Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##.220.229':139
- '88.##.151.230':139
- '88.##.230.73':139
- '88.##.244.114':139
- '88.##.73.244':139
- '88.##.144.74':139
- '88.##.88.170':139
- '88.#6.75.73':139
- '88.##.140.170':139
- '88.##.72.140':139
- '88.##.197.59':139
- '88.#6.61.5':139
- '88.##.138.31':139
- '88.##.66.141':139
- '88.##.41.193':445
- '88.##.99.245':139
- '88.##.246.65':139
- '88.#6.78.39':139
- '88.#6.92.28':139
- '88.#6.20.1':139
- '88.#6.28.47':139
- '88.##.73.244':445
- '88.##.230.73':445
- '88.##.244.114':445
- '88.#6.78.39':445
- '88.##.197.59':445
- '88.##.72.140':445
- '88.#6.75.73':445
- '88.##.140.170':445
- '88.##.220.229':445
- '88.##.151.230':445
- '88.##.246.65':445
- '88.##.99.245':445
- '88.##.66.141':445
- '88.##.143.68':139
- '88.##.170.212':139
- '88.##.80.159':139
- '88.#6.28.47':445
- '88.#6.92.28':445
- '88.#6.20.1':445
- '88.#6.61.5':445
- '88.##.138.31':445
- '88.##.41.193':139
- '88.#6.162.8':445
- '88.##.244.169':139
- '88.#6.50.41':139
- '88.#6.43.56':139
- '88.##.206.169':445
- '88.##.109.219':445
- '88.##.15.196':445
- '88.##.187.153':445
- '88.#6.3.176':445
- '88.##.40.201':139
- '88.##.163.176':139
- '88.##.190.103':139
- '88.##.176.141':139
- '88.##.151.173':139
- '88.##.35.151':139
- '88.#6.2.84':139
- '88.##.135.168':139
- '88.##.160.110':139
- '88.##.190.205':139
- '88.##.197.190':139
- '88.##.160.110':445
- '88.#6.2.84':445
- '88.##.197.190':445
- '88.##.190.103':445
- '88.##.190.205':445
- '88.#6.43.56':445
- '88.##.244.169':445
- '88.#6.50.41':445
- '88.##.135.168':445
- '88.##.40.201':445
- '88.##.163.176':445
- '88.#6.59.45':445
- '88.##.135.195':445
- '88.##.234.109':445
- '88.##.123.183':445
- '88.##.254.50':445
- '88.##.35.151':445
- '88.##.176.141':445
- '88.##.151.173':445
- '88.##.175.135':445
- '88.##.250.141':445
- '88.#6.202.9':445
- '88.##.30.236':445
- '88.#6.50.55':445
- '88.##.249.127':445
- '88.#6.97.1':445
- '88.##.154.64':139
- '88.##.32.145':139
- '88.#6.64.55':445
- '88.#6.30.31':445
- '88.#6.55.29':445
- '88.##.28.119':445
- '88.##.182.249':445
- '88.##.84.152':445
- '88.##.215.192':445
- '88.##.234.34':445
- '88.##.192.169':445
- '88.##.114.135':445
- '88.##.119.226':445
- '88.##.51.228':445
- '88.#6.10.85':445
- '88.##.207.108':445
- '88.##.45.182':139
- '88.##.207.174':139
- '88.#6.96.51':139
- '88.##.44.227':139
- '88.#6.1.112':139
- '88.##.236.44':139
- '88.##.37.168':139
- '88.##.86.241':139
- '88.##.58.208':139
- '88.##.168.104':139
- '88.#6.18.74':139
- '88.##.123.201':139
- '88.##.102.62':139
- '88.##.200.226':139
- '88.#6.40.26':139
- '88.##.227.39':139
- '88.##.111.114':139
- '88.##.73.112':139
- '88.##.114.31':139
- '88.##.162.29':139
- '88.##.31.217':139
- '88.##.234.34':139
- '88.##.192.169':139
- '88.##.201.40':139
- '88.##.222.221':139
- '88.##.194.186':139
- '88.#6.10.85':139
- '88.##.207.108':139
- '88.##.84.152':139
- '88.##.215.192':139
- '88.##.182.249':139
- '88.##.221.239':139
- '88.##.80.159':445
- '88.##.143.68':445
- '88.##.170.212':445
- '88.##.144.74':445
- '88.##.88.170':445
- '88.#6.255.2':139
- '88.##.218.253':139
- '88.#6.3.97':139
- '88.##.175.160':139
- '88.##.149.16':139
- '88.#6.3.97':445
- '88.#6.255.2':445
- '88.##.149.16':445
- '88.#6.64.55':139
- '88.##.175.160':445
- '88.##.194.186':445
- '88.##.201.40':445
- '88.##.222.221':445
- '88.##.218.253':445
- '88.##.221.239':445
- '88.#6.55.29':139
- '88.##.28.119':139
- '88.##.249.127':139
- '88.##.119.226':139
- '88.##.51.228':139
- '88.##.114.135':139
- '88.##.30.236':139
- '88.#6.30.31':139
- '88.#6.202.9':139
- '88.#6.97.1':139
- '88.#6.50.55':139
- '88.##.250.141':139
- '88.##.254.205':445
- '88.#6.51.5':445
- '88.##.205.142':445
- '88.##.186.78':445
- '88.##.141.125':445
- '88.##.148.209':445
- '88.##.66.149':445
- '88.##.222.12':445
- '88.##.138.153':445
- '88.##.186.138':445
- '88.#6.13.64':445
- '88.##.193.102':139
- '88.#6.27.0':139
- '88.##.246.161':139
- '88.#6.64.94':139
- '88.##.142.175':139
- '88.##.54.109':139
- '88.#6.4.191':445
- '88.##.234.221':139
- '88.#6.90.41':139
- '88.##.176.173':139
- '88.#6.63.63':445
- '88.##.208.91':445
- '88.#6.22.30':445
- '88.##.121.221':445
- '88.##.62.106':445
- '88.#6.96.31':445
- '88.#6.21.29':445
- '88.##.200.204':445
- '88.#6.85.81':445
- '88.#6.79.85':445
- '88.##.28.224':445
- '88.##.78.200':445
- '88.##.130.221':445
- '88.##.181.19':445
- '88.##.120.63':445
- '88.#6.20.2':445
- '88.##.239.208':445
- '88.##.53.131':445
- '88.#6.1.14':445
- '88.#6.0.169':445
- '88.#6.95.83':445
- '88.##.181.19':139
- '88.##.78.200':139
- '88.#6.20.2':139
- '88.##.66.149':139
- '88.##.120.63':139
- '88.#6.1.14':139
- '88.##.239.208':139
- '88.#6.95.83':139
- '88.##.130.221':139
- '88.#6.0.169':139
- '88.##.148.209':139
- '88.##.141.125':139
- '88.##.205.142':139
- '88.##.186.78':139
- '88.#6.13.64':139
- '88.#6.4.191':139
- '88.##.186.138':139
- '88.##.222.12':139
- '88.##.138.153':139
- '88.##.254.205':139
- '88.#6.51.5':139
- '88.##.246.78':139
- '88.##.170.215':139
- '88.##.94.231':139
- '88.#6.21.29':139
- '88.##.99.240':139
- '88.#6.38.15':139
- '88.##.138.59':139
- '88.##.153.134':139
- '88.#6.32.37':139
- '88.##.134.162':139
- '88.#6.96.31':139
- '88.##.62.106':139
- '88.#6.22.30':139
- '88.##.121.221':139
- '88.##.53.131':139
- '88.##.28.224':139
- '88.#6.79.85':139
- '88.##.200.204':139
- '88.#6.85.81':139
- '88.#6.63.63':139
- '88.##.208.91':139
- '88.##.58.153':445
- '88.##.140.162':445
- '88.##.104.53':445
- '88.##.164.233':445
- '88.##.24.197':445
- '88.##.114.42':445
- '88.##.45.174':445
- '88.##.75.225':445
- '88.##.150.69':445
- '88.##.22.182':445
- '88.##.99.213':139
- '88.##.31.242':139
- '88.##.18.148':139
- '88.##.245.163':139
- '88.##.114.42':139
- '88.##.45.174':139
- '88.#6.58.62':139
- '88.##.86.174':139
- '88.##.75.163':139
- '88.##.176.144':139
- '88.#6.42.86':139
- '88.##.109.219':139
- '88.##.123.183':139
- '88.##.206.169':139
- '88.#6.3.176':139
- '88.##.15.196':139
- '88.##.135.195':139
- '88.##.175.135':139
- '88.#6.59.45':139
- '88.##.254.50':139
- '88.##.234.109':139
- '88.##.187.153':139
- '88.##.176.144':445
- '88.#6.42.86':445
- '88.##.18.148':445
- '88.##.245.163':445
- '88.##.31.242':445
- '88.##.99.213':445
- '88.#6.162.8':139
- '88.##.86.174':445
- '88.##.75.163':445
- '88.#6.58.62':445
- '88.#6.90.41':445
- '88.##.176.173':445
- '88.#6.27.0':445
- '88.##.246.161':445
- '88.##.193.102':445
- '88.#6.4.191':9988
- '88.##.186.78':9988
- '88.#6.13.64':9988
- '88.##.234.221':445
- '88.##.54.109':445
- '88.##.142.175':445
- '88.##.170.215':445
- '88.#6.32.37':445
- '88.##.246.78':445
- '88.##.99.240':445
- '88.##.94.231':445
- '88.##.138.59':445
- '88.#6.64.94':445
- '88.#6.38.15':445
- '88.##.134.162':445
- '88.##.153.134':445
- '88.##.24.197':139
- '88.##.104.53':139
- '88.##.164.233':139
- '88.#6.38.15':9988
- '88.#6.27.0':9988
- '88.##.22.182':139
- '88.##.75.225':139
- '88.##.150.69':139
- '88.##.58.153':139
- '88.##.140.162':139
- '88.##.28.224':9988
- '88.#6.51.5':9988
- '88.##.222.12':9988
- '88.##.254.205':9988
- '88.##.141.125':9988
- '88.##.205.142':9988
- '88.#6.95.83':9988
- '88.##.53.131':9988
- '88.##.239.208':9988
- '88.##.120.63':9988
- '88.##.78.200':9988