Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '68.##.31.145':445
- '68.##.223.231':445
- '68.##.188.193':445
- '68.#8.44.44':445
- '68.##.154.134':445
- '68.##.163.223':445
- '68.##.198.242':445
- '68.##.73.141':445
- '68.##.86.234':445
- '68.##.186.61':445
- '68.##.105.22':139
- '68.#8.47.21':139
- '68.##.62.156':139
- '68.#8.150.1':139
- '68.#8.38.97':139
- '68.##.251.135':139
- '68.##.129.106':139
- '68.##.222.98':139
- '68.##.134.51':139
- '68.##.226.183':445
- '68.##.169.216':445
- '68.##.31.222':445
- '68.#8.9.32':445
- '68.#8.48.97':445
- '68.##.164.140':445
- '68.##.30.165':445
- '68.#8.49.84':445
- '68.##.218.40':445
- '68.##.108.129':445
- '68.#8.90.29':445
- '68.##.122.155':445
- '68.##.124.159':445
- '68.##.29.100':445
- '68.##.234.244':445
- '68.##.193.162':445
- '68.#8.1.108':445
- '68.##.207.219':445
- '68.##.162.16':445
- '68.##.162.16':139
- '68.##.193.162':139
- '68.##.234.244':139
- '68.##.207.219':139
- '68.#8.1.108':139
- '68.#8.9.32':139
- '68.##.226.183':139
- '68.##.108.129':139
- '68.##.31.222':139
- '68.##.122.155':139
- '68.##.73.141':139
- '68.##.86.234':139
- '68.##.223.231':139
- '68.##.154.134':139
- '68.##.163.223':139
- '68.##.29.100':139
- '68.#8.90.29':139
- '68.##.198.242':139
- '68.##.124.159':139
- '68.##.15.146':139
- '68.##.27.249':139
- '68.##.230.221':139
- '68.##.146.88':139
- '68.##.159.27':139
- '68.##.53.194':139
- '68.##.156.53':139
- '68.##.197.37':139
- '68.##.37.126':139
- '68.##.94.159':139
- '68.#8.49.84':139
- '68.##.218.40':139
- '68.##.169.216':139
- '68.#8.48.97':139
- '68.##.164.140':139
- '68.#8.1.31':139
- '68.##.159.134':139
- '68.##.30.165':139
- '68.##.213.30':139
- '68.##.213.30':445
- '68.##.128.157':139
- '68.##.68.117':139
- '68.##.179.202':139
- '68.##.168.149':139
- '68.##.171.135':139
- '68.#8.9.11':139
- '68.##.165.87':139
- '68.#8.145.9':139
- '68.##.126.244':139
- '68.#8.12.93':139
- '68.##.124.162':139
- '68.#8.87.52':139
- '68.##.59.226':139
- '68.##.15.162':139
- '68.##.161.246':139
- '68.##.34.109':139
- '68.##.195.36':139
- '68.##.106.125':139
- '68.##.241.60':139
- '68.#8.96.43':139
- '68.##.156.79':139
- '68.##.136.206':139
- '68.##.138.245':139
- '68.##.202.254':139
- '68.##.113.171':445
- '68.##.55.113':445
- '68.##.183.165':445
- '68.##.34.130':445
- '68.##.104.105':139
- '68.##.91.103':139
- '68.#8.72.30':139
- '68.##.236.159':139
- '68.##.247.43':139
- '68.##.74.140':139
- '68.##.45.199':139
- '68.##.45.164':139
- '68.##.182.144':139
- '68.##.148.196':139
- '68.##.62.156':445
- '68.#8.150.1':445
- '68.##.53.194':445
- '68.##.156.53':445
- '68.##.105.22':445
- '68.##.222.98':445
- '68.##.134.51':445
- '68.#8.47.21':445
- '68.#8.38.97':445
- '68.##.37.126':445
- '68.##.94.159':445
- '68.##.230.221':445
- '68.#8.1.31':445
- '68.##.159.134':445
- '68.##.146.88':445
- '68.##.159.27':445
- '68.##.197.37':445
- '68.##.15.146':445
- '68.##.27.249':445
- '68.##.128.230':139
- '68.##.173.185':139
- '68.##.180.121':139
- '68.##.95.132':139
- '68.#8.51.74':139
- '68.#8.92.54':139
- '68.#8.30.95':139
- '68.##.175.51':139
- '68.#8.9.205':139
- '68.##.120.74':139
- '68.##.183.165':139
- '68.##.34.130':139
- '68.##.251.135':445
- '68.##.129.106':445
- '68.##.113.171':139
- '68.##.110.172':139
- '68.##.40.110':139
- '68.##.55.113':139
- '68.##.172.54':139
- '68.##.31.145':139
- '68.##.185.171':139
- '68.##.196.193':445
- '68.##.158.119':139
- '68.##.101.106':139
- '68.#8.51.12':445
- '68.##.92.143':445
- '68.##.113.113':445
- '68.##.63.223':445
- '68.##.201.179':445
- '68.##.176.175':139
- '68.##.114.80':139
- '68.##.36.114':139
- '68.##.245.79':139
- '68.##.51.222':139
- '68.##.23.254':139
- '68.##.168.26':139
- '68.##.175.177':139
- '68.##.17.129':139
- '68.#8.1.227':139
- '68.##.225.169':445
- '68.#8.32.67':445
- '68.##.240.212':445
- '68.##.30.228':445
- '68.##.25.247':445
- '68.##.113.145':445
- '68.#8.78.98':445
- '68.#8.24.3':445
- '68.##.145.234':445
- '68.##.57.155':445
- '68.#8.64.47':445
- '68.##.39.189':445
- '68.##.201.47':445
- '68.#8.71.71':445
- '68.##.85.200':445
- '68.##.106.204':445
- '68.##.217.161':445
- '68.#8.45.86':445
- '68.##.174.224':445
- '68.##.174.224':139
- '68.##.106.204':139
- '68.##.85.200':139
- '68.#8.45.86':139
- '68.##.217.161':139
- '68.##.30.228':139
- '68.##.225.169':139
- '68.##.57.155':139
- '68.##.240.212':139
- '68.##.39.189':139
- '68.##.63.223':139
- '68.##.201.179':139
- '68.##.196.193':139
- '68.#8.51.12':139
- '68.##.92.143':139
- '68.#8.71.71':139
- '68.#8.64.47':139
- '68.##.113.113':139
- '68.##.201.47':139
- '68.##.245.251':139
- '68.##.89.137':139
- '68.#8.61.27':139
- '68.##.80.229':139
- '68.#8.26.81':139
- '68.##.201.56':139
- '68.#8.34.44':139
- '68.#8.77.96':139
- '68.##.13.205':139
- '68.##.135.219':139
- '68.#8.24.3':139
- '68.##.145.234':139
- '68.#8.32.67':139
- '68.##.25.247':139
- '68.##.113.145':139
- '68.##.138.156':139
- '68.##.179.229':139
- '68.#8.78.98':139
- '68.##.188.80':139
- '68.##.188.80':445
- '68.##.216.231':139
- '68.##.105.147':139
- '68.#8.93.80':139
- '68.##.140.81':139
- '68.##.33.138':139
- '68.##.53.181':139
- '68.##.186.70':139
- '68.#8.40.34':139
- '68.#8.94.23':139
- '68.##.11.223':139
- '68.##.138.156':9988
- '68.##.201.56':9988
- '68.##.113.145':9988
- '68.##.188.80':9988
- '68.##.23.254':9988
- '68.##.73.133':139
- '68.##.223.73':139
- '68.#8.28.69':139
- '68.#8.90.37':139
- '68.#8.94.23':445
- '68.##.53.181':445
- '68.##.33.138':445
- '68.#8.40.34':445
- '68.##.186.70':445
- '68.##.188.193':139
- '68.#8.44.44':139
- '68.##.102.51':445
- '68.##.186.61':139
- '68.##.105.147':445
- '68.#8.90.37':445
- '68.##.73.133':445
- '68.##.102.51':139
- '68.#8.28.69':445
- '68.##.223.73':445
- '68.##.140.81':445
- '68.##.216.231':445
- '68.##.11.223':445
- '68.#8.93.80':445
- '68.##.245.79':445
- '68.##.51.222':445
- '68.##.201.56':445
- '68.#8.34.44':445
- '68.##.114.80':445
- '68.##.17.129':445
- '68.#8.1.227':445
- '68.##.36.114':445
- '68.##.23.254':445
- '68.##.13.205':445
- '68.##.135.219':445
- '68.#8.61.27':445
- '68.##.138.156':445
- '68.##.179.229':445
- '68.##.80.229':445
- '68.#8.26.81':445
- '68.#8.77.96':445
- '68.##.245.251':445
- '68.##.89.137':445
- '68.##.174.224':9988
- '68.##.217.161':9988
- '68.##.201.47':9988
- '68.##.39.189':9988
- '68.##.57.155':9988
- '68.##.25.247':9988
- '68.#8.24.3':9988
- '68.##.30.228':9988
- '68.##.225.169':9988
- '68.#8.71.71':9988
- '68.##.176.175':445
- '68.##.158.119':445
- '68.##.168.26':445
- '68.##.175.177':445
- '68.##.101.106':445
- '68.##.201.179':9988
- '68.##.113.113':9988
- '68.##.185.171':445
- '68.#8.51.12':9988