Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '13#.#7.245.232':139
- '13#.#7.144.249':139
- '13#.#7.231.83':139
- '13#.#7.106.33':139
- '13#.#7.248.119':139
- '13#.#7.193.53':139
- '13#.#7.139.123':139
- '13#.#7.54.116':139
- '13#.#7.245.217':139
- '13#.#7.216.25':139
- '13#.#7.232.83':139
- '13#.#7.5.179':139
- '13#.#7.145.101':139
- '13#.#7.174.162':445
- '13#.#7.76.15':445
- '13#.#7.91.210':445
- '13#.#7.138.245':139
- '13#.#7.31.191':139
- '13#.17.87.6':139
- '13#.#7.223.73':139
- '13#.#7.93.139':139
- '13#.#7.248.119':445
- '13#.#7.231.83':445
- '13#.#7.106.33':445
- '13#.#7.31.191':445
- '13#.#7.232.83':445
- '13#.#7.216.25':445
- '13#.#7.54.116':445
- '13#.#7.245.217':445
- '13#.#7.245.232':445
- '13#.#7.144.249':445
- '13#.#7.138.245':445
- '13#.#7.26.13':139
- '13#.#7.98.14':139
- '13#.#7.135.167':139
- '13#.#7.26.15':139
- '13#.#7.128.92':139
- '13#.#7.93.139':445
- '13#.17.87.6':445
- '13#.#7.223.73':445
- '13#.#7.5.179':445
- '13#.#7.145.101':445
- '13#.#7.72.56':445
- '13#.#7.72.56':139
- '13#.#7.76.15':139
- '13#.#7.92.111':139
- '13#.#7.168.168':139
- '13#.#7.40.67':139
- '13#.#7.84.132':445
- '13#.#7.118.74':445
- '13#.#7.12.87':445
- '13#.#7.91.210':139
- '13#.#7.174.162':139
- '13#.#7.139.28':139
- '13#.#7.43.184':139
- '13#.#7.78.213':139
- '13#.#7.242.188':139
- '13#.#7.21.141':139
- '13#.#7.188.106':139
- '13#.#7.137.66':139
- '13#.#7.234.219':139
- '13#.#7.147.104':139
- '13#.#7.178.2':139
- '13#.#7.73.136':139
- '13#.#7.147.104':445
- '13#.#7.137.66':445
- '13#.#7.73.136':445
- '13#.#7.78.213':445
- '13#.#7.178.2':445
- '13#.#7.40.67':445
- '13#.#7.92.111':445
- '13#.#7.168.168':445
- '13#.#7.234.219':445
- '13#.#7.139.28':445
- '13#.#7.43.184':445
- '13#.#7.43.106':445
- '13#.#7.36.141':445
- '13#.#7.138.203':445
- '13#.#7.27.192':445
- '13#.#7.203.27':445
- '13#.#7.188.106':445
- '13#.#7.242.188':445
- '13#.#7.21.141':445
- '13#.#7.80.232':445
- '13#.#7.78.126':445
- '13#.#7.193.53':445
- '13#.#7.66.158':445
- '13#.#7.183.66':445
- '13#.#7.80.253':445
- '13#.#7.3.224':445
- '13#.#7.38.248':445
- '13#.#7.94.130':139
- '13#.#7.56.69':139
- '13#.#7.173.114':445
- '13#.#7.97.224':445
- '13#.#7.121.52':445
- '13#.#7.124.204':445
- '13#.#7.122.159':445
- '13#.#7.224.39':445
- '13#.#7.99.26':445
- '13#.#7.141.101':445
- '13#.#7.160.131':445
- '13#.#7.111.23':445
- '13#.#7.78.143':445
- '13#.#7.23.37':445
- '13#.#7.16.198':445
- '13#.#7.36.205':445
- '13#.#7.194.239':139
- '13#.#7.131.198':139
- '13#.#7.37.139':139
- '13#.#7.36.200':139
- '13#.#7.208.36':139
- '13#.#7.98.60':139
- '13#.#7.109.250':139
- '13#.#7.206.73':139
- '13#.#7.102.63':139
- '13#.#7.89.237':139
- '13#.#7.246.123':139
- '13#.#7.136.71':139
- '13#.#7.44.136':139
- '13#.#7.234.25':139
- '13#.#7.88.167':139
- '13#.#7.49.82':139
- '13#.#7.227.179':139
- '13#.#7.108.228':139
- '13#.#7.106.223':139
- '13#.#7.48.54':139
- '13#.#7.197.204':139
- '13#.#7.174.42':445
- '13#.#7.174.42':139
- '13#.#7.141.101':139
- '13#.#7.228.148':139
- '13#.#7.244.192':139
- '13#.#7.182.251':139
- '13#.#7.224.39':139
- '13#.#7.16.198':139
- '13#.#7.122.159':139
- '13#.#7.160.131':139
- '13#.#7.99.26':139
- '13#.#7.166.132':139
- '13#.#7.135.167':445
- '13#.#7.26.13':445
- '13#.#7.128.92':445
- '13#.#7.139.123':445
- '13#.#7.26.15':445
- '13#.#7.209.174':139
- '13#.#7.245.9':139
- '13#.#7.188.254':139
- '13#.#7.98.14':445
- '13#.#7.246.99':139
- '13#.#7.188.254':445
- '13#.#7.209.174':445
- '13#.#7.246.99':445
- '13#.#7.121.52':139
- '13#.#7.173.114':139
- '13#.#7.182.251':445
- '13#.#7.228.148':445
- '13#.#7.244.192':445
- '13#.#7.245.9':445
- '13#.#7.166.132':445
- '13#.#7.97.224':139
- '13#.#7.78.143':139
- '13#.#7.124.204':139
- '13#.#7.111.23':139
- '13#.#7.36.205':139
- '13#.#7.23.37':139
- '13#.#7.66.158':139
- '13#.#7.183.66':139
- '13#.#7.80.253':139
- '13#.#7.3.224':139
- '13#.#7.38.248':139
- '13#.#7.78.126':139
- '13#.#7.93.143':445
- '13#.#7.242.223':445
- '13#.#7.128.47':445
- '13#.#7.47.125':445
- '13#.#7.102.68':445
- '13#.#7.103.253':445
- '13#.#7.249.115':445
- '13#.#7.248.174':445
- '13#.#7.205.217':445
- '13#.#7.251.14':445
- '13#.#7.177.31':445
- '13#.#7.44.244':139
- '13#.#7.44.145':139
- '13#.#7.141.196':139
- '13#.17.8.71':139
- '13#.#7.107.98':139
- '13#.#7.90.28':445
- '13#.#7.80.41':445
- '13#.#7.80.121':139
- '13#.#7.204.96':139
- '13#.#7.53.12':139
- '13#.#7.23.27':445
- '13#.#7.114.22':445
- '13#.#7.34.89':445
- '13#.#7.43.160':445
- '13#.#7.147.168':445
- '13#.#7.174.68':445
- '13#.#7.19.30':445
- '13#.#7.28.50':445
- '13#.#7.201.114':445
- '13#.#7.49.201':445
- '13#.#7.158.184':445
- '13#.#7.38.236':445
- '13#.#7.32.252':445
- '13#.#7.68.36':445
- '13#.#7.236.249':445
- '13#.#7.70.237':445
- '13#.#7.174.169':445
- '13#.#7.59.212':445
- '13#.#7.39.25':445
- '13#.#7.155.32':445
- '13#.#7.51.160':445
- '13#.#7.93.17':139
- '13#.#7.70.237':139
- '13#.#7.68.36':139
- '13#.#7.236.249':139
- '13#.#7.103.253':139
- '13#.#7.249.115':139
- '13#.#7.51.160':139
- '13#.#7.39.25':139
- '13#.#7.155.32':139
- '13#.#7.38.236':139
- '13#.#7.32.252':139
- '13#.#7.248.174':139
- '13#.#7.102.68':139
- '13#.#7.80.41':139
- '13#.#7.90.28':139
- '13#.#7.128.47':139
- '13#.#7.47.125':139
- '13#.#7.205.217':139
- '13#.#7.251.14':139
- '13#.#7.93.143':139
- '13#.#7.177.31':139
- '13#.#7.242.223':139
- '13#.#7.91.188':139
- '13#.#7.49.15':139
- '13#.#7.31.182':139
- '13#.#7.174.68':139
- '13#.#7.19.30':139
- '13#.#7.49.34':139
- '13#.#7.42.216':139
- '13#.17.8.97':139
- '13#.#7.59.14':139
- '13#.17.6.30':139
- '13#.#7.28.50':139
- '13#.#7.43.160':139
- '13#.#7.147.168':139
- '13#.#7.158.184':139
- '13#.#7.174.169':139
- '13#.#7.59.212':139
- '13#.#7.201.114':139
- '13#.#7.49.201':139
- '13#.#7.114.22':139
- '13#.#7.34.89':139
- '13#.#7.23.27':139
- '13#.#7.31.182':445
- '13#.#7.136.76':445
- '13#.#7.121.82':445
- '13#.#7.99.90':445
- '13#.#7.45.156':445
- '13#.#7.109.228':445
- '13#.#7.105.147':445
- '13#.#7.28.132':445
- '13#.#7.154.159':445
- '13#.#7.60.133':445
- '13#.#7.12.46':445
- '13#.#7.170.246':445
- '13#.#7.115.35':139
- '13#.#7.14.70':139
- '13#.#7.13.86':139
- '13#.#7.244.107':139
- '13#.#7.93.244':139
- '13#.#7.222.117':139
- '13#.#7.32.139':139
- '13#.#7.118.33':139
- '13#.#7.125.217':139
- '13#.#7.157.243':139
- '13#.#7.118.74':139
- '13#.#7.27.192':139
- '13#.#7.84.132':139
- '13#.#7.32.139':445
- '13#.#7.12.87':139
- '13#.#7.36.141':139
- '13#.#7.80.232':139
- '13#.#7.43.106':139
- '13#.#7.203.27':139
- '13#.#7.138.203':139
- '13#.#7.222.117':445
- '13#.#7.93.244':445
- '13#.#7.13.86':445
- '13#.#7.244.107':445
- '13#.#7.237.246':445
- '13#.#7.107.226':445
- '13#.#7.157.243':445
- '13#.#7.118.33':445
- '13#.#7.125.217':445
- '13#.#7.115.35':445
- '13#.#7.14.70':445
- '13#.#7.107.226':139
- '13#.#7.53.12':445
- '13#.#7.80.121':445
- '13#.#7.204.96':445
- '13#.#7.44.244':445
- '13#.#7.44.145':445
- '13#.#7.248.174':9988
- '13#.#7.249.115':9988
- '13#.#7.251.14':9988
- '13#.#7.177.31':9988
- '13#.#7.205.217':9988
- '13#.#7.141.196':445
- '13#.17.6.30':445
- '13#.17.8.97':445
- '13#.#7.59.14':445
- '13#.#7.91.188':445
- '13#.#7.49.15':445
- '13#.17.8.71':445
- '13#.#7.107.98':445
- '13#.#7.93.17':445
- '13#.#7.49.34':445
- '13#.#7.42.216':445
- '13#.#7.121.82':139
- '13#.#7.60.133':139
- '13#.#7.136.76':139
- '13#.#7.109.228':139
- '13#.#7.99.90':139
- '13#.#7.28.132':139
- '13#.#7.237.246':139
- '13#.#7.105.147':139
- '13#.#7.12.46':139
- '13#.#7.154.159':139
- '13#.#7.45.156':139
- '13#.#7.51.160':9988
- '13#.#7.158.184':9988
- '13#.#7.32.252':9988
- '13#.#7.68.36':9988
- '13#.#7.38.236':9988
- '13#.#7.201.114':9988
- '13#.#7.170.246':139
- '13#.#7.114.22':9988
- '13#.#7.147.168':9988
- '13#.#7.23.27':9988