Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '67.##.63.197':445
- '67.#9.56.18':445
- '67.#9.13.51':445
- '67.##.144.201':445
- '67.##.136.56':445
- '67.##.150.144':139
- '67.##.37.150':139
- '67.##.103.72':139
- '67.#9.5.104':139
- '67.#9.13.65':445
- '67.#9.47.21':445
- '67.#9.80.20':445
- '67.##.115.158':445
- '67.##.25.144':445
- '67.##.168.192':445
- '67.##.67.133':445
- '67.##.214.144':445
- '67.##.30.189':445
- '67.##.161.62':445
- '67.##.41.225':139
- '67.##.204.16':139
- '67.##.20.181':139
- '67.##.139.53':139
- '67.##.209.243':139
- '67.##.203.249':139
- '67.##.234.105':139
- '67.##.225.233':139
- '67.##.141.208':139
- '67.##.105.222':139
- '67.##.114.32':139
- '67.##.199.165':139
- '67.##.181.226':139
- '67.#9.5.222':139
- '67.##.165.207':139
- '67.##.161.165':139
- '67.#9.88.73':139
- '67.##.227.81':139
- '67.##.235.217':139
- '67.##.98.171':139
- '67.#9.1.131':445
- '67.##.230.136':445
- '67.##.112.148':445
- '67.##.217.239':445
- '67.##.160.230':445
- '67.##.221.121':445
- '67.##.214.235':445
- '67.##.139.203':445
- '67.##.55.231':445
- '67.##.188.194':445
- '67.##.136.56':139
- '67.##.82.220':445
- '67.##.63.197':139
- '67.#9.56.18':139
- '67.##.204.202':445
- '67.##.13.215':445
- '67.##.229.130':445
- '67.##.139.218':445
- '67.##.35.114':445
- '67.##.127.89':445
- '67.##.25.238':445
- '67.##.46.130':445
- '67.##.247.14':445
- '67.#9.38.24':445
- '67.#9.60.96':445
- '67.##.203.73':445
- '67.##.187.61':445
- '67.##.11.215':445
- '67.#9.74.12':445
- '67.##.246.215':445
- '67.##.87.225':445
- '67.##.117.254':445
- '67.##.218.20':445
- '67.##.109.154':445
- '67.##.134.107':445
- '67.#9.192.4':445
- '67.##.126.174':445
- '67.#9.97.72':445
- '67.##.76.113':445
- '67.##.98.150':445
- '67.##.56.115':445
- '67.##.234.105':445
- '67.##.225.233':445
- '67.#9.67.87':445
- '67.##.149.158':445
- '67.#9.89.79':445
- '67.##.108.110':445
- '67.##.69.185':445
- '67.##.105.222':445
- '67.##.114.32':445
- '67.##.139.53':445
- '67.#9.88.73':445
- '67.##.227.81':445
- '67.##.209.243':445
- '67.##.203.249':445
- '67.##.141.208':445
- '67.##.204.16':445
- '67.##.20.181':445
- '67.##.102.32':445
- '67.#9.57.79':445
- '67.##.96.242':445
- '67.##.45.200':445
- '67.##.24.165':445
- '67.##.42.171':445
- '67.#9.120.1':445
- '67.##.123.206':445
- '67.##.102.134':445
- '67.##.161.10':445
- '67.##.33.200':445
- '67.##.229.110':445
- '67.#9.2.43':445
- '67.##.122.101':445
- '67.#9.3.129':445
- '67.##.147.32':445
- '67.##.140.114':445
- '67.#9.25.24':445
- '67.##.86.103':445
- '67.##.195.32':445
- '67.##.147.32':139
- '67.##.86.103':139
- '67.##.229.110':139
- '67.#9.2.43':139
- '67.##.195.32':139
- '67.##.33.200':139
- '67.##.45.200':139
- '67.##.140.114':139
- '67.#9.25.24':139
- '67.#9.3.129':139
- '67.#9.67.87':139
- '67.##.108.110':139
- '67.##.98.150':139
- '67.##.56.115':139
- '67.##.69.185':139
- '67.##.102.32':139
- '67.##.122.101':139
- '67.##.149.158':139
- '67.#9.89.79':139
- '67.##.24.165':139
- '67.#9.5.222':445
- '67.##.165.207':445
- '67.##.37.150':445
- '67.##.41.225':445
- '67.##.199.165':445
- '67.##.235.217':445
- '67.##.98.171':445
- '67.##.181.226':445
- '67.##.161.165':445
- '67.##.150.144':445
- '67.##.42.171':139
- '67.##.102.134':139
- '67.#9.57.79':139
- '67.##.96.242':139
- '67.##.161.10':139
- '67.##.103.72':445
- '67.#9.5.104':445
- '67.#9.120.1':139
- '67.##.123.206':139
- '67.##.144.201':139
- '67.##.29.226':445
- '67.##.40.149':445
- '67.##.118.141':139
- '67.##.224.90':139
- '67.##.63.163':445
- '67.##.115.148':445
- '67.##.199.72':445
- '67.#9.59.6':445
- '67.##.163.185':445
- '67.#9.42.24':139
- '67.##.235.204':139
- '67.#9.21.45':139
- '67.##.178.228':139
- '67.##.205.122':139
- '67.##.79.212':139
- '67.#9.47.48':139
- '67.##.100.136':139
- '67.##.39.140':139
- '67.##.149.163':139
- '67.##.55.199':445
- '67.##.65.181':445
- '67.##.85.114':445
- '67.#9.237.6':445
- '67.##.136.205':445
- '67.##.147.234':445
- '67.##.190.146':445
- '67.##.190.197':445
- '67.##.100.28':445
- '67.#9.74.61':445
- '67.##.205.96':445
- '67.##.224.14':445
- '67.##.244.223':445
- '67.#9.58.56':445
- '67.#9.15.58':445
- '67.##.191.244':445
- '67.##.36.200':445
- '67.##.125.16':445
- '67.##.133.185':445
- '67.##.43.238':445
- '67.##.191.244':139
- '67.##.133.185':139
- '67.##.224.14':139
- '67.##.244.223':139
- '67.##.43.238':139
- '67.#9.237.6':139
- '67.##.205.96':139
- '67.##.36.200':139
- '67.##.125.16':139
- '67.#9.15.58':139
- '67.##.29.226':139
- '67.##.163.185':139
- '67.##.40.149':139
- '67.#9.59.6':139
- '67.##.63.163':139
- '67.##.55.199':139
- '67.#9.58.56':139
- '67.##.115.148':139
- '67.##.199.72':139
- '67.##.136.205':139
- '67.##.168.223':139
- '67.#9.76.1':139
- '67.#9.9.133':139
- '67.##.34.163':139
- '67.##.120.64':139
- '67.#9.41.47':139
- '67.##.50.147':139
- '67.##.158.116':139
- '67.##.202.33':139
- '67.##.112.210':139
- '67.##.147.234':139
- '67.##.100.28':139
- '67.##.65.181':139
- '67.##.85.114':139
- '67.#9.74.61':139
- '67.##.103.104':139
- '67.##.97.229':139
- '67.##.190.197':139
- '67.##.190.146':139
- '67.##.117.254':139
- '67.##.134.107':139
- '67.##.109.154':139
- '67.##.87.225':139
- '67.#9.97.72':139
- '67.##.126.174':139
- '67.##.246.215':139
- '67.##.76.113':139
- '67.#9.192.4':139
- '67.##.218.20':139
- '67.##.230.136':139
- '67.##.160.230':139
- '67.##.217.239':139
- '67.#9.1.131':139
- '67.##.139.203':139
- '67.##.214.235':139
- '67.##.127.89':139
- '67.##.55.231':139
- '67.##.221.121':139
- '67.##.247.14':139
- '67.##.168.192':139
- '67.##.30.189':139
- '67.#9.47.21':139
- '67.#9.80.20':139
- '67.##.161.62':139
- '67.#9.13.65':139
- '67.#9.13.51':139
- '67.##.67.133':139
- '67.##.214.144':139
- '67.##.25.144':139
- '67.##.46.130':139
- '67.#9.60.96':139
- '67.#9.38.24':139
- '67.##.25.238':139
- '67.##.11.215':139
- '67.##.187.61':139
- '67.##.115.158':139
- '67.#9.74.12':139
- '67.##.203.73':139
- '67.##.178.228':445
- '67.##.205.122':445
- '67.#9.41.47':445
- '67.##.50.147':445
- '67.##.235.204':445
- '67.##.39.140':445
- '67.##.149.163':445
- '67.#9.21.45':445
- '67.##.79.212':445
- '67.##.202.33':445
- '67.##.112.210':445
- '67.#9.9.133':445
- '67.##.103.104':445
- '67.##.97.229':445
- '67.##.34.163':445
- '67.##.120.64':445
- '67.##.158.116':445
- '67.##.168.223':445
- '67.#9.76.1':445
- '67.#9.47.48':445
- '67.##.204.202':139
- '67.##.139.218':139
- '67.##.79.212':9988
- '67.##.82.220':139
- '67.##.35.114':139
- '67.##.188.194':139
- '67.##.112.148':139
- '67.##.13.215':139
- '67.##.229.130':139
- '67.#9.21.45':9988
- '67.##.118.141':445
- '67.##.224.90':445
- '67.##.100.136':445
- '67.#9.42.24':445
- '67.##.191.244':9988
- '67.##.178.228':9988
- '67.##.55.199':9988
- '67.##.133.185':9988
- '67.##.244.223':9988