#1.40.31':445
- '82.##.120.62':139
- '82.#1.5.50':139
- '82.##.67.129':139
- '82.#1.20.45':139
- '82.##.128.238':139
- '82.##.126.167':139
- '82.##.58.186':139
- '82.##.132.135':139
- '82.##.246.194':139
- '82.##.207.173':139
- '82.##.90.223':445
- '82.##.226.126':445
- '82.##.180.207':445
- '82.##.102.26':445
- '82.##.188.101':445
- '82.##.133.145':445
- '82.##.243.215':445
- '82.##.185.253':445
- '82.##.21.115':445
- '82.##.200.39':445
- '82.#1.44.70':445
- '82.##.173.77':445
- '82.##.113.28':445
- '82.##.215.108':445
- '82.##.119.75':445
- '82.##.126.43':445
- '82.##.25.229':445
- '82.#1.61.69':445
- '82.##.123.208':445
- '82.##.198.137':445
- '82.##.36.117':139
- '82.#1.44.70':139
- '82.##.173.77':139
- '82.##.113.28':139
- '82.##.215.108':139
- '82.##.119.75':139
- '82.##.126.43':139
- '82.##.25.229':139
- '82.#1.61.69':139
- '82.##.123.208':139
- '82.##.198.137':139
- '82.##.146.143':445
- '82.#1.6.146':445
- '82.##.143.108':445
- '82.##.87.212':445
- '82.##.142.227':445
- '82.##.202.223':139
- '82.##.48.220':139
- '82.##.223.187':139
- '82.#1.74.6':445
- '82.#1.40.31':139
- '82.##.209.68':139
- '82.##.219.25':139
- '82.#1.69.89':139
- '82.#1.13.86':139
- '82.##.103.155':139
- '82.##.119.240':139
- '82.##.86.157':139
- '82.##.170.122':139
- '82.##.120.162':139
- '82.##.147.33':139
- '82.##.90.223':139
- '82.##.226.126':139
- '82.##.180.207':139
- '82.##.102.26':139
- '82.##.188.101':139
- '82.##.133.145':139
- '82.##.243.215':139
- '82.##.185.253':139
- '82.##.21.115':139
- '82.##.200.39':139
- '82.##.100.215':139
- '82.##.71.228':445
- '82.#1.5.161':445
- '82.##.46.228':445
- '82.##.159.155':445
- '82.##.82.136':445
- '82.#1.38.89':445
- '82.##.212.23':445
- '82.##.128.149':445
- '82.##.139.77':445
- '82.##.40.119':445
- '82.##.174.43':139
- '82.##.50.170':139
- '82.#1.44.84':139
- '82.##.108.183':139
- '82.#1.43.81':139
- '82.##.48.212':139
- '82.##.237.81':139
- '82.##.125.114':139
- '82.##.219.232':139
- '82.##.209.10':139
- '82.#1.86.83':445
- '82.##.236.85':445
- '82.#1.83.91':445
- '82.#1.59.37':445
- '82.##.221.189':445
- '82.##.138.114':445
- '82.##.180.99':445
- '82.##.73.120':445
- '82.#1.6.39':445
- '82.##.80.165':445
- '82.##.59.107':445
- '82.##.232.170':445
- '82.#1.86.44':445
- '82.##.237.211':445
- '82.#1.47.45':445
- '82.#1.19.24':445
- '82.##.81.224':445
- '82.#1.21.1':445
- '82.##.79.199':445
- '82.##.152.103':445
- '82.##.178.17':139
- '82.##.59.107':139
- '82.##.232.170':139
- '82.#1.86.44':139
- '82.##.237.211':139
- '82.#1.47.45':139
- '82.#1.19.24':139
- '82.##.81.224':139
- '82.#1.21.1':139
- '82.##.79.199':139
- '82.##.152.103':139
- '82.##.71.228':139
- '82.#1.5.161':139
- '82.##.46.228':139
- '82.##.159.155':139
- '82.##.82.136':139
- '82.#1.38.89':139
- '82.##.212.23':139
- '82.##.128.149':139
- '82.##.139.77':139
- '82.##.40.119':139
- '82.#1.30.25':139
- '82.##.15.158':139
- '82.#1.29.98':139
- '82.##.42.180':139
- '82.##.190.42':139
- '82.##.108.145':139
- '82.##.137.108':139
- '82.##.89.104':139
- '82.#1.50.15':139
- '82.#1.23.50':139
- '82.#1.86.83':139
- '82.##.236.85':139
- '82.#1.83.91':139
- '82.#1.59.37':139
- '82.##.221.189':139
- '82.##.138.114':139
- '82.##.180.99':139
- '82.##.73.120':139
- '82.#1.6.39':139
- '82.##.80.165':139
- '82.##.42.180':445
- '82.##.105.145':445
- '82.##.102.70':445
- '82.##.245.212':445
- '82.#1.64.39':139
- '82.#1.8.107':139
- '82.##.162.69':445
- '82.##.240.11':445
- '82.##.13.249':445
- '82.#1.80.75':445
- '82.##.150.166':445
- '82.##.162.69':139
- '82.##.240.11':139
- '82.##.13.249':139
- '82.#1.80.75':139
- '82.##.150.166':139
- '82.##.184.141':139
- '82.##.63.218':139
- '82.##.22.167':139
- '82.##.74.239':139
- '82.#1.37.61':139
- '82.##.149.57':139
- '82.##.192.110':139
- '82.##.123.11':139
- '82.##.165.44':139
- '82.#1.70.55':139
- '82.##.181.177':139
- '82.##.189.122':139
- '82.##.180.238':139
- '82.##.133.76':139
- '82.#1.12.64':139
- '82.##.184.141':445
- '82.##.63.218':445
- '82.##.22.167':445
- '82.##.74.239':445
- '82.#1.37.61':445
- '82.##.242.35':139
- '82.##.234.58':139
- '82.##.39.244':139
- '82.#1.64.39':445
- '82.#1.8.107':445
- '82.##.102.70':139
- '82.##.174.43':445
- '82.##.50.170':445
- '82.#1.44.84':445
- '82.##.108.183':445
- '82.#1.43.81':445
- '82.##.48.212':445
- '82.##.237.81':445
- '82.##.125.114':445
- '82.##.219.232':445
- '82.##.209.10':445
- '82.##.15.158':445
- '82.#1.50.15':445
- '82.#1.30.25':445
- '82.##.190.42':445
- '82.#1.29.98':445
- '82.##.137.108':445
- '82.##.178.17':445
- '82.##.108.145':445
- '82.#1.23.50':445
- '82.##.89.104':445
- '82.##.59.107':9988
- '82.#1.21.1':9988
- '82.#1.86.44':9988
- '82.##.237.211':9988
- '82.#1.47.45':9988
- '82.##.245.212':139
- '82.##.105.145':139
- '82.#1.23.50':9988
- '82.##.138.114':9988
- '82.#1.50.15':9988
- '82.##.71.228':9988
- '82.#1.5.161':9988
- '82.##.159.155':9988
- '82.##.46.228':9988
- '82.##.82.136':9988
- '82.#1.38.89':9988
- '82.##.212.23':9988
- '82.##.128.149':9988
- '82.##.139.77':9988
- '82.##.40.119':9988