Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '12.##.127.253':139
- '12.##.15.124':139
- '12.#5.86.88':139
- '12.##.196.199':139
- '12.##.166.83':139
- '12.##.198.36':445
- '12.##.129.140':445
- '12.#5.81.92':139
- '12.##.13.133':445
- '12.##.102.18':139
- '12.##.26.142':139
- '12.##.222.233':139
- '12.##.147.22':139
- '12.#5.86.60':139
- '12.##.214.232':139
- '12.##.156.88':139
- '12.##.80.156':139
- '12.##.45.103':139
- '12.#5.5.41':139
- '12.#5.5.84':445
- '12.##.181.208':445
- '12.##.163.247':445
- '12.##.117.195':445
- '12.##.125.162':445
- '12.##.225.129':445
- '12.##.67.194':445
- '12.#5.46.2':445
- '12.##.179.125':445
- '12.#5.2.193':445
- '12.##.91.128':445
- '12.##.27.159':445
- '12.##.115.229':445
- '12.##.175.37':445
- '12.#5.17.25':445
- '12.##.75.115':445
- '12.##.118.145':445
- '12.##.121.93':445
- '12.##.168.242':445
- '12.##.51.229':445
- '12.##.13.133':139
- '12.##.198.36':139
- '12.#5.17.24':445
- '12.##.131.114':445
- '12.##.129.140':139
- '12.#5.17.25':139
- '12.##.27.159':139
- '12.#5.5.84':139
- '12.##.175.37':139
- '12.##.198.220':445
- '12.#5.17.24':139
- '12.##.131.114':139
- '12.##.203.222':139
- '12.##.198.220':139
- '12.##.198.185':445
- '12.#5.66.30':445
- '12.##.203.222':445
- '12.##.253.197':445
- '12.##.30.243':445
- '12.##.115.229':139
- '12.#5.2.193':139
- '12.##.67.194':139
- '12.##.225.129':139
- '12.##.179.125':139
- '12.#5.46.2':139
- '12.##.151.225':139
- '12.#5.22.14':139
- '12.#5.249.1':139
- '12.##.159.234':139
- '12.##.163.247':139
- '12.##.51.229':139
- '12.##.118.145':139
- '12.##.75.115':139
- '12.##.168.242':139
- '12.##.121.93':139
- '12.##.125.162':139
- '12.##.181.208':139
- '12.##.91.128':139
- '12.##.117.195':139
- '12.#5.249.1':445
- '12.##.147.16':139
- '12.##.193.146':139
- '12.##.166.166':139
- '12.#5.84.17':139
- '12.#5.24.1':139
- '12.##.23.136':139
- '12.##.13.194':139
- '12.##.25.254':139
- '12.##.16.131':139
- '12.##.137.234':139
- '12.#5.19.75':139
- '12.##.139.157':139
- '12.##.140.25':139
- '12.##.74.234':139
- '12.##.78.152':139
- '12.##.58.240':139
- '12.##.27.130':139
- '12.##.187.112':139
- '12.#5.26.83':139
- '12.##.91.160':139
- '12.##.113.198':139
- '12.##.138.217':139
- '12.##.81.156':139
- '12.##.68.171':139
- '12.##.143.229':139
- '12.##.85.110':139
- '12.##.83.191':139
- '12.#5.216.0':139
- '12.##.198.228':139
- '12.##.35.149':139
- '12.##.22.193':139
- '12.#5.82.79':139
- '12.#5.9.170':139
- '12.##.222.135':139
- '12.##.18.148':139
- '12.##.31.107':139
- '12.#5.60.8':139
- '12.#5.37.18':139
- '12.#5.12.37':139
- '12.##.102.18':445
- '12.#5.86.88':445
- '12.##.156.88':445
- '12.##.80.156':445
- '12.##.196.199':445
- '12.##.166.83':445
- '12.#5.81.92':445
- '12.##.127.253':445
- '12.##.15.124':445
- '12.#5.5.41':445
- '12.#5.22.14':445
- '12.##.147.22':445
- '12.##.159.234':445
- '12.##.151.225':445
- '12.#5.86.60':445
- '12.##.214.232':445
- '12.##.45.103':445
- '12.##.26.142':445
- '12.##.222.233':445
- '12.#5.94.35':139
- '12.##.96.183':445
- '12.##.78.198':445
- '12.##.154.109':445
- '12.##.45.150':445
- '12.##.231.102':445
- '12.##.214.242':139
- '12.##.206.236':139
- '12.##.203.231':139
- '12.##.181.203':139
- '12.#5.62.77':445
- '12.##.154.109':139
- '12.##.45.150':139
- '12.##.17.202':139
- '12.#5.62.77':139
- '12.##.96.183':139
- '12.#5.94.35':445
- '12.##.17.202':445
- '12.##.78.198':139
- '12.##.231.102':139
- '12.##.207.100':445
- '12.##.218.213':445
- '12.##.43.160':139
- '12.#5.29.18':139
- '12.##.43.153':445
- '12.##.204.106':445
- '12.##.204.199':445
- '12.##.19.197':445
- '12.##.113.155':445
- '12.##.239.245':139
- '12.##.55.180':139
- '12.##.58.123':139
- '12.##.110.94':139
- '12.##.128.134':139
- '12.#5.50.35':139
- '12.##.109.31':139
- '12.##.119.201':139
- '12.##.121.20':139
- '12.##.62.219':139
- '12.##.224.216':445
- '12.#5.12.71':445
- '12.##.135.236':445
- '12.##.123.145':445
- '12.##.187.215':445
- '12.##.182.135':445
- '12.##.89.149':445
- '12.#5.2.80':445
- '12.##.61.134':445
- '12.##.157.81':445
- '12.##.101.41':445
- '12.##.164.126':445
- '12.#5.89.52':445
- '12.##.225.21':445
- '12.##.149.210':445
- '12.##.172.215':445
- '12.##.255.105':445
- '12.##.19.246':445
- '12.#5.94.19':445
- '12.##.108.172':445
- '12.##.172.215':139
- '12.#5.94.19':139
- '12.##.164.126':139
- '12.#5.89.52':139
- '12.##.108.172':139
- '12.##.101.41':139
- '12.##.123.145':139
- '12.##.255.105':139
- '12.##.19.246':139
- '12.##.149.210':139
- '12.##.207.100':139
- '12.##.218.213':139
- '12.##.43.153':139
- '12.##.19.197':139
- '12.##.113.155':139
- '12.##.224.216':139
- '12.##.225.21':139
- '12.##.204.106':139
- '12.##.204.199':139
- '12.##.187.215':139
- '12.#5.95.34':139
- '12.##.46.109':139
- '12.##.236.115':139
- '12.##.196.17':139
- '12.##.162.11':139
- '12.#5.246.0':139
- '12.##.143.201':139
- '12.##.152.18':139
- '12.##.164.179':139
- '12.#5.67.19':139
- '12.##.182.135':139
- '12.##.61.134':139
- '12.#5.12.71':139
- '12.##.135.236':139
- '12.##.157.81':139
- '12.#5.5.47':139
- '12.##.181.166':139
- '12.##.89.149':139
- '12.#5.2.80':139
- '12.#5.5.47':445
- '12.##.168.130':139
- '12.##.229.23':139
- '12.##.187.87':139
- '12.#5.116.8':139
- '12.##.255.54':139
- '12.#5.24.58':139
- '12.##.216.35':445
- '12.#5.62.89':139
- '12.##.124.178':139
- '12.##.87.219':139
- '12.##.78.105':139
- '12.#5.3.104':139
- '12.#5.29.18':9988
- '12.##.216.35':139
- '12.#5.85.0':139
- '12.##.182.229':139
- '12.##.218.182':139
- '12.##.141.213':139
- '12.##.152.19':139
- '12.##.78.105':445
- '12.#5.62.89':445
- '12.##.124.178':445
- '12.##.229.23':445
- '12.##.255.54':445
- '12.#5.24.58':445
- '12.##.30.243':139
- '12.#5.66.30':139
- '12.##.198.185':139
- '12.##.253.197':139
- '12.##.168.130':445
- '12.##.141.213':445
- '12.##.152.19':445
- '12.#5.3.104':445
- '12.#5.85.0':445
- '12.##.182.229':445
- '12.##.187.87':445
- '12.#5.116.8':445
- '12.##.218.182':445
- '12.##.87.219':445
- '12.##.128.134':445
- '12.##.55.180':445
- '12.##.143.201':445
- '12.##.110.94':445
- '12.##.58.123':445
- '12.##.62.219':445
- '12.##.109.31':445
- '12.#5.50.35':445
- '12.##.121.20':445
- '12.#5.246.0':445
- '12.##.236.115':445
- '12.##.196.17':445
- '12.##.181.166':445
- '12.#5.67.19':445
- '12.#5.95.34':445
- '12.##.152.18':445
- '12.##.164.179':445
- '12.##.46.109':445
- '12.##.162.11':445
- '12.##.119.201':445
- '12.##.157.81':9988
- '12.##.89.149':9988
- '12.#5.12.71':9988
- '12.##.135.236':9988
- '12.#5.2.80':9988
- '12.##.196.17':9988
- '12.##.110.94':9988
- '12.#5.5.47':9988
- '12.##.236.115':9988
- '12.##.101.41':9988
- '12.#5.29.18':445
- '12.##.43.153':9988
- '12.##.239.245':445
- '12.##.43.160':445
- '12.##.113.155':9988
- '12.##.255.105':9988
- '12.##.19.246':9988
- '12.##.204.199':9988
- '12.##.224.216':9988