Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '22#.85.3.73':139
- '22#.#5.177.89':139
- '22#.#5.6.108':139
- '22#.#5.173.196':139
- '22#.85.3.40':139
- '22#.#5.47.150':139
- '22#.#5.58.99':139
- '22#.#5.150.96':139
- '22#.#5.108.243':139
- '22#.#5.211.164':139
- '22#.#5.13.77':139
- '22#.#5.17.211':445
- '22#.#5.77.192':445
- '22#.#5.122.113':445
- '22#.#5.31.158':445
- '22#.#5.198.31':445
- '22#.85.5.31':139
- '22#.#5.71.103':139
- '22#.#5.85.12':139
- '22#.#5.105.150':139
- '22#.#5.188.169':139
- '22#.85.3.73':445
- '22#.#5.177.89':445
- '22#.#5.6.108':445
- '22#.#5.173.196':445
- '22#.85.3.40':445
- '22#.#5.47.150':445
- '22#.#5.58.99':445
- '22#.#5.150.96':445
- '22#.#5.108.243':445
- '22#.#5.211.164':445
- '22#.#5.13.77':445
- '22#.#5.157.195':139
- '22#.#5.13.205':139
- '22#.#5.70.118':139
- '22#.#5.121.47':139
- '22#.#5.102.121':139
- '22#.85.5.31':445
- '22#.#5.71.103':445
- '22#.#5.85.12':445
- '22#.#5.105.150':445
- '22#.#5.188.169':445
- '22#.#5.141.230':445
- '22#.#5.198.31':139
- '22#.#5.122.113':139
- '22#.#5.31.158':139
- '22#.#5.225.108':139
- '22#.#5.141.230':139
- '22#.#5.139.118':445
- '22#.#5.127.139':445
- '22#.#5.119.76':445
- '22#.#5.17.211':139
- '22#.#5.77.192':139
- '22#.#5.148.74':139
- '22#.#5.12.220':139
- '22#.#5.73.78':139
- '22#.#5.201.28':139
- '22#.#5.16.23':139
- '22#.#5.121.56':139
- '22#.#5.167.179':139
- '22#.#5.78.254':139
- '22#.#5.115.231':139
- '22#.#5.87.61':139
- '22#.#5.108.28':139
- '22#.#5.87.61':445
- '22#.#5.108.28':445
- '22#.#5.73.78':445
- '22#.#5.201.28':445
- '22#.#5.12.220':445
- '22#.#5.148.74':445
- '22#.#5.225.108':445
- '22#.#5.78.254':445
- '22#.#5.115.231':445
- '22#.#5.167.179':445
- '22#.#5.121.56':445
- '22#.#5.90.33':445
- '22#.#5.13.27':445
- '22#.#5.228.231':445
- '22#.#5.253.30':445
- '22#.#5.136.201':445
- '22#.#5.250.191':445
- '22#.#5.16.23':445
- '22#.#5.127.228':445
- '22#.#5.75.19':445
- '22#.#5.219.168':445
- '22#.#5.121.47':445
- '22#.#5.60.201':445
- '22#.#5.236.157':445
- '22#.#5.146.254':445
- '22#.#5.214.59':445
- '22#.#5.253.251':445
- '22#.#5.20.95':445
- '22#.#5.169.20':445
- '22#.#5.94.169':445
- '22#.#5.227.164':445
- '22#.#5.168.227':445
- '22#.#5.76.154':445
- '22#.#5.251.150':445
- '22#.#5.39.73':445
- '22#.#5.34.226':445
- '22#.#5.118.75':445
- '22#.#5.4.223':445
- '22#.#5.76.78':445
- '22#.#5.102.249':445
- '22#.#5.101.214':445
- '22#.#5.27.69':445
- '22#.#5.214.26':445
- '22#.#5.225.28':139
- '22#.#5.163.201':139
- '22#.#5.109.205':139
- '22#.#5.7.249':139
- '22#.#5.200.111':139
- '22#.#5.92.124':139
- '22#.#5.165.170':139
- '22#.#5.94.74':139
- '22#.#5.81.164':139
- '22#.#5.247.244':139
- '22#.#5.11.217':139
- '22#.#5.154.126':139
- '22#.#5.58.145':139
- '22#.#5.21.247':139
- '22#.#5.175.225':139
- '22#.85.5.51':139
- '22#.#5.145.14':139
- '22#.#5.158.79':139
- '22#.#5.132.52':139
- '22#.#5.209.57':139
- '22#.#5.14.103':139
- '22#.#5.154.153':445
- '22#.#5.4.223':139
- '22#.#5.34.226':139
- '22#.#5.118.75':139
- '22#.#5.157.100':139
- '22#.#5.154.153':139
- '22#.#5.214.26':139
- '22#.#5.101.214':139
- '22#.#5.27.69':139
- '22#.#5.251.150':139
- '22#.#5.39.73':139
- '22#.#5.30.211':139
- '22#.#5.13.205':445
- '22#.#5.179.196':139
- '22#.#5.157.195':445
- '22#.#5.102.121':445
- '22#.#5.70.118':445
- '22#.#5.11.117':139
- '22#.#5.64.172':139
- '22#.#5.23.65':139
- '22#.#5.115.179':139
- '22#.#5.75.193':139
- '22#.#5.115.179':445
- '22#.#5.75.193':445
- '22#.#5.179.196':445
- '22#.#5.20.95':139
- '22#.#5.169.20':139
- '22#.#5.30.211':445
- '22#.#5.157.100':445
- '22#.#5.64.172':445
- '22#.#5.23.65':445
- '22#.#5.11.117':445
- '22#.#5.94.169':139
- '22#.#5.214.59':139
- '22#.#5.253.251':139
- '22#.#5.76.154':139
- '22#.#5.76.78':139
- '22#.#5.102.249':139
- '22#.#5.227.164':139
- '22#.#5.168.227':139
- '22#.#5.236.157':139
- '22#.#5.146.254':139
- '22#.#5.60.201':139
- '22#.#5.69.194':445
- '22#.#5.154.82':445
- '22#.#5.193.219':445
- '22#.#5.188.139':445
- '22#.#5.19.186':445
- '22#.#5.184.121':445
- '22#.#5.182.184':445
- '22#.#5.1.121':445
- '22#.#5.32.45':445
- '22#.#5.19.216':445
- '22#.#5.11.225':445
- '22#.#5.186.59':139
- '22#.#5.38.42':139
- '22#.#5.164.100':139
- '22#.#5.164.65':139
- '22#.#5.100.67':139
- '22#.#5.18.216':445
- '22#.#5.70.68':445
- '22#.#5.238.12':139
- '22#.#5.66.46':139
- '22#.#5.102.117':139
- '22#.#5.92.115':445
- '22#.#5.166.92':445
- '22#.#5.6.182':445
- '22#.85.4.26':445
- '22#.#5.87.67':445
- '22#.#5.18.197':445
- '22#.#5.39.70':445
- '22#.#5.106.180':445
- '22#.#5.194.47':445
- '22#.#5.14.180':445
- '22#.#5.149.195':445
- '22#.#5.232.231':445
- '22#.85.0.64':445
- '22#.#5.95.242':445
- '22#.#5.240.182':445
- '22#.#5.58.86':445
- '22#.#5.229.197':445
- '22#.#5.160.44':445
- '22#.#5.226.245':445
- '22#.#5.76.226':445
- '22#.#5.117.219':445
- '22#.#5.42.197':139
- '22#.#5.58.86':139
- '22#.#5.95.242':139
- '22#.#5.240.182':139
- '22#.#5.184.121':139
- '22#.#5.182.184':139
- '22#.#5.117.219':139
- '22#.#5.226.245':139
- '22#.#5.76.226':139
- '22#.#5.232.231':139
- '22#.85.0.64':139
- '22#.#5.1.121':139
- '22#.#5.19.186':139
- '22#.#5.11.225':139
- '22#.#5.188.139':139
- '22#.#5.18.216':139
- '22#.#5.70.68':139
- '22#.#5.32.45':139
- '22#.#5.19.216':139
- '22#.#5.154.82':139
- '22#.#5.193.219':139
- '22#.#5.69.194':139
- '22#.#5.194.125':139
- '22#.#5.217.219':139
- '22#.#5.161.106':139
- '22#.#5.18.197':139
- '22#.#5.39.70':139
- '22#.#5.14.101':139
- '22#.#5.185.139':139
- '22#.#5.98.43':139
- '22#.85.2.79':139
- '22#.#5.51.78':139
- '22#.#5.106.180':139
- '22#.85.4.26':139
- '22#.#5.87.67':139
- '22#.#5.149.195':139
- '22#.#5.229.197':139
- '22#.#5.160.44':139
- '22#.#5.194.47':139
- '22#.#5.14.180':139
- '22#.#5.166.92':139
- '22#.#5.6.182':139
- '22#.#5.92.115':139
- '22#.#5.161.106':445
- '22#.#5.149.159':445
- '22#.#5.48.113':445
- '22#.#5.102.173':445
- '22#.#5.226.58':445
- '22#.#5.194.164':445
- '22#.#5.181.229':445
- '22#.#5.159.239':445
- '22#.#5.1.117':445
- '22#.#5.42.56':445
- '22#.#5.74.98':445
- '22#.#5.248.22':445
- '22#.#5.19.185':139
- '22#.#5.177.127':139
- '22#.#5.230.66':139
- '22#.#5.175.161':139
- '22#.85.67.0':139
- '22#.#5.76.57':139
- '22#.#5.26.48':445
- '22#.#5.56.251':139
- '22#.#5.23.10':139
- '22#.#5.159.86':139
- '22#.#5.228.231':139
- '22#.#5.90.33':139
- '22#.#5.136.201':139
- '22#.#5.127.139':139
- '22#.#5.253.30':139
- '22#.#5.127.228':139
- '22#.#5.250.191':139
- '22#.#5.219.168':139
- '22#.#5.13.27':139
- '22#.#5.75.19':139
- '22#.#5.139.118':139
- '22#.#5.19.185':445
- '22#.#5.177.127':445
- '22#.#5.230.66':445
- '22#.#5.175.161':445
- '22#.85.67.0':445
- '22#.#5.76.57':445
- '22#.#5.119.76':139
- '22#.#5.56.251':445
- '22#.#5.23.10':445
- '22#.#5.159.86':445
- '22#.#5.159.239':139
- '22#.#5.102.117':445
- '22#.#5.238.12':445
- '22#.#5.66.46':445
- '22#.#5.186.59':445
- '22#.#5.38.42':445
- '22#.#5.184.121':9988
- '22#.#5.1.121':9988
- '22#.#5.70.68':9988
- '22#.#5.11.225':9988
- '22#.#5.69.194':9988
- '22#.#5.164.100':445
- '22#.#5.51.78':445
- '22#.#5.98.43':445
- '22#.85.2.79':445
- '22#.#5.194.125':445
- '22#.#5.217.219':445
- '22#.#5.164.65':445
- '22#.#5.100.67':445
- '22#.#5.42.197':445
- '22#.#5.14.101':445
- '22#.#5.185.139':445
- '22#.#5.102.173':139
- '22#.#5.149.159':139
- '22#.#5.226.58':139
- '22#.#5.248.22':139
- '22#.#5.194.164':139
- '22#.#5.1.117':139
- '22#.#5.181.229':139
- '22#.#5.74.98':139
- '22#.#5.48.113':139
- '22#.#5.42.56':139
- '22#.#5.26.48':139
- '22#.#5.95.242':9988
- '22#.85.0.64':9988
- '22#.#5.58.86':9988
- '22#.#5.182.184':9988
- '22#.#5.240.182':9988
- '22#.#5.14.180':9988
- '22#.#5.39.70':9988
- '22#.#5.6.182':9988
- '22#.#5.76.226':9988
- '22#.#5.117.219':9988