Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.#7.48.71':445
- '59.##.97.134':445
- '59.##.192.199':445
- '59.##.170.192':445
- '59.##.185.118':445
- '59.##.254.32':445
- '59.##.237.253':445
- '59.##.50.142':445
- '59.#7.7.7':445
- '59.##.199.241':445
- '59.##.205.124':445
- '59.#7.72.69':445
- '59.##.110.107':139
- '59.##.78.196':445
- '59.##.61.167':445
- '59.##.33.148':445
- '59.#7.91.78':445
- '59.##.238.102':445
- '59.#7.80.39':445
- '59.##.79.117':445
- '59.#7.42.79':445
- '59.#7.205.5':445
- '59.##.116.230':445
- '59.##.167.98':445
- '59.#7.56.55':445
- '59.##.176.238':445
- '59.##.116.57':445
- '59.#7.25.40':445
- '59.##.214.42':445
- '59.##.32.186':445
- '59.#7.7.178':445
- '59.##.192.30':445
- '59.#7.3.59':445
- '59.##.205.153':445
- '59.##.211.231':445
- '59.##.42.211':445
- '59.##.199.92':445
- '59.##.231.198':445
- '59.##.106.167':139
- '59.##.199.92':139
- '59.##.231.198':139
- '59.#7.7.178':139
- '59.##.205.153':139
- '59.##.211.231':139
- '59.#7.205.5':139
- '59.##.116.230':139
- '59.##.42.211':139
- '59.##.214.42':139
- '59.##.32.186':139
- '59.##.185.118':139
- '59.##.50.142':139
- '59.#7.48.71':139
- '59.##.97.134':139
- '59.#7.7.7':139
- '59.##.192.30':139
- '59.#7.3.59':139
- '59.##.254.32':139
- '59.##.237.253':139
- '59.##.177.85':139
- '59.##.61.246':139
- '59.##.130.80':139
- '59.##.100.16':139
- '59.#7.69.10':139
- '59.#7.180.7':139
- '59.##.167.179':139
- '59.##.115.137':139
- '59.#7.7.115':139
- '59.##.215.87':139
- '59.##.167.98':139
- '59.##.116.57':139
- '59.##.79.117':139
- '59.#7.42.79':139
- '59.#7.25.40':139
- '59.#7.37.60':139
- '59.##.130.110':139
- '59.#7.56.55':139
- '59.##.176.238':139
- '59.##.200.105':139
- '59.##.42.200':139
- '59.#7.56.31':139
- '59.##.105.55':139
- '59.##.220.64':139
- '59.#7.80.42':139
- '59.##.215.197':139
- '59.##.70.109':139
- '59.#7.51.55':139
- '59.#7.70.53':139
- '59.##.194.225':139
- '59.#7.42.92':139
- '59.#7.36.3':139
- '59.##.24.184':139
- '59.#7.90.6':139
- '59.##.20.192':139
- '59.#7.88.68':139
- '59.##.124.35':139
- '59.#7.18.52':139
- '59.#7.66.74':445
- '59.##.49.213':445
- '59.#7.86.91':445
- '59.#7.15.86':445
- '59.#7.51.90':445
- '59.##.237.182':445
- '59.#7.79.29':445
- '59.#7.77.56':445
- '59.##.241.133':445
- '59.#7.226.6':445
- '59.##.191.48':139
- '59.##.243.229':139
- '59.#7.60.50':139
- '59.#7.49.60':139
- '59.##.140.247':139
- '59.##.131.241':445
- '59.##.109.79':445
- '59.##.53.140':139
- '59.##.171.53':139
- '59.#7.141.3':139
- '59.##.106.167':445
- '59.##.110.107':445
- '59.#7.180.7':445
- '59.##.167.179':445
- '59.##.131.241':139
- '59.#7.86.91':139
- '59.#7.15.86':139
- '59.##.109.79':139
- '59.#7.226.6':139
- '59.#7.7.115':445
- '59.##.215.87':445
- '59.##.130.80':445
- '59.#7.37.60':445
- '59.##.130.110':445
- '59.##.100.16':445
- '59.#7.69.10':445
- '59.##.115.137':445
- '59.##.177.85':445
- '59.##.61.246':445
- '59.#7.58.33':139
- '59.##.243.42':139
- '59.#7.232.8':139
- '59.##.11.232':139
- '59.##.76.243':139
- '59.##.159.168':139
- '59.#7.3.239':139
- '59.#7.70.77':139
- '59.##.70.188':139
- '59.#7.9.234':139
- '59.#7.51.90':139
- '59.#7.77.56':139
- '59.#7.66.74':139
- '59.##.49.213':139
- '59.##.241.133':139
- '59.#7.29.80':139
- '59.##.90.169':139
- '59.##.237.182':139
- '59.#7.79.29':139
- '59.##.170.192':139
- '59.##.59.143':445
- '59.##.114.59':445
- '59.##.62.166':139
- '59.#7.8.139':139
- '59.##.193.113':445
- '59.##.136.114':445
- '59.#7.16.76':445
- '59.##.145.65':445
- '59.##.191.158':445
- '59.##.144.10':139
- '59.#7.23.54':139
- '59.#7.54.23':139
- '59.##.65.118':139
- '59.#7.41.93':139
- '59.#7.49.2':139
- '59.##.158.136':139
- '59.#7.197.8':139
- '59.#7.9.104':139
- '59.#7.48.9':139
- '59.##.211.216':445
- '59.##.187.189':445
- '59.##.88.163':445
- '59.##.107.59':445
- '59.##.166.188':445
- '59.#7.177.7':445
- '59.##.152.176':445
- '59.##.142.166':445
- '59.##.61.141':445
- '59.##.144.40':445
- '59.##.22.207':445
- '59.##.197.169':445
- '59.##.145.141':445
- '59.##.206.216':445
- '59.##.112.68':445
- '59.##.211.59':445
- '59.#7.40.38':445
- '59.##.65.211':445
- '59.##.227.137':445
- '59.##.235.207':139
- '59.##.65.211':139
- '59.##.227.137':139
- '59.##.197.169':139
- '59.##.112.68':139
- '59.##.211.59':139
- '59.##.88.163':139
- '59.##.107.59':139
- '59.#7.40.38':139
- '59.##.144.40':139
- '59.##.22.207':139
- '59.##.59.143':139
- '59.##.145.65':139
- '59.##.193.113':139
- '59.##.114.59':139
- '59.##.191.158':139
- '59.##.145.141':139
- '59.##.206.216':139
- '59.##.136.114':139
- '59.#7.16.76':139
- '59.##.155.56':139
- '59.#7.47.3':139
- '59.##.94.234':139
- '59.##.126.89':139
- '59.##.247.61':139
- '59.#7.84.46':139
- '59.##.244.157':139
- '59.##.144.126':139
- '59.##.92.219':139
- '59.##.65.194':139
- '59.##.166.188':139
- '59.##.142.166':139
- '59.##.211.216':139
- '59.##.187.189':139
- '59.##.61.141':139
- '59.##.181.152':139
- '59.##.85.182':139
- '59.#7.177.7':139
- '59.##.152.176':139
- '59.#7.51.5':139
- '59.##.13.162':139
- '59.##.17.151':139
- '59.##.161.251':139
- '59.##.213.151':139
- '59.##.86.151':445
- '59.##.188.168':445
- '59.##.119.213':139
- '59.#7.56.69':139
- '59.##.63.173':139
- '59.##.187.189':9988
- '59.##.85.182':9988
- '59.##.107.59':9988
- '59.##.166.188':9988
- '59.#7.48.9':9988
- '59.##.188.168':139
- '59.##.130.88':139
- '59.##.61.141':9988
- '59.##.86.151':139
- '59.##.61.167':139
- '59.##.238.102':139
- '59.##.205.124':139
- '59.#7.72.69':139
- '59.#7.80.39':139
- '59.##.199.241':139
- '59.##.192.199':139
- '59.##.33.148':139
- '59.#7.91.78':139
- '59.##.78.196':139
- '59.##.17.151':445
- '59.##.161.251':445
- '59.##.130.88':445
- '59.##.63.173':445
- '59.#7.51.5':445
- '59.##.119.213':445
- '59.#7.56.69':445
- '59.##.13.162':445
- '59.##.213.151':445
- '59.##.152.176':9988
- '59.##.235.207':445
- '59.##.65.118':445
- '59.#7.84.46':445
- '59.##.244.157':445
- '59.#7.41.93':445
- '59.#7.49.2':445
- '59.#7.9.104':445
- '59.#7.23.54':445
- '59.#7.54.23':445
- '59.##.92.219':445
- '59.##.65.194':445
- '59.##.94.234':445
- '59.##.181.152':445
- '59.##.85.182':445
- '59.##.126.89':445
- '59.##.247.61':445
- '59.##.144.126':445
- '59.##.155.56':445
- '59.#7.47.3':445
- '59.##.22.207':9988
- '59.##.211.59':9988
- '59.##.145.141':9988
- '59.##.206.216':9988
- '59.#7.177.7':9988
- '59.#7.47.3':9988
- '59.##.126.89':9988
- '59.##.142.166':9988
- '59.##.65.118':9988
- '59.#7.16.76':9988
- '59.#7.197.8':445
- '59.##.144.10':445
- '59.#7.48.9':445
- '59.##.158.136':445
- '59.##.62.166':445
- '59.##.114.59':9988
- '59.##.136.114':9988
- '59.#7.8.139':445
- '59.##.145.65':9988