Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '12.##.248.123':445
- '12.##.130.251':445
- '12.##.162.93':445
- '12.##.158.39':445
- '12.#8.42.0':445
- '12.##.210.174':445
- '12.##.31.249':445
- '12.##.168.165':445
- '12.#8.82.38':445
- '12.##.113.101':445
- '12.#8.1.76':445
- '12.##.20.156':445
- '12.##.141.175':445
- '12.#8.68.82':445
- '12.##.124.68':445
- '12.##.119.234':445
- '12.##.38.175':445
- '12.##.245.14':445
- '12.#8.52.77':445
- '12.#8.79.52':445
- '12.#8.53.17':445
- '12.##.178.171':445
- '12.##.247.61':445
- '12.#8.5.176':445
- '12.##.63.159':445
- '12.##.20.184':445
- '12.##.152.73':445
- '12.##.37.245':445
- '12.##.68.149':445
- '12.#8.1.163':445
- '12.#8.37.83':445
- '12.##.129.88':445
- '12.##.138.137':445
- '12.#8.2.173':445
- '12.##.201.82':445
- '12.#8.53.17':139
- '12.##.178.171':139
- '12.##.138.137':139
- '12.##.152.73':139
- '12.##.63.159':139
- '12.##.20.184':139
- '12.#8.52.77':139
- '12.#8.79.52':139
- '12.##.129.88':139
- '12.##.245.14':139
- '12.##.37.245':139
- '12.##.210.174':139
- '12.#8.37.83':139
- '12.#8.2.173':139
- '12.##.201.82':139
- '12.#8.1.163':139
- '12.##.68.149':139
- '12.##.247.61':139
- '12.#8.72.72':445
- '12.##.198.250':445
- '12.##.210.143':139
- '12.#8.14.72':139
- '12.##.125.190':445
- '12.##.244.101':445
- '12.##.147.235':445
- '12.##.35.179':445
- '12.#8.15.58':139
- '12.#8.36.66':139
- '12.#8.5.94':139
- '12.#8.5.176':139
- '12.##.99.236':139
- '12.##.109.187':139
- '12.##.250.109':139
- '12.##.74.104':139
- '12.##.187.82':139
- '12.#8.62.57':139
- '12.#8.21.32':139
- '12.##.17.154':139
- '12.##.122.228':139
- '12.##.49.165':139
- '12.##.245.121':139
- '12.##.160.153':139
- '12.#8.14.97':139
- '12.##.153.232':139
- '12.##.99.107':139
- '12.##.152.98':139
- '12.#8.48.10':139
- '12.##.18.233':139
- '12.#8.26.63':139
- '12.##.232.77':139
- '12.##.136.197':139
- '12.##.53.148':139
- '12.##.47.112':139
- '12.##.165.232':445
- '12.##.57.166':445
- '12.##.19.122':445
- '12.##.178.175':445
- '12.#8.37.4':445
- '12.##.147.36':445
- '12.##.186.41':445
- '12.#8.4.87':445
- '12.##.100.131':445
- '12.##.51.107':139
- '12.##.244.201':139
- '12.##.191.169':139
- '12.##.164.219':139
- '12.##.190.241':139
- '12.##.202.245':139
- '12.##.111.237':139
- '12.##.133.241':139
- '12.##.19.122':139
- '12.##.178.175':139
- '12.#8.14.72':445
- '12.##.100.131':139
- '12.##.186.41':139
- '12.#8.4.87':139
- '12.##.165.232':139
- '12.##.57.166':139
- '12.##.210.143':445
- '12.#8.5.94':445
- '12.##.74.104':445
- '12.##.99.236':445
- '12.#8.36.66':445
- '12.##.250.109':445
- '12.#8.15.58':445
- '12.##.187.82':445
- '12.##.109.187':445
- '12.#8.37.4':139
- '12.#8.95.3':139
- '12.##.81.251':139
- '12.##.168.125':139
- '12.#8.0.253':139
- '12.#8.71.14':139
- '12.##.167.169':139
- '12.##.109.73':139
- '12.#8.14.38':139
- '12.##.164.64':139
- '12.##.110.90':139
- '12.##.87.209':139
- '12.##.147.36':139
- '12.#8.3.95':139
- '12.##.146.72':139
- '12.##.176.44':139
- '12.##.41.249':139
- '12.##.14.208':139
- '12.##.31.151':139
- '12.##.141.31':139
- '12.#8.9.207':139
- '12.##.122.10':139
- '12.#8.8.74':139
- '12.##.222.39':445
- '12.##.252.239':139
- '12.##.151.200':139
- '12.##.202.117':139
- '12.##.106.80':139
- '12.##.192.113':139
- '12.##.157.218':139
- '12.##.126.141':139
- '12.##.123.201':139
- '12.##.121.123':139
- '12.##.192.74':139
- '12.##.201.227':139
- '12.##.94.254':445
- '12.##.209.53':445
- '12.#8.13.62':445
- '12.##.118.150':445
- '12.##.157.173':445
- '12.##.19.139':445
- '12.#8.4.73':445
- '12.##.192.248':445
- '12.##.21.238':445
- '12.#8.23.62':445
- '12.##.219.24':445
- '12.##.160.187':445
- '12.##.179.214':445
- '12.##.190.222':445
- '12.##.163.190':445
- '12.#8.5.137':445
- '12.##.222.213':445
- '12.#8.24.97':445
- '12.##.118.150':139
- '12.##.157.173':139
- '12.#8.5.137':139
- '12.#8.23.62':139
- '12.##.192.248':139
- '12.##.21.238':139
- '12.##.209.53':139
- '12.#8.13.62':139
- '12.##.163.190':139
- '12.##.94.254':139
- '12.##.219.24':139
- '12.##.179.214':139
- '12.##.222.213':139
- '12.##.160.187':139
- '12.##.190.222':139
- '12.##.222.39':139
- '12.#8.24.97':139
- '12.##.19.139':139
- '12.##.166.105':139
- '12.##.118.166':139
- '12.##.99.171':139
- '12.##.105.176':139
- '12.##.183.108':139
- '12.#8.224.3':139
- '12.##.234.139':139
- '12.#8.78.28':139
- '12.#8.19.28':139
- '12.##.220.53':139
- '12.##.114.220':139
- '12.#8.4.73':139
- '12.#8.54.51':139
- '12.##.133.82':139
- '12.##.36.139':139
- '12.##.113.99':139
- '12.##.82.118':139
- '12.#8.224.3':9988
- '12.##.192.74':9988
- '12.##.133.82':9988
- '12.##.157.218':9988
- '12.##.125.190':139
- '12.##.35.179':139
- '12.##.198.250':139
- '12.#8.72.72':139
- '12.##.222.39':9988
- '12.#8.5.137':9988
- '12.##.220.53':9988
- '12.##.219.24':9988
- '12.#8.24.97':9988
- '12.##.166.105':9988
- '12.##.190.222':9988
- '12.##.94.254':9988
- '12.#8.23.62':9988
- '12.##.147.235':139
- '12.##.158.39':139
- '12.##.162.93':139
- '12.##.124.68':139
- '12.##.248.123':139
- '12.##.168.165':139
- '12.#8.42.0':139
- '12.##.31.249':139
- '12.##.130.251':139
- '12.#8.68.82':139
- '12.##.141.175':139
- '12.##.113.101':139
- '12.##.20.156':139
- '12.##.244.101':139
- '12.##.38.175':139
- '12.#8.82.38':139
- '12.#8.1.76':139
- '12.##.119.234':139
- '12.##.118.166':445
- '12.##.234.139':445
- '12.##.105.176':445
- '12.##.166.105':445
- '12.#8.224.3':445
- '12.##.157.218':445
- '12.#8.78.28':445
- '12.##.183.108':445
- '12.##.99.171':445
- '12.##.114.220':445
- '12.##.113.99':445
- '12.#8.54.51':445
- '12.##.220.53':445
- '12.##.36.139':445
- '12.#8.19.28':445
- '12.##.82.118':445
- '12.##.133.82':445
- '12.##.126.141':445
- '12.##.252.239':445
- '12.##.151.200':445
- '12.##.31.151':445
- '12.##.141.31':445
- '12.#8.78.28':9988
- '12.##.82.118':9988
- '12.#8.8.74':445
- '12.##.209.53':9988
- '12.##.122.10':445
- '12.##.192.74':445
- '12.##.201.227':445
- '12.##.106.80':445
- '12.##.192.113':445
- '12.##.202.117':445
- '12.#8.9.207':445
- '12.##.123.201':445
- '12.##.121.123':445