Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '24.#8.4.212':445
- '24.##.109.43':445
- '24.##.146.133':445
- '24.##.20.182':445
- '24.##.41.236':445
- '24.##.204.96':139
- '24.##.149.243':139
- '24.##.209.93':445
- '24.##.84.108':139
- '24.##.20.182':139
- '24.#8.4.212':139
- '24.##.215.254':139
- '24.##.146.133':139
- '24.##.109.43':139
- '24.##.254.201':445
- '24.##.215.254':445
- '24.##.41.236':139
- '24.##.209.93':139
- '24.##.183.131':139
- '24.##.65.244':139
- '24.##.243.119':139
- '24.##.179.100':139
- '24.##.246.65':139
- '24.##.175.90':139
- '24.##.103.240':139
- '24.##.184.245':139
- '24.##.126.171':139
- '24.##.244.124':139
- '24.#8.56.74':139
- '24.##.229.94':139
- '24.#8.88.83':139
- '24.#8.95.5':139
- '24.#8.69.81':139
- '24.##.92.184':139
- '24.##.63.161':139
- '24.##.20.130':139
- '24.##.161.34':445
- '24.##.180.87':445
- '24.##.151.189':445
- '24.#8.88.34':445
- '24.##.22.131':445
- '24.##.70.216':445
- '24.##.189.129':445
- '24.#8.76.69':445
- '24.##.16.152':445
- '24.##.195.192':445
- '24.##.149.195':445
- '24.##.77.225':445
- '24.##.192.251':445
- '24.##.87.149':445
- '24.##.136.238':445
- '24.##.75.124':445
- '24.##.168.87':445
- '24.##.238.168':445
- '24.##.154.95':445
- '24.##.189.169':445
- '24.#8.51.71':445
- '24.##.72.240':445
- '24.##.221.189':445
- '24.##.66.164':445
- '24.##.254.201':139
- '24.#8.75.50':445
- '24.##.35.136':445
- '24.##.188.167':445
- '24.##.131.16':445
- '24.##.138.111':445
- '24.#8.24.86':445
- '24.##.63.215':445
- '24.##.171.103':445
- '24.##.215.170':445
- '24.##.119.165':445
- '24.##.103.169':445
- '24.##.38.224':139
- '24.##.200.168':445
- '24.##.25.204':445
- '24.##.123.84':445
- '24.##.168.48':445
- '24.##.129.187':445
- '24.##.87.206':445
- '24.##.133.202':445
- '24.##.74.233':445
- '24.#8.12.32':445
- '24.##.184.245':445
- '24.##.126.171':445
- '24.##.65.244':445
- '24.##.246.65':445
- '24.##.175.90':445
- '24.#8.50.42':445
- '24.##.216.240':445
- '24.##.103.240':445
- '24.##.38.224':445
- '24.#8.8.32':139
- '24.#8.119.7':139
- '24.##.61.230':445
- '24.#8.32.20':139
- '24.##.64.143':139
- '24.#8.3.241':139
- '24.##.63.110':139
- '24.#8.15.76':139
- '24.##.117.41':139
- '24.#8.238.6':445
- '24.##.43.238':445
- '24.##.140.233':445
- '24.#8.28.28':445
- '24.#8.8.24':445
- '24.##.100.142':445
- '24.##.107.46':445
- '24.##.19.137':445
- '24.##.201.19':445
- '24.##.140.233':139
- '24.#8.28.28':139
- '24.##.87.206':139
- '24.##.133.202':139
- '24.#8.238.6':139
- '24.##.19.137':139
- '24.##.201.19':139
- '24.##.43.238':139
- '24.#8.8.24':139
- '24.##.123.84':139
- '24.##.168.48':139
- '24.#8.50.42':139
- '24.##.216.240':139
- '24.##.200.168':139
- '24.##.74.233':139
- '24.#8.12.32':139
- '24.##.25.204':139
- '24.##.129.187':139
- '24.##.63.161':445
- '24.##.20.130':445
- '24.#8.56.74':445
- '24.#8.95.5':445
- '24.#8.69.81':445
- '24.##.179.100':445
- '24.##.183.131':445
- '24.##.92.184':445
- '24.##.243.119':445
- '24.##.61.230':139
- '24.##.84.108':445
- '24.##.100.142':139
- '24.##.107.46':139
- '24.##.204.96':445
- '24.#8.88.83':445
- '24.##.244.124':445
- '24.##.149.243':445
- '24.##.229.94':445
- '24.#8.8.172':139
- '24.#8.40.79':139
- '24.##.253.14':139
- '24.##.90.224':139
- '24.#8.6.98':139
- '24.#8.59.38':445
- '24.##.209.94':445
- '24.##.223.198':139
- '24.##.60.242':445
- '24.##.239.83':139
- '24.##.42.239':139
- '24.#8.30.16':139
- '24.#8.37.53':139
- '24.##.170.25':139
- '24.##.109.222':139
- '24.#8.49.78':139
- '24.##.64.134':139
- '24.#8.78.17':139
- '24.##.21.244':445
- '24.##.84.102':445
- '24.##.101.155':445
- '24.#8.82.84':445
- '24.##.215.11':445
- '24.##.231.249':445
- '24.#8.31.0':445
- '24.#8.12.19':445
- '24.#8.2.172':445
- '24.##.194.193':445
- '24.#8.3.17':445
- '24.##.156.189':445
- '24.##.135.84':445
- '24.##.171.111':445
- '24.##.171.129':445
- '24.##.105.127':445
- '24.##.114.148':445
- '24.#8.5.80':445
- '24.##.135.84':139
- '24.##.156.189':139
- '24.##.60.242':139
- '24.##.105.127':139
- '24.##.194.193':139
- '24.#8.2.172':139
- '24.##.171.129':139
- '24.#8.3.17':139
- '24.##.171.111':139
- '24.#8.12.19':139
- '24.##.21.244':139
- '24.#8.82.84':139
- '24.##.84.102':139
- '24.##.255.49':139
- '24.#8.59.38':139
- '24.##.215.11':139
- '24.##.209.94':139
- '24.##.101.155':139
- '24.##.162.105':139
- '24.##.129.70':139
- '24.##.151.32':139
- '24.##.45.151':139
- '24.##.220.197':139
- '24.##.172.214':139
- '24.##.58.163':139
- '24.#8.0.33':139
- '24.#8.84.95':139
- '24.#8.31.0':139
- '24.##.177.24':139
- '24.#8.5.80':139
- '24.##.114.148':139
- '24.#8.23.6':139
- '24.##.19.192':139
- '24.##.20.125':139
- '24.##.231.249':139
- '24.#8.75.39':139
- '24.##.177.24':445
- '24.#8.88.34':139
- '24.##.180.87':139
- '24.##.75.124':139
- '24.##.151.189':139
- '24.##.161.34':139
- '24.##.16.152':139
- '24.##.70.216':139
- '24.##.22.131':139
- '24.#8.76.69':139
- '24.##.192.251':139
- '24.##.195.192':139
- '24.#8.40.79':9988
- '24.##.77.225':139
- '24.##.149.195':139
- '24.##.238.168':139
- '24.##.136.238':139
- '24.##.87.149':139
- '24.##.168.87':139
- '24.##.72.240':139
- '24.##.154.95':139
- '24.##.215.170':139
- '24.#8.51.71':139
- '24.##.189.169':139
- '24.##.35.136':139
- '24.##.66.164':139
- '24.##.221.189':139
- '24.#8.75.50':139
- '24.#8.24.86':139
- '24.##.188.167':139
- '24.##.189.129':139
- '24.##.138.111':139
- '24.##.131.16':139
- '24.##.103.169':139
- '24.##.171.103':139
- '24.##.63.215':139
- '24.##.119.165':139
- '24.#8.30.16':445
- '24.##.172.214':445
- '24.##.20.125':445
- '24.#8.84.95':445
- '24.#8.0.33':445
- '24.##.239.83':445
- '24.##.42.239':445
- '24.##.58.163':445
- '24.#8.37.53':445
- '24.##.255.49':445
- '24.##.19.192':445
- '24.#8.23.6':445
- '24.#8.75.39':445
- '24.##.129.70':445
- '24.##.45.151':445
- '24.##.220.197':445
- '24.##.162.105':445
- '24.##.151.32':445
- '24.#8.3.17':9988
- '24.##.60.242':9988
- '24.##.253.14':445
- '24.##.90.224':445
- '24.##.171.111':9988
- '24.#8.49.78':9988
- '24.#8.6.98':9988
- '24.#8.82.84':9988
- '24.#8.78.17':9988
- '24.#8.78.17':445
- '24.##.109.222':445
- '24.##.170.25':445
- '24.##.64.134':445
- '24.#8.49.78':445
- '24.#8.8.172':445
- '24.#8.40.79':445
- '24.#8.6.98':445
- '24.##.223.198':445