Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '65.##.44.217':139
- '65.##.82.245':139
- '65.##.241.62':139
- '65.##.190.23':139
- '65.##.120.106':139
- '65.##.138.160':139
- '65.#6.49.70':139
- '65.##.161.10':139
- '65.##.116.229':139
- '65.#6.9.210':139
- '65.##.53.152':445
- '65.##.115.119':445
- '65.##.119.234':445
- '65.##.219.49':445
- '65.##.252.218':445
- '65.#6.77.45':139
- '65.#6.73.33':139
- '65.##.30.213':139
- '65.##.147.25':445
- '65.##.161.127':445
- '65.#6.54.40':139
- '65.#6.8.251':139
- '65.#6.38.8':139
- '65.##.55.162':139
- '65.##.227.180':139
- '65.#6.4.74':139
- '65.##.198.65':139
- '65.##.133.10':139
- '65.##.67.191':139
- '65.##.249.37':139
- '65.##.166.140':139
- '65.#6.50.27':139
- '65.##.139.200':139
- '65.##.208.134':139
- '65.#6.28.54':139
- '65.##.214.182':139
- '65.#6.3.29':139
- '65.#6.71.72':139
- '65.##.75.163':139
- '65.##.104.78':139
- '65.##.128.55':139
- '65.##.185.141':445
- '65.##.119.159':445
- '65.##.105.59':445
- '65.##.24.225':445
- '65.##.228.145':445
- '65.##.159.127':445
- '65.#6.99.39':445
- '65.##.56.208':445
- '65.##.235.127':445
- '65.#6.6.236':445
- '65.##.28.228':445
- '65.##.185.209':445
- '65.#6.52.2':445
- '65.##.118.61':445
- '65.##.40.174':445
- '65.##.43.185':445
- '65.##.225.50':445
- '65.#6.73.40':445
- '65.#6.51.40':445
- '65.##.140.227':445
- '65.##.128.157':445
- '65.##.12.146':445
- '65.##.253.109':445
- '65.##.129.247':445
- '65.#6.30.0':445
- '65.##.121.115':445
- '65.##.99.206':445
- '65.##.250.18':445
- '65.#6.37.69':445
- '65.#6.205.9':445
- '65.#6.61.27':445
- '65.##.108.146':445
- '65.##.24.189':445
- '65.##.227.11':445
- '65.#6.51.44':445
- '65.##.31.148':445
- '65.##.254.230':445
- '65.##.136.174':445
- '65.#6.81.93':445
- '65.##.227.95':445
- '65.#6.98.60':445
- '65.##.166.18':445
- '65.##.11.102':139
- '65.##.203.208':445
- '65.##.31.174':445
- '65.##.209.68':445
- '65.##.218.46':445
- '65.##.211.123':445
- '65.##.89.243':445
- '65.#6.21.24':445
- '65.##.242.184':445
- '65.##.43.127':445
- '65.##.149.238':445
- '65.##.249.37':445
- '65.##.166.140':445
- '65.#6.38.8':445
- '65.##.55.162':445
- '65.#6.8.251':445
- '65.##.11.102':445
- '65.#6.46.68':445
- '65.##.133.10':445
- '65.##.67.191':445
- '65.##.198.65':445
- '65.##.191.247':445
- '65.#6.51.57':139
- '65.##.111.63':139
- '65.##.10.138':139
- '65.##.221.216':139
- '65.#6.79.17':139
- '65.#6.85.75':139
- '65.##.109.163':139
- '65.##.103.52':139
- '65.##.62.111':139
- '65.##.131.131':139
- '65.##.252.139':445
- '65.##.48.253':139
- '65.##.140.93':445
- '65.##.32.192':445
- '65.##.183.238':445
- '65.##.207.181':139
- '65.##.197.217':139
- '65.#6.32.90':139
- '65.##.144.48':139
- '65.#6.59.89':139
- '65.#6.4.74':445
- '65.##.183.238':139
- '65.##.140.93':139
- '65.##.32.192':139
- '65.#6.21.24':139
- '65.##.191.247':139
- '65.#6.73.33':445
- '65.##.190.23':445
- '65.#6.77.45':445
- '65.##.252.139':139
- '65.##.30.213':445
- '65.##.209.68':139
- '65.##.203.208':139
- '65.##.211.123':139
- '65.#6.46.68':139
- '65.##.218.46':139
- '65.##.242.184':139
- '65.##.89.243':139
- '65.##.149.238':139
- '65.##.31.174':139
- '65.##.43.127':139
- '65.##.120.106':445
- '65.##.139.200':445
- '65.##.104.78':445
- '65.#6.50.27':445
- '65.##.214.182':445
- '65.##.208.134':445
- '65.#6.71.72':445
- '65.##.227.180':445
- '65.#6.3.29':445
- '65.##.128.55':445
- '65.##.75.163':445
- '65.##.116.229':445
- '65.#6.9.210':445
- '65.##.82.245':445
- '65.##.241.62':445
- '65.##.44.217':445
- '65.#6.54.40':445
- '65.#6.28.54':445
- '65.#6.49.70':445
- '65.##.161.10':445
- '65.##.138.160':445
- '65.##.211.229':445
- '65.#6.95.64':445
- '65.##.13.201':445
- '65.##.141.60':445
- '65.##.161.42':445
- '65.#6.64.91':445
- '65.##.151.37':445
- '65.#6.47.70':445
- '65.#6.70.95':445
- '65.##.15.130':445
- '65.##.226.118':139
- '65.##.132.226':139
- '65.#6.0.56':139
- '65.#6.79.89':139
- '65.##.61.250':139
- '65.#6.5.198':139
- '65.##.27.169':445
- '65.#6.55.78':139
- '65.##.136.27':139
- '65.##.14.115':139
- '65.##.203.188':445
- '65.##.112.64':445
- '65.##.112.201':445
- '65.#6.6.75':445
- '65.#6.37.59':445
- '65.##.68.198':445
- '65.##.10.222':445
- '65.#6.1.178':445
- '65.##.159.114':445
- '65.#6.59.83':445
- '65.##.111.222':445
- '65.##.173.140':445
- '65.##.44.251':445
- '65.##.122.32':445
- '65.##.19.232':445
- '65.##.106.218':445
- '65.##.113.23':445
- '65.##.238.173':445
- '65.#6.45.73':445
- '65.##.93.182':445
- '65.##.213.203':445
- '65.#6.5.100':139
- '65.##.106.218':139
- '65.##.122.32':139
- '65.##.19.232':139
- '65.##.151.37':139
- '65.##.203.188':139
- '65.##.213.203':139
- '65.#6.45.73':139
- '65.##.93.182':139
- '65.##.173.140':139
- '65.##.44.251':139
- '65.##.27.169':139
- '65.##.211.229':139
- '65.##.161.42':139
- '65.##.15.130':139
- '65.##.141.60':139
- '65.#6.47.70':139
- '65.#6.64.91':139
- '65.#6.70.95':139
- '65.##.13.201':139
- '65.#6.95.64':139
- '65.##.113.23':139
- '65.#6.14.31':139
- '65.##.103.194':139
- '65.##.190.13':139
- '65.#6.1.178':139
- '65.##.167.234':139
- '65.##.232.240':139
- '65.##.63.247':139
- '65.##.244.113':139
- '65.##.187.181':139
- '65.##.106.138':139
- '65.#6.6.75':139
- '65.##.112.64':139
- '65.##.68.198':139
- '65.##.238.173':139
- '65.#6.37.59':139
- '65.##.159.114':139
- '65.##.10.222':139
- '65.##.111.222':139
- '65.##.112.201':139
- '65.#6.59.83':139
- '65.##.167.234':445
- '65.##.254.230':139
- '65.##.227.11':139
- '65.##.227.95':139
- '65.##.12.146':139
- '65.##.31.148':139
- '65.##.24.189':139
- '65.#6.98.60':139
- '65.##.166.18':139
- '65.#6.51.44':139
- '65.##.136.174':139
- '65.##.159.127':139
- '65.##.228.145':139
- '65.##.105.59':139
- '65.##.119.159':139
- '65.#6.73.40':139
- '65.##.56.208':139
- '65.#6.99.39':139
- '65.##.235.127':139
- '65.##.28.228':139
- '65.#6.6.236':139
- '65.##.99.206':139
- '65.##.119.234':139
- '65.##.115.119':139
- '65.##.252.218':139
- '65.##.185.141':139
- '65.##.219.49':139
- '65.##.30.119':445
- '65.##.217.222':445
- '65.##.161.127':139
- '65.##.53.152':139
- '65.##.147.25':139
- '65.#6.205.9':139
- '65.#6.61.27':139
- '65.##.250.18':139
- '65.#6.81.93':139
- '65.##.121.115':139
- '65.##.253.109':139
- '65.#6.37.69':139
- '65.#6.30.0':139
- '65.##.129.247':139
- '65.##.108.146':139
- '65.##.24.225':139
- '65.##.132.226':445
- '65.##.136.27':445
- '65.##.226.118':445
- '65.##.61.250':445
- '65.#6.0.56':445
- '65.##.161.42':9988
- '65.##.151.37':9988
- '65.#6.5.198':445
- '65.##.14.115':445
- '65.#6.55.78':445
- '65.##.187.181':445
- '65.##.106.138':445
- '65.##.103.194':445
- '65.##.190.13':445
- '65.#6.14.31':445
- '65.#6.5.100':445
- '65.#6.79.89':445
- '65.##.63.247':445
- '65.##.244.113':445
- '65.##.232.240':445
- '65.##.238.173':9988
- '65.##.43.185':139
- '65.##.118.61':139
- '65.##.185.209':139
- '65.##.217.222':139
- '65.##.40.174':139
- '65.#6.51.40':139
- '65.##.225.50':139
- '65.##.128.157':139
- '65.#6.52.2':139
- '65.##.140.227':139
- '65.##.187.181':9988
- '65.#6.5.100':9988
- '65.#6.14.31':9988
- '65.#6.1.178':9988
- '65.##.190.13':9988
- '65.#6.5.198':9988
- '65.##.30.119':139
- '65.##.14.115':9988
- '65.##.226.118':9988
- '65.##.132.226':9988