Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '63.#.4.80':139
- '63.#.185.140':139
- '63.#.152.30':139
- '63.#.235.243':139
- '63.#.148.218':139
- '63.#.77.71':139
- '63.#.55.72':139
- '63.#.87.80':139
- '63.#.186.235':139
- '63.#.104.93':139
- '63.#.154.240':139
- '63.#.214.211':139
- '63.#.135.46':139
- '63.#.134.178':445
- '63.#.28.15':445
- '63.#.26.134':445
- '63.#.208.108':445
- '63.#.117.39':445
- '63.#.25.123':445
- '63.#.65.164':139
- '63.#.61.149':139
- '63.#.180.139':139
- '63.#.193.196':139
- '63.#.155.109':139
- '63.#.33.226':139
- '63.#.153.57':139
- '63.#.4.80':445
- '63.#.185.140':445
- '63.#.152.30':445
- '63.#.193.196':445
- '63.#.148.218':445
- '63.#.77.71':445
- '63.#.55.72':445
- '63.#.87.80':445
- '63.#.135.46':445
- '63.#.104.93':445
- '63.#.154.240':445
- '63.#.214.211':445
- '63.#.186.235':445
- '63.#.22.7':139
- '63.#.246.138':139
- '63.#.153.70':139
- '63.#.196.211':139
- '63.#.59.30':139
- '63.#.91.142':139
- '63.#.155.109':445
- '63.#.61.149':445
- '63.#.180.139':445
- '63.#.235.243':445
- '63.#.65.164':445
- '63.#.33.226':445
- '63.#.153.57':445
- '63.#.125.118':139
- '63.#.20.44':139
- '63.#.82.53':139
- '63.#.76.213':139
- '63.#.55.234':139
- '63.#.184.102':139
- '63.#.199.85':139
- '63.#.166.241':139
- '63.#.69.219':139
- '63.#.175.176':139
- '63.#.27.208':139
- '63.#.67.238':139
- '63.#.39.206':139
- '63.#.109.35':445
- '63.#.230.109':445
- '63.#.239.227':445
- '63.#.178.184':445
- '63.#.136.178':445
- '63.#.34.136':445
- '63.#.43.196':445
- '63.#.209.252':139
- '63.#.245.185':139
- '63.#.133.114':139
- '63.#.213.49':445
- '63.#.81.81':139
- '63.#.42.238':139
- '63.#.20.44':445
- '63.#.82.53':445
- '63.#.199.85':445
- '63.#.55.234':445
- '63.#.125.118':445
- '63.#.184.102':445
- '63.#.27.208':445
- '63.#.69.219':445
- '63.#.175.176':445
- '63.#.203.201':445
- '63.#.67.238':445
- '63.#.39.206':445
- '63.#.166.241':445
- '63.#.25.123':139
- '63.#.134.178':139
- '63.#.26.134':139
- '63.#.203.201':139
- '63.#.208.108':139
- '63.#.117.39':139
- '63.#.28.15':139
- '63.#.245.185':445
- '63.#.133.114':445
- '63.#.76.213':445
- '63.#.81.81':445
- '63.#.42.238':445
- '63.#.209.252':445
- '63.#.131.19':139
- '63.#.202.187':139
- '63.#.178.115':139
- '63.#.23.109':139
- '63.#.140.159':139
- '63.#.175.13':139
- '63.#.164.113':139
- '63.#.35.126':139
- '63.#.56.123':139
- '63.#.9.29':139
- '63.#.105.211':139
- '63.#.89.64':139
- '63.#.78.150':139
- '63.#.53.190':445
- '63.#.10.175':139
- '63.#.96.108':139
- '63.#.74.132':445
- '63.#.221.151':445
- '63.#.171.221':445
- '63.#.176.251':139
- '63.#.111.97':139
- '63.#.36.4':139
- '63.#.4.158':139
- '63.#.136.155':139
- '63.#.34.63':139
- '63.#.75.82':139
- '63.#.131.19':445
- '63.#.202.187':445
- '63.#.178.115':445
- '63.#.23.109':445
- '63.#.140.159':445
- '63.#.175.13':445
- '63.#.164.113':445
- '63.#.35.126':445
- '63.#.56.123':445
- '63.#.9.29':445
- '63.#.105.211':445
- '63.#.89.64':445
- '63.#.78.150':445
- '63.#.17.186':139
- '63.#.10.175':445
- '63.#.96.108':445
- '63.#.116.31':139
- '63.#.3.217':139
- '63.#.20.140':139
- '63.#.176.251':445
- '63.#.111.97':445
- '63.#.36.4':445
- '63.#.4.158':445
- '63.#.136.155':445
- '63.#.34.63':445
- '63.#.75.82':445
- '63.#.179.214':139
- '63.#.107.66':139
- '63.#.68.117':139
- '63.#.174.187':139
- '63.#.116.250':139
- '63.#.196.37':139
- '63.#.88.132':139
- '63.#.120.44':139
- '63.#.166.142':139
- '63.#.46.127':139
- '63.#.134.141':139
- '63.#.2.49':139
- '63.#.44.80':139
- '63.#.22.7':445
- '63.#.246.138':445
- '63.#.153.70':445
- '63.#.196.211':445
- '63.#.59.30':445
- '63.#.91.142':445
- '63.#.6.230':139
- '63.#.16.53':139
- '63.#.87.41':139
- '63.#.117.221':139
- '63.#.36.191':139
- '63.#.187.79':139
- '63.#.223.201':139
- '63.#.107.66':445
- '63.#.68.117':445
- '63.#.88.132':445
- '63.#.116.250':445
- '63.#.196.37':445
- '63.#.179.214':445
- '63.#.134.141':445
- '63.#.166.142':445
- '63.#.46.127':445
- '63.#.202.197':445
- '63.#.2.49':445
- '63.#.44.80':445
- '63.#.120.44':445
- '63.#.171.221':139
- '63.#.53.190':139
- '63.#.6.230':445
- '63.#.202.197':139
- '63.#.74.132':139
- '63.#.221.151':139
- '63.#.36.191':445
- '63.#.87.41':445
- '63.#.117.221':445
- '63.#.174.187':445
- '63.#.187.79':445
- '63.#.223.201':445
- '63.#.16.53':445
- '63.#.69.43':445
- '63.#.20.203':445
- '63.#.124.177':445
- '63.#.97.102':445
- '63.#.113.211':445
- '63.#.159.130':445
- '63.#.167.159':445
- '63.#.32.234':445
- '63.#.180.5':445
- '63.#.247.222':445
- '63.#.192.208':445
- '63.#.125.192':445
- '63.#.49.254':445
- '63.#.189.184':445
- '63.#.42.210':445
- '63.#.232.226':445
- '63.#.26.179':445
- '63.#.224.187':445
- '63.#.32.224':445
- '63.#.123.214':445
- '63.#.225.27':445
- '63.#.54.192':445
- '63.#.98.109':445
- '63.#.160.53':445
- '63.#.60.182':445
- '63.#.192.74':445
- '63.#.110.54':445
- '63.#.140.166':445
- '63.#.83.66':445
- '63.#.246.82':445
- '63.#.86.29':445
- '63.#.237.37':445
- '63.#.98.96':445
- '63.#.211.246':445
- '63.#.17.157':445
- '63.#.40.210':9988
- '63.#.42.210':9988
- '63.#.68.212':445
- '63.#.249.74':445
- '63.#.156.235':445
- '63.#.95.154':445
- '63.#.103.197':445
- '63.#.105.170':445
- '63.#.233.251':445
- '63.#.20.66':445
- '63.#.118.223':445
- '63.#.51.166':445
- '63.#.39.11':445
- '63.#.81.162':445
- '63.#.56.135':445
- '63.#.195.189':445
- '63.#.153.104':445
- '63.#.68.91':445
- '63.#.167.159':139
- '63.#.20.203':139
- '63.#.124.177':139
- '63.#.160.53':139
- '63.#.113.211':139
- '63.#.159.130':139
- '63.#.97.102':139
- '63.#.189.184':139
- '63.#.180.5':139
- '63.#.247.222':139
- '63.#.32.234':139
- '63.#.125.192':139
- '63.#.49.254':139
- '63.#.123.214':139
- '63.#.42.210':139
- '63.#.232.226':139
- '63.#.224.187':139
- '63.#.32.224':139
- '63.#.40.210':139
- '63.#.26.179':139
- '63.#.54.192':139
- '63.#.110.54':139
- '63.#.98.109':139
- '63.#.60.182':139
- '63.#.225.27':139
- '63.#.192.74':139
- '63.#.140.166':139
- '63.#.98.96':139
- '63.#.83.66':139
- '63.#.56.135':139
- '63.#.86.29':139
- '63.#.237.37':139
- '63.#.246.82':139
- '63.#.156.235':139
- '63.#.17.157':139
- '63.#.40.210':445
- '63.#.211.246':139
- '63.#.68.212':139
- '63.#.249.74':139
- '63.#.118.223':139
- '63.#.95.154':139
- '63.#.103.197':139
- '63.#.192.208':139
- '63.#.233.251':139
- '63.#.20.66':139
- '63.#.105.170':139
- '63.#.68.91':139
- '63.#.39.11':139
- '63.#.81.162':139
- '63.#.51.166':139
- '63.#.195.189':139
- '63.#.153.104':139
- '63.#.225.251':139
- '63.#.216.228':139
- '63.#.189.40':139
- '63.#.185.85':139
- '63.#.202.46':139
- '63.#.24.34':139
- '63.#.61.189':139
- '63.#.128.213':139
- '63.#.69.43':139
- '63.#.99.69':139
- '63.#.137.156':139
- '63.#.56.76':139
- '63.#.126.239':139
- '63.#.152.100':445
- '63.#.122.182':445
- '63.#.127.12':445
- '63.#.67.48':445
- '63.#.27.223':445
- '63.#.31.243':445
- '63.#.1.177':445
- '63.#.174.139':139
- '63.#.40.67':139
- '63.#.106.242':139
- '63.#.89.203':445
- '63.#.169.163':445
- '63.#.107.212':139
- '63.#.225.251':445
- '63.#.189.40':445
- '63.#.216.228':445
- '63.#.185.85':445
- '63.#.202.46':445
- '63.#.24.34':445
- '63.#.61.189':445
- '63.#.126.239':445
- '63.#.99.69':445
- '63.#.185.98':445
- '63.#.137.156':445
- '63.#.56.76':445
- '63.#.128.213':445
- '63.#.34.136':139
- '63.#.109.35':139
- '63.#.230.109':139
- '63.#.185.98':139
- '63.#.178.184':139
- '63.#.136.178':139
- '63.#.239.227':139
- '63.#.174.139':445
- '63.#.40.67':445
- '63.#.106.242':445
- '63.#.43.196':139
- '63.#.213.49':139
- '63.#.107.212':445
- '63.#.157.6':139
- '63.#.32.50':139
- '63.#.79.235':139
- '63.#.116.100':139
- '63.#.224.204':139
- '63.#.28.224':139
- '63.#.162.241':139
- '63.#.127.217':139
- '63.#.244.127':139
- '63.#.66.14':139
- '63.#.3.113':139
- '63.#.19.4':139
- '63.#.217.18':139
- '63.#.110.54':9988
- '63.#.20.203':9988
- '63.#.189.184':9988
- '63.#.232.226':9988
- '63.#.192.74':9988
- '63.#.98.109':9988
- '63.#.192.208':9988
- '63.#.211.246':9988
- '63.#.193.17':139
- '63.#.91.110':139
- '63.#.233.251':9988
- '63.#.237.37':9988
- '63.#.140.166':9988
- '63.#.32.50':445
- '63.#.79.235':445
- '63.#.162.241':445
- '63.#.224.204':445
- '63.#.28.224':445
- '63.#.157.6':445
- '63.#.3.113':445
- '63.#.66.14':445
- '63.#.127.217':445
- '63.#.56.136':445
- '63.#.19.4':445
- '63.#.217.18':445
- '63.#.244.127':445
- '63.#.31.243':139
- '63.#.152.100':139
- '63.#.122.182':139
- '63.#.67.48':139
- '63.#.56.136':139
- '63.#.27.223':139
- '63.#.127.12':139
- '63.#.193.17':445
- '63.#.91.110':445
- '63.#.116.100':445
- '63.#.1.177':139
- '63.#.89.203':139
- '63.#.169.163':139