Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '24.##.26.226':139
- '24.##.46.209':445
- '24.##.54.207':139
- '24.##.72.171':139
- '24.##.184.66':445
- '24.##.72.171':445
- '24.##.26.226':445
- '24.##.41.226':445
- '24.##.54.207':445
- '24.##.41.226':139
- '24.##.13.155':445
- '24.##.180.23':445
- '24.##.35.169':445
- '24.#1.18.9':445
- '24.##.108.128':445
- '24.##.46.209':139
- '24.##.184.66':139
- '24.#1.98.50':445
- '24.##.131.94':445
- '24.#1.3.39':139
- '24.##.26.152':139
- '24.##.32.116':139
- '24.##.196.247':139
- '24.##.161.193':139
- '24.##.130.115':139
- '24.##.10.246':139
- '24.##.58.155':139
- '24.##.181.178':139
- '24.##.35.250':139
- '24.#1.11.30':139
- '24.##.185.53':139
- '24.##.172.239':139
- '24.##.38.233':139
- '24.##.176.73':139
- '24.##.208.49':139
- '24.##.249.149':139
- '24.#1.43.37':139
- '24.##.33.189':139
- '24.##.226.170':445
- '24.##.129.201':445
- '24.##.26.247':445
- '24.##.248.149':445
- '24.##.228.129':445
- '24.##.184.213':445
- '24.##.15.102':445
- '24.##.228.20':445
- '24.##.89.215':445
- '24.##.112.144':445
- '24.##.158.116':445
- '24.##.64.201':445
- '24.#1.98.50':139
- '24.##.131.94':139
- '24.##.188.160':445
- '24.##.151.86':445
- '24.##.70.113':445
- '24.##.119.192':445
- '24.##.242.119':445
- '24.##.115.115':445
- '24.##.152.69':445
- '24.#1.13.92':445
- '24.##.99.148':445
- '24.##.204.36':445
- '24.##.128.65':445
- '24.##.169.47':445
- '24.#1.97.32':445
- '24.##.181.104':445
- '24.##.57.248':445
- '24.##.172.253':445
- '24.#1.90.54':445
- '24.#1.33.23':445
- '24.##.253.113':445
- '24.##.179.246':445
- '24.##.231.84':445
- '24.#1.13.76':445
- '24.#1.1.0':445
- '24.##.43.201':445
- '24.##.109.244':139
- '24.##.182.167':445
- '24.##.157.182':445
- '24.##.14.209':445
- '24.##.167.147':445
- '24.#1.27.93':445
- '24.##.155.235':445
- '24.##.105.246':445
- '24.#1.75.39':445
- '24.##.235.149':445
- '24.##.155.86':445
- '24.##.58.155':445
- '24.##.181.178':445
- '24.##.26.152':445
- '24.##.161.193':445
- '24.##.130.115':445
- '24.##.155.252':445
- '24.##.64.128':445
- '24.##.10.246':445
- '24.##.109.244':445
- '24.##.106.205':445
- '24.##.174.159':139
- '24.#1.9.200':445
- '24.#1.8.230':445
- '24.##.12.112':139
- '24.##.178.166':139
- '24.##.190.97':139
- '24.##.41.238':139
- '24.##.166.88':139
- '24.##.63.237':445
- '24.##.203.134':445
- '24.##.151.157':445
- '24.##.118.217':445
- '24.##.100.112':445
- '24.##.115.232':445
- '24.##.193.89':445
- '24.#1.246.6':445
- '24.#1.63.4':445
- '24.##.64.228':445
- '24.##.118.217':139
- '24.##.100.112':139
- '24.##.155.235':139
- '24.##.105.246':139
- '24.##.203.134':139
- '24.#1.63.4':139
- '24.##.64.228':139
- '24.##.151.157':139
- '24.##.115.232':139
- '24.##.235.149':139
- '24.##.155.86':139
- '24.##.14.209':139
- '24.##.155.252':139
- '24.##.64.128':139
- '24.##.167.147':139
- '24.#1.27.93':139
- '24.#1.75.39':139
- '24.##.182.167':139
- '24.##.157.182':139
- '24.##.33.189':445
- '24.##.208.49':445
- '24.##.176.73':445
- '24.#1.43.37':445
- '24.##.249.149':445
- '24.##.196.247':445
- '24.#1.3.39':445
- '24.##.35.250':445
- '24.##.32.116':445
- '24.##.185.53':445
- '24.##.63.237':139
- '24.#1.9.200':139
- '24.##.193.89':139
- '24.#1.246.6':139
- '24.#1.8.230':139
- '24.##.38.233':445
- '24.#1.11.30':445
- '24.##.106.205':139
- '24.##.172.239':445
- '24.##.84.125':139
- '24.#1.0.78':445
- '24.##.101.215':139
- '24.##.46.236':139
- '24.##.16.244':445
- '24.##.110.220':445
- '24.##.10.182':445
- '24.##.239.22':445
- '24.##.154.112':445
- '24.##.181.75':139
- '24.#1.61.42':139
- '24.#1.33.36':139
- '24.#1.62.78':139
- '24.#1.15.81':139
- '24.##.170.222':139
- '24.##.30.158':139
- '24.##.149.209':139
- '24.#1.25.88':139
- '24.#1.13.0':139
- '24.##.27.173':445
- '24.#1.26.27':445
- '24.##.147.13':445
- '24.##.103.100':445
- '24.#1.7.26':445
- '24.##.130.202':445
- '24.#1.20.50':445
- '24.#1.83.6':445
- '24.##.35.118':445
- '24.##.45.217':445
- '24.##.92.179':445
- '24.##.154.89':445
- '24.#1.0.147':445
- '24.#1.52.70':445
- '24.##.214.254':445
- '24.#1.20.96':445
- '24.##.106.144':445
- '24.##.27.142':445
- '24.##.142.132':445
- '24.##.142.132':139
- '24.#1.20.96':139
- '24.##.214.254':139
- '24.##.27.142':139
- '24.##.106.144':139
- '24.##.103.100':139
- '24.##.27.173':139
- '24.##.45.217':139
- '24.##.147.13':139
- '24.##.154.89':139
- '24.##.154.112':139
- '24.##.239.22':139
- '24.#1.0.78':139
- '24.##.16.244':139
- '24.##.110.220':139
- '24.#1.52.70':139
- '24.##.92.179':139
- '24.##.10.182':139
- '24.#1.0.147':139
- '24.#1.66.13':139
- '24.##.113.97':139
- '24.#1.70.94':139
- '24.#1.13.68':139
- '24.#1.70.49':139
- '24.##.57.104':139
- '24.#1.19.98':139
- '24.##.185.103':139
- '24.#1.80.58':139
- '24.##.143.204':139
- '24.#1.83.6':139
- '24.##.35.118':139
- '24.#1.26.27':139
- '24.#1.7.26':139
- '24.##.130.202':139
- '24.##.199.238':139
- '24.##.15.156':139
- '24.#1.20.50':139
- '24.##.239.18':139
- '24.##.239.18':445
- '24.##.184.213':139
- '24.##.15.102':139
- '24.##.228.20':139
- '24.##.89.215':139
- '24.#1.33.23':139
- '24.#1.90.54':139
- '24.##.179.246':139
- '24.##.253.113':139
- '24.##.172.253':139
- '24.##.228.129':139
- '24.##.151.86':139
- '24.##.70.113':139
- '24.##.119.192':139
- '24.##.242.119':139
- '24.##.112.144':139
- '24.##.226.170':139
- '24.##.129.201':139
- '24.##.26.247':139
- '24.##.248.149':139
- '24.##.128.65':139
- '24.##.169.47':139
- '24.#1.97.32':139
- '24.##.181.104':139
- '24.##.35.169':139
- '24.##.180.23':139
- '24.##.108.128':139
- '24.#1.18.9':139
- '24.##.13.155':139
- '24.##.204.36':139
- '24.##.231.84':139
- '24.#1.13.76':139
- '24.#1.1.0':139
- '24.##.43.201':139
- '24.##.57.248':139
- '24.##.115.115':139
- '24.##.152.69':139
- '24.#1.13.92':139
- '24.##.99.148':139
- '24.#1.62.78':445
- '24.#1.15.81':445
- '24.##.57.104':445
- '24.#1.19.98':445
- '24.#1.61.42':445
- '24.#1.25.88':445
- '24.#1.13.0':445
- '24.#1.33.36':445
- '24.##.170.222':445
- '24.#1.80.58':445
- '24.##.143.204':445
- '24.#1.70.94':445
- '24.##.199.238':445
- '24.##.15.156':445
- '24.#1.13.68':445
- '24.#1.70.49':445
- '24.##.185.103':445
- '24.#1.66.13':445
- '24.##.113.97':445
- '24.##.57.104':9988
- '24.#1.62.78':9988
- '24.##.199.238':9988
- '24.#1.80.58':9988
- '24.#1.25.88':9988
- '24.##.64.201':139
- '24.##.188.160':139
- '24.##.92.179':9988
- '24.##.158.116':139
- '24.##.103.100':9988
- '24.##.181.75':445
- '24.##.101.215':445
- '24.##.30.158':445
- '24.##.149.209':445
- '24.##.46.236':445
- '24.#1.0.78':9988
- '24.##.16.244':9988
- '24.##.84.125':445
- '24.##.27.142':9988