Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#9.155.58':139
- '20#.#9.171.182':445
- '20#.#9.210.224':139
- '20#.#9.42.40':139
- '20#.#9.123.171':445
- '20#.#9.110.2':445
- '20#.#9.114.88':445
- '20#.#9.122.123':445
- '20#.#9.2.123':445
- '20#.#9.135.12':139
- '20#.#9.16.169':139
- '20#.#9.244.144':139
- '20#.#9.114.166':139
- '20#.#9.193.223':139
- '20#.#9.26.37':139
- '20#.#9.227.146':139
- '20#.#9.251.100':139
- '20#.#9.152.251':139
- '20#.#9.35.59':445
- '20#.#9.244.69':445
- '20#.#9.115.231':445
- '20#.#9.62.137':445
- '20#.#9.4.193':445
- '20#.#9.86.35':445
- '20#.#9.131.18':445
- '20#.#9.121.162':445
- '20#.#9.85.238':445
- '20#.#9.69.127':445
- '20#.#9.74.211':445
- '20#.#9.111.74':445
- '20#.#9.89.25':445
- '20#.29.4.4':445
- '20#.#9.25.177':445
- '20#.29.7.65':445
- '20#.#9.250.232':445
- '20#.#9.74.43':445
- '20#.#9.64.242':445
- '20#.#9.114.88':139
- '20#.#9.35.59':139
- '20#.#9.2.123':139
- '20#.#9.110.2':139
- '20#.#9.89.25':139
- '20#.#9.111.74':139
- '20#.#9.25.177':139
- '20#.29.4.4':139
- '20#.#9.74.211':139
- '20#.#9.112.29':445
- '20#.#9.13.162':445
- '20#.#9.114.77':445
- '20#.#9.226.29':445
- '20#.#9.88.118':445
- '20#.#9.123.171':139
- '20#.#9.122.123':139
- '20#.29.4.95':445
- '20#.#9.171.182':139
- '20#.#9.74.43':139
- '20#.#9.121.162':139
- '20#.#9.84.196':139
- '20#.#9.69.127':139
- '20#.#9.131.18':139
- '20#.#9.35.178':139
- '20#.#9.22.15':139
- '20#.#9.191.249':139
- '20#.#9.207.90':139
- '20#.#9.232.207':139
- '20#.#9.250.232':139
- '20#.#9.62.137':139
- '20#.#9.64.242':139
- '20#.29.7.65':139
- '20#.#9.4.193':139
- '20#.#9.86.35':139
- '20#.#9.85.238':139
- '20#.#9.244.69':139
- '20#.#9.115.231':139
- '20#.#9.84.196':445
- '20#.#9.203.96':139
- '20#.#9.62.84':139
- '20#.#9.9.238':139
- '20#.#9.16.224':139
- '20#.#9.228.106':139
- '20#.#9.67.72':139
- '20#.#9.116.199':139
- '20#.#9.220.207':139
- '20#.#9.192.220':139
- '20#.#9.77.254':139
- '20#.#9.227.217':139
- '20#.#9.22.33':139
- '20#.#9.192.213':139
- '20#.#9.97.195':139
- '20#.#9.173.134':139
- '20#.#9.101.97':139
- '20#.#9.180.209':139
- '20#.#9.134.3':139
- '20#.#9.8.187':139
- '20#.#9.30.97':139
- '20#.#9.94.53':139
- '20#.#9.221.204':139
- '20#.#9.98.147':139
- '20#.#9.12.145':139
- '20#.#9.104.229':139
- '20#.#9.105.194':139
- '20#.#9.221.236':139
- '20#.#9.49.222':139
- '20#.#9.142.165':139
- '20#.#9.80.152':139
- '20#.#9.0.216':139
- '20#.#9.145.72':139
- '20#.#9.133.68':139
- '20#.29.9.81':139
- '20#.#9.219.41':139
- '20#.#9.33.134':139
- '20#.#9.12.69':139
- '20#.#9.152.251':445
- '20#.#9.26.37':445
- '20#.#9.193.223':445
- '20#.#9.251.100':445
- '20#.#9.227.146':445
- '20#.#9.155.58':445
- '20#.#9.217.154':139
- '20#.#9.210.224':445
- '20#.#9.42.40':445
- '20#.#9.232.207':445
- '20#.#9.22.15':445
- '20#.#9.35.178':445
- '20#.#9.207.90':445
- '20#.#9.191.249':445
- '20#.#9.135.12':445
- '20#.#9.16.169':445
- '20#.#9.244.144':445
- '20#.#9.114.166':445
- '20#.#9.168.16':139
- '20#.#9.221.220':445
- '20#.#9.76.64':445
- '20#.#9.223.126':445
- '20#.#9.32.159':445
- '20#.#9.51.164':445
- '20#.#9.157.169':139
- '20#.#9.135.157':139
- '20#.#9.159.51':139
- '20#.#9.106.146':139
- '20#.#9.32.159':139
- '20#.#9.221.220':139
- '20#.#9.77.24':139
- '20#.#9.223.126':139
- '20#.#9.76.64':139
- '20#.#9.168.16':445
- '20#.#9.77.24':445
- '20#.#9.51.164':139
- '20#.#9.217.154':445
- '20#.#9.105.225':445
- '20#.#9.11.206':139
- '20#.#9.138.171':139
- '20#.#9.143.11':139
- '20#.#9.203.236':139
- '20#.#9.145.35':139
- '20#.#9.106.247':445
- '20#.#9.215.212':445
- '20#.#9.198.116':445
- '20#.#9.18.198':445
- '20#.#9.252.83':139
- '20#.#9.58.252':139
- '20#.#9.39.87':139
- '20#.#9.151.221':139
- '20#.#9.31.129':139
- '20#.#9.184.72':139
- '20#.#9.27.133':139
- '20#.#9.215.208':139
- '20#.#9.41.79':139
- '20#.#9.207.81':445
- '20#.#9.41.121':445
- '20#.#9.198.102':445
- '20#.#9.183.184':445
- '20#.#9.3.177':445
- '20#.#9.251.19':445
- '20#.#9.146.87':445
- '20#.29.1.93':445
- '20#.#9.47.214':445
- '20#.#9.16.31':445
- '20#.#9.173.158':445
- '20#.#9.15.124':445
- '20#.#9.249.216':445
- '20#.#9.211.249':445
- '20#.29.28.1':445
- '20#.#9.246.153':445
- '20#.#9.156.95':445
- '20#.#9.247.27':445
- '20#.#9.124.63':445
- '20#.#9.124.63':139
- '20#.#9.246.153':139
- '20#.29.28.1':139
- '20#.#9.247.27':139
- '20#.#9.156.95':139
- '20#.#9.41.121':139
- '20#.#9.198.102':139
- '20#.#9.183.184':139
- '20#.#9.3.177':139
- '20#.#9.198.116':139
- '20#.#9.18.198':139
- '20#.#9.207.81':139
- '20#.#9.106.247':139
- '20#.#9.215.212':139
- '20#.#9.173.158':139
- '20#.#9.15.124':139
- '20#.#9.249.216':139
- '20#.#9.211.249':139
- '20#.#9.251.19':139
- '20#.#9.59.29':139
- '20#.#9.253.252':139
- '20#.#9.181.172':139
- '20#.#9.1.251':139
- '20#.#9.140.114':139
- '20#.#9.212.73':139
- '20#.#9.176.211':139
- '20#.#9.149.178':139
- '20#.#9.113.183':139
- '20#.#9.146.87':139
- '20#.29.1.93':139
- '20#.#9.47.214':139
- '20#.#9.16.31':139
- '20#.#9.170.172':139
- '20#.#9.10.154':139
- '20#.29.17.8':139
- '20#.#9.236.41':139
- '20#.#9.52.240':139
- '20#.#9.170.172':445
- '20#.#9.171.1':139
- '20#.#9.14.220':139
- '20#.#9.145.48':139
- '20#.#9.50.145':139
- '20#.#9.223.14':139
- '20#.#9.43.125':139
- '20#.#9.94.56':445
- '20#.#9.25.238':139
- '20#.#9.31.103':139
- '20#.#9.41.121':9988
- '20#.#9.183.184':9988
- '20#.#9.3.177':9988
- '20#.#9.15.124':9988
- '20#.#9.247.27':9988
- '20#.#9.117.180':139
- '20#.#9.48.118':139
- '20#.#9.246.153':9988
- '20#.#9.94.56':139
- '20#.#9.117.180':445
- '20#.#9.114.77':139
- '20#.#9.226.29':139
- '20#.#9.44.176':139
- '20#.#9.105.225':139
- '20#.#9.112.29':139
- '20#.29.4.95':139
- '20#.#9.44.176':445
- '20#.#9.13.162':139
- '20#.#9.88.118':139
- '20#.#9.50.145':445
- '20#.#9.171.1':445
- '20#.#9.48.118':445
- '20#.#9.145.48':445
- '20#.#9.14.220':445
- '20#.#9.31.103':445
- '20#.#9.43.125':445
- '20#.#9.223.14':445
- '20#.#9.25.238':445
- '20#.#9.212.73':445
- '20#.#9.176.211':445
- '20#.#9.149.178':445
- '20#.#9.113.183':445
- '20#.#9.39.87':445
- '20#.#9.58.252':445
- '20#.#9.31.129':445
- '20#.#9.151.221':445
- '20#.#9.252.83':445
- '20#.#9.10.154':445
- '20#.29.17.8':445
- '20#.#9.236.41':445
- '20#.#9.52.240':445
- '20#.#9.181.172':445
- '20#.#9.253.252':445
- '20#.#9.140.114':445
- '20#.#9.59.29':445
- '20#.#9.1.251':445
- '20#.#9.215.208':445
- '20#.#9.251.19':9988
- '20#.#9.124.63':9988
- '20#.#9.207.81':9988
- '20#.#9.249.216':9988
- '20#.#9.47.214':9988
- '20#.29.28.1':9988
- '20#.#9.211.249':9988
- '20#.#9.156.95':9988
- '20#.#9.198.102':9988
- '20#.#9.27.133':445
- '20#.#9.143.11':445
- '20#.#9.41.79':445
- '20#.#9.184.72':445
- '20#.#9.203.236':445
- '20#.#9.145.35':445
- '20#.#9.198.116':9988
- '20#.#9.11.206':445
- '20#.#9.138.171':445