Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '83.##.175.206':139
- '83.#6.88.98':139
- '83.##.41.146':139
- '83.##.215.196':139
- '83.##.125.123':139
- '83.#6.33.39':139
- '83.##.214.46':139
- '83.##.103.119':139
- '83.##.36.152':139
- '83.##.222.167':139
- '83.#6.18.84':139
- '83.#6.37.74':139
- '83.#6.83.85':139
- '83.#6.46.7':139
- '83.#6.11.68':139
- '83.#6.26.96':139
- '83.#6.39.74':139
- '83.##.239.193':139
- '83.#6.7.177':139
- '83.##.194.110':139
- '83.##.15.247':139
- '83.#6.7.177':445
- '83.##.194.110':445
- '83.#6.37.74':445
- '83.#6.83.85':445
- '83.#6.18.84':445
- '83.##.215.196':445
- '83.##.125.123':445
- '83.#6.39.74':445
- '83.##.239.193':445
- '83.#6.26.96':445
- '83.#6.16.58':445
- '83.#6.92.40':445
- '83.##.45.199':445
- '83.#6.54.46':139
- '83.#6.35.67':139
- '83.#6.46.7':445
- '83.#6.11.68':445
- '83.##.113.150':445
- '83.##.150.172':445
- '83.#6.23.67':445
- '83.##.113.150':139
- '83.##.228.195':139
- '83.#6.62.38':445
- '83.#6.98.9':139
- '83.##.194.145':139
- '83.##.243.194':139
- '83.##.200.89':445
- '83.##.119.240':445
- '83.#6.90.22':445
- '83.#6.71.62':445
- '83.##.168.102':445
- '83.#6.47.1':139
- '83.#6.54.65':139
- '83.##.29.101':139
- '83.##.237.15':139
- '83.##.38.181':139
- '83.##.16.220':139
- '83.##.29.211':139
- '83.##.216.175':139
- '83.##.125.206':139
- '83.#6.1.126':139
- '83.##.87.241':445
- '83.#6.98.9':445
- '83.##.228.195':445
- '83.##.243.194':445
- '83.##.29.211':445
- '83.##.194.145':445
- '83.##.150.172':139
- '83.#6.23.67':139
- '83.#6.92.40':139
- '83.##.45.199':139
- '83.#6.16.58':139
- '83.##.29.101':445
- '83.#6.47.1':445
- '83.##.38.181':445
- '83.#6.46.44':445
- '83.##.237.15':445
- '83.##.216.175':445
- '83.##.16.220':445
- '83.#6.1.126':445
- '83.#6.54.65':445
- '83.##.125.206':445
- '83.##.41.146':445
- '83.#6.2.68':139
- '83.##.112.139':139
- '83.#6.83.0':139
- '83.##.52.115':445
- '83.#6.11.45':445
- '83.##.111.190':139
- '83.##.62.112':139
- '83.##.189.233':139
- '83.##.249.206':139
- '83.#6.24.71':139
- '83.##.225.175':445
- '83.##.58.216':445
- '83.##.196.42':445
- '83.##.45.202':445
- '83.##.149.45':445
- '83.##.144.143':445
- '83.##.143.183':445
- '83.##.143.69':445
- '83.##.90.238':445
- '83.##.147.253':445
- '83.##.35.105':139
- '83.##.247.89':139
- '83.##.88.225':139
- '83.##.34.152':139
- '83.##.228.156':139
- '83.##.165.43':139
- '83.##.241.83':139
- '83.##.116.241':139
- '83.##.198.10':139
- '83.##.118.214':139
- '83.##.105.32':139
- '83.#6.85.73':139
- '83.##.156.74':139
- '83.##.160.110':139
- '83.##.118.150':139
- '83.##.123.118':139
- '83.#6.7.164':139
- '83.##.169.104':139
- '83.#6.2.79':139
- '83.##.245.109':139
- '83.##.199.42':139
- '83.##.201.147':445
- '83.##.39.150':139
- '83.##.124.43':139
- '83.##.124.68':139
- '83.##.27.117':139
- '83.##.234.78':139
- '83.##.101.29':139
- '83.##.201.147':139
- '83.#6.5.217':139
- '83.#6.91.25':139
- '83.##.158.180':139
- '83.##.222.167':445
- '83.##.103.119':445
- '83.##.36.152':445
- '83.##.175.206':445
- '83.#6.88.98':445
- '83.#6.54.46':445
- '83.#6.35.67':445
- '83.##.15.247':445
- '83.#6.33.39':445
- '83.##.214.46':445
- '83.##.45.202':139
- '83.##.124.68':445
- '83.##.39.150':445
- '83.##.234.78':445
- '83.#6.11.45':139
- '83.##.27.117':445
- '83.#6.5.217':445
- '83.##.101.29':445
- '83.##.158.180':445
- '83.##.124.43':445
- '83.#6.91.25':445
- '83.##.58.216':139
- '83.##.90.238':139
- '83.##.225.175':139
- '83.##.149.45':139
- '83.##.196.42':139
- '83.##.143.183':139
- '83.##.52.115':139
- '83.##.144.143':139
- '83.##.147.253':139
- '83.##.143.69':139
- '83.##.153.207':445
- '83.##.49.166':445
- '83.#6.60.16':445
- '83.##.242.51':445
- '83.#6.52.34':445
- '83.##.136.113':445
- '83.##.165.157':445
- '83.##.47.171':445
- '83.##.25.146':445
- '83.##.132.68':445
- '83.##.26.244':139
- '83.##.248.149':139
- '83.##.182.248':139
- '83.#6.4.139':139
- '83.#6.107.5':139
- '83.#6.172.9':139
- '83.##.59.141':445
- '83.##.11.101':139
- '83.#6.63.17':139
- '83.##.101.90':139
- '83.#6.121.5':445
- '83.##.109.240':445
- '83.##.241.57':445
- '83.##.165.64':445
- '83.##.202.18':445
- '83.#6.71.13':445
- '83.#6.8.35':445
- '83.#6.217.8':445
- '83.#6.88.59':445
- '83.##.120.23':445
- '83.##.171.18':445
- '83.##.177.107':445
- '83.#6.77.31':445
- '83.##.15.137':445
- '83.##.227.74':445
- '83.##.120.227':445
- '83.##.165.32':445
- '83.##.133.79':445
- '83.#6.33.36':445
- '83.##.96.241':445
- '83.##.70.163':445
- '83.##.42.235':139
- '83.##.120.227':139
- '83.##.15.137':139
- '83.##.227.74':139
- '83.##.165.157':139
- '83.#6.121.5':139
- '83.##.70.163':139
- '83.#6.33.36':139
- '83.##.96.241':139
- '83.##.177.107':139
- '83.#6.77.31':139
- '83.#6.60.16':139
- '83.##.153.207':139
- '83.##.59.141':139
- '83.##.242.51':139
- '83.#6.52.34':139
- '83.##.47.171':139
- '83.##.136.113':139
- '83.##.132.68':139
- '83.##.49.166':139
- '83.##.25.146':139
- '83.##.165.32':139
- '83.#6.47.9':139
- '83.#6.10.88':139
- '83.##.218.253':139
- '83.#6.217.8':139
- '83.##.253.150':139
- '83.##.102.90':139
- '83.##.149.38':139
- '83.##.87.194':139
- '83.##.98.173':139
- '83.#6.8.18':139
- '83.##.165.64':139
- '83.##.109.240':139
- '83.#6.71.13':139
- '83.##.133.79':139
- '83.##.202.18':139
- '83.#6.88.59':139
- '83.#6.8.35':139
- '83.##.171.18':139
- '83.##.241.57':139
- '83.##.120.23':139
- '83.##.253.150':445
- '83.##.162.148':445
- '83.##.157.82':445
- '83.#6.45.72':445
- '83.##.205.51':139
- '83.#6.6.216':139
- '83.##.37.147':445
- '83.##.185.139':445
- '83.##.236.250':445
- '83.##.203.163':445
- '83.##.251.14':445
- '83.##.61.112':139
- '83.##.14.245':139
- '83.##.11.236':139
- '83.##.121.145':139
- '83.#6.35.80':139
- '83.##.110.82':139
- '83.#6.44.12':139
- '83.##.102.98':139
- '83.##.238.68':139
- '83.##.82.238':139
- '83.##.15.145':445
- '83.#6.71.62':139
- '83.##.168.102':139
- '83.#6.62.38':139
- '83.##.205.51':445
- '83.#6.6.216':445
- '83.##.87.241':139
- '83.#6.46.44':139
- '83.##.119.240':139
- '83.#6.90.22':139
- '83.##.200.89':139
- '83.##.61.112':445
- '83.##.14.245':445
- '83.##.11.236':445
- '83.##.121.145':445
- '83.#6.35.80':445
- '83.##.110.82':445
- '83.#6.44.12':445
- '83.##.102.98':445
- '83.##.238.68':445
- '83.##.82.238':445
- '83.##.15.145':139
- '83.##.248.149':445
- '83.#6.63.17':445
- '83.##.26.244':445
- '83.#6.107.5':445
- '83.##.182.248':445
- '83.##.153.207':9988
- '83.#6.60.16':9988
- '83.#6.172.9':445
- '83.##.101.90':445
- '83.##.11.101':445
- '83.##.98.173':445
- '83.#6.8.18':445
- '83.#6.10.88':445
- '83.##.218.253':445
- '83.#6.47.9':445
- '83.##.42.235':445
- '83.#6.4.139':445
- '83.##.149.38':445
- '83.##.87.194':445
- '83.##.102.90':445
- '83.##.49.166':9988
- '83.##.162.148':139
- '83.##.157.82':139
- '83.#6.45.72':139
- '83.##.87.194':9988
- '83.#6.4.139':9988
- '83.##.37.147':139
- '83.##.185.139':139
- '83.##.236.250':139
- '83.##.203.163':139
- '83.##.251.14':139
- '83.#6.77.31':9988
- '83.##.96.241':9988
- '83.##.227.74':9988
- '83.##.25.146':9988
- '83.##.136.113':9988
- '83.#6.8.35':9988
- '83.#6.217.8':9988
- '83.##.202.18':9988
- '83.##.70.163':9988
- '83.##.133.79':9988