Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '60.##.205.229':445
- '60.##.160.124':445
- '60.##.112.173':445
- '60.##.229.174':445
- '60.##.247.97':445
- '60.##.28.197':445
- '60.#1.38.6':445
- '60.##.97.184':445
- '60.##.171.52':445
- '60.##.49.185':445
- '60.##.222.238':445
- '60.#1.101.4':445
- '60.##.39.110':139
- '60.##.112.117':139
- '60.##.111.105':445
- '60.##.57.238':445
- '60.##.86.161':445
- '60.##.204.71':445
- '60.##.232.30':445
- '60.##.219.164':445
- '60.##.142.88':445
- '60.##.209.142':445
- '60.##.120.80':445
- '60.##.30.228':445
- '60.#1.104.3':445
- '60.#1.54.28':445
- '60.##.148.53':445
- '60.##.55.250':445
- '60.##.131.28':445
- '60.#1.72.60':445
- '60.##.146.163':445
- '60.##.35.142':445
- '60.##.234.117':445
- '60.##.187.88':445
- '60.##.197.161':445
- '60.##.193.80':445
- '60.##.136.151':445
- '60.##.72.227':445
- '60.##.218.127':445
- '60.#1.12.22':139
- '60.##.35.142':139
- '60.##.197.161':139
- '60.##.187.88':139
- '60.##.146.163':139
- '60.##.72.227':139
- '60.##.136.151':139
- '60.#1.72.60':139
- '60.##.218.127':139
- '60.##.193.80':139
- '60.##.234.117':139
- '60.##.160.124':139
- '60.##.247.97':139
- '60.##.229.174':139
- '60.##.205.229':139
- '60.##.97.184':139
- '60.#1.38.6':139
- '60.##.219.164':139
- '60.##.171.52':139
- '60.##.28.197':139
- '60.##.120.80':139
- '60.##.179.157':139
- '60.##.226.126':139
- '60.##.94.109':139
- '60.##.36.121':139
- '60.#1.63.13':139
- '60.#1.64.57':139
- '60.#1.43.64':139
- '60.##.112.116':139
- '60.##.57.171':139
- '60.##.29.190':139
- '60.##.209.142':139
- '60.#1.104.3':139
- '60.##.30.228':139
- '60.##.142.88':139
- '60.##.55.250':139
- '60.##.148.53':139
- '60.##.123.233':139
- '60.##.131.28':139
- '60.#1.54.28':139
- '60.##.15.171':139
- '60.##.51.105':139
- '60.##.238.150':139
- '60.#1.167.0':139
- '60.##.120.181':139
- '60.##.178.227':139
- '60.##.81.216':139
- '60.##.55.238':139
- '60.##.227.207':139
- '60.##.226.18':139
- '60.#1.151.2':139
- '60.##.182.24':139
- '60.#1.33.4':139
- '60.##.72.162':139
- '60.##.254.237':139
- '60.#1.96.64':139
- '60.##.78.101':139
- '60.##.147.67':139
- '60.#1.65.49':139
- '60.#1.93.67':139
- '60.##.210.38':445
- '60.##.74.131':445
- '60.##.134.226':445
- '60.#1.38.93':445
- '60.##.179.96':445
- '60.#1.92.6':445
- '60.##.131.90':445
- '60.#1.65.71':445
- '60.##.187.119':445
- '60.#1.97.79':445
- '60.##.206.180':139
- '60.#1.68.29':139
- '60.##.145.147':139
- '60.##.34.175':139
- '60.##.217.34':139
- '60.##.74.102':445
- '60.##.12.144':445
- '60.##.116.253':445
- '60.##.163.138':445
- '60.##.38.231':139
- '60.##.39.110':445
- '60.##.112.117':445
- '60.#1.43.64':445
- '60.#1.12.22':445
- '60.##.116.253':139
- '60.##.12.144':139
- '60.#1.97.79':139
- '60.##.163.138':139
- '60.##.74.102':139
- '60.#1.64.57':445
- '60.##.94.109':445
- '60.##.36.121':445
- '60.##.123.233':445
- '60.##.29.190':445
- '60.##.179.157':445
- '60.##.112.116':445
- '60.##.57.171':445
- '60.##.226.126':445
- '60.#1.63.13':445
- '60.##.134.226':139
- '60.#1.1.11':139
- '60.##.173.170':139
- '60.#1.38.87':139
- '60.##.31.167':139
- '60.##.208.139':139
- '60.##.22.101':139
- '60.#1.78.42':139
- '60.##.22.107':139
- '60.##.111.33':139
- '60.#1.39.53':139
- '60.##.74.131':139
- '60.##.179.96':139
- '60.#1.38.93':139
- '60.##.210.38':139
- '60.#1.65.71':139
- '60.##.131.90':139
- '60.##.52.156':139
- '60.##.187.119':139
- '60.#1.92.6':139
- '60.##.112.173':139
- '60.##.152.238':445
- '60.##.130.188':445
- '60.##.180.209':139
- '60.##.188.25':445
- '60.#1.7.186':445
- '60.##.230.41':445
- '60.##.74.124':445
- '60.##.144.203':445
- '60.##.31.149':445
- '60.##.98.109':139
- '60.##.225.125':139
- '60.##.199.24':139
- '60.##.33.120':139
- '60.##.125.201':139
- '60.##.118.86':139
- '60.##.42.146':139
- '60.#1.96.4':139
- '60.##.130.118':139
- '60.#1.16.59':139
- '60.##.240.139':445
- '60.##.191.132':445
- '60.##.144.191':445
- '60.##.169.11':445
- '60.#1.66.80':445
- '60.##.173.144':445
- '60.##.128.77':445
- '60.##.46.125':445
- '60.##.224.133':445
- '60.##.250.12':445
- '60.##.186.51':445
- '60.##.136.231':445
- '60.#1.31.71':445
- '60.##.16.168':445
- '60.#1.7.156':445
- '60.#1.4.228':445
- '60.##.27.180':445
- '60.##.129.253':445
- '60.#1.46.52':445
- '60.##.152.237':445
- '60.##.112.249':139
- '60.#1.31.71':139
- '60.#1.4.228':139
- '60.#1.7.156':139
- '60.##.136.231':139
- '60.#1.46.52':139
- '60.##.129.253':139
- '60.##.186.51':139
- '60.##.152.237':139
- '60.##.27.180':139
- '60.##.16.168':139
- '60.##.130.188':139
- '60.#1.7.186':139
- '60.##.188.25':139
- '60.##.152.238':139
- '60.##.144.203':139
- '60.##.74.124':139
- '60.##.240.139':139
- '60.##.31.149':139
- '60.##.230.41':139
- '60.##.169.11':139
- '60.#1.133.5':139
- '60.##.232.13':139
- '60.##.140.44':139
- '60.##.50.210':139
- '60.##.122.109':139
- '60.##.176.194':139
- '60.##.56.154':139
- '60.##.189.122':139
- '60.##.117.189':139
- '60.##.147.103':139
- '60.##.144.191':139
- '60.##.173.144':139
- '60.#1.66.80':139
- '60.##.191.132':139
- '60.##.224.133':139
- '60.##.46.125':139
- '60.##.124.186':139
- '60.##.250.12':139
- '60.##.128.77':139
- '60.##.65.191':139
- '60.##.117.158':139
- '60.#1.40.87':139
- '60.##.186.151':139
- '60.#1.7.35':139
- '60.##.14.222':445
- '60.##.104.153':445
- '60.#1.239.3':139
- '60.##.154.220':445
- '60.##.195.38':139
- '60.##.14.222':139
- '60.##.104.153':139
- '60.##.140.44':9988
- '60.##.154.220':139
- '60.##.234.191':139
- '60.#1.0.174':139
- '60.##.26.141':139
- '60.##.26.235':139
- '60.##.246.26':139
- '60.##.234.191':445
- '60.#1.101.4':139
- '60.##.111.105':139
- '60.#1.239.3':445
- '60.##.222.238':139
- '60.##.204.71':139
- '60.##.86.161':139
- '60.##.49.185':139
- '60.##.232.30':139
- '60.##.57.238':139
- '60.#1.7.35':445
- '60.#1.0.174':445
- '60.##.26.141':445
- '60.##.26.235':445
- '60.##.246.26':445
- '60.##.195.38':445
- '60.##.65.191':445
- '60.##.117.158':445
- '60.#1.40.87':445
- '60.##.186.151':445
- '60.##.147.103':9988
- '60.##.33.120':445
- '60.##.125.201':445
- '60.##.56.154':445
- '60.##.112.249':445
- '60.##.225.125':445
- '60.##.130.118':445
- '60.#1.16.59':445
- '60.##.199.24':445
- '60.##.118.86':445
- '60.##.176.194':445
- '60.##.140.44':445
- '60.##.50.210':445
- '60.##.124.186':445
- '60.##.147.103':445
- '60.#1.133.5':445
- '60.##.189.122':445
- '60.##.117.189':445
- '60.##.232.13':445
- '60.##.122.109':445
- '60.##.42.146':445
- '60.##.169.11':9988
- '60.#1.66.80':9988
- '60.##.74.124':9988
- '60.#1.7.156':9988
- '60.##.191.132':9988
- '60.##.176.194':9988
- '60.#1.133.5':9988
- '60.##.224.133':9988
- '60.##.112.249':9988
- '60.##.230.41':9988
- '60.##.180.209':445
- '60.#1.7.186':9988
- '60.#1.96.4':445
- '60.##.98.109':445
- '60.##.188.25':9988
- '60.##.144.203':9988
- '60.##.31.149':9988
- '60.##.152.238':9988
- '60.##.130.188':9988