Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '58.##.211.210':445
- '58.##.130.223':445
- '58.##.51.191':445
- '58.##.104.191':445
- '58.##.218.173':445
- '58.#0.9.236':445
- '58.#0.89.74':139
- '58.##.178.85':445
- '58.##.100.164':445
- '58.##.85.167':445
- '58.##.65.129':445
- '58.#0.67.90':445
- '58.##.195.171':445
- '58.##.69.222':445
- '58.##.126.158':445
- '58.#0.5.2':445
- '58.##.18.117':445
- '58.##.220.206':445
- '58.##.15.136':445
- '58.##.159.195':445
- '58.##.48.159':445
- '58.#0.32.95':139
- '58.##.145.145':139
- '58.##.168.141':139
- '58.##.183.67':445
- '58.#0.18.87':445
- '58.#0.244.7':445
- '58.##.245.190':139
- '58.##.141.190':139
- '58.##.190.210':139
- '58.##.53.181':139
- '58.#0.22.7':139
- '58.##.129.149':445
- '58.#0.18.87':139
- '58.#0.244.7':139
- '58.##.129.149':139
- '58.##.69.105':139
- '58.##.236.69':139
- '58.##.69.105':445
- '58.##.236.69':445
- '58.#0.32.95':445
- '58.##.183.67':139
- '58.#0.89.74':445
- '58.##.170.111':445
- '58.##.51.191':139
- '58.##.211.210':139
- '58.##.218.173':139
- '58.##.65.129':139
- '58.##.104.191':139
- '58.##.178.85':139
- '58.#0.9.236':139
- '58.##.85.167':139
- '58.##.130.223':139
- '58.##.100.164':139
- '58.##.220.206':139
- '58.##.69.222':139
- '58.#0.67.90':139
- '58.#0.5.2':139
- '58.##.170.111':139
- '58.##.126.158':139
- '58.##.15.136':139
- '58.##.18.117':139
- '58.##.48.159':139
- '58.##.195.171':139
- '58.##.159.195':139
- '58.##.166.52':445
- '58.##.142.157':445
- '58.##.13.247':445
- '58.##.157.249':445
- '58.##.15.210':445
- '58.#0.51.23':445
- '58.#0.6.3':445
- '58.#0.7.132':445
- '58.##.240.60':445
- '58.##.34.128':445
- '58.##.67.159':445
- '58.#0.29.53':445
- '58.##.150.47':445
- '58.##.155.168':445
- '58.#0.66.18':445
- '58.##.223.154':445
- '58.##.144.223':445
- '58.#0.8.25':445
- '58.##.207.33':445
- '58.##.178.237':445
- '58.##.155.110':445
- '58.##.134.156':445
- '58.##.34.251':445
- '58.#0.2.49':445
- '58.##.214.19':445
- '58.##.22.127':445
- '58.#0.20.22':445
- '58.##.192.168':445
- '58.##.199.251':445
- '58.##.246.172':445
- '58.##.241.200':445
- '58.##.42.159':445
- '58.##.45.172':445
- '58.#0.76.64':445
- '58.#0.33.86':445
- '58.##.40.129':445
- '58.##.55.143':445
- '58.##.134.180':445
- '58.##.104.190':445
- '58.##.31.177':445
- '58.##.190.181':445
- '58.##.165.27':445
- '58.#0.53.62':445
- '58.##.223.105':445
- '58.##.188.26':139
- '58.#0.26.43':139
- '58.##.239.11':139
- '58.##.161.245':445
- '58.##.136.202':445
- '58.##.18.169':139
- '58.##.14.248':139
- '58.##.170.201':139
- '58.##.207.96':139
- '58.##.88.250':139
- '58.##.11.169':445
- '58.##.56.139':445
- '58.#0.16.16':445
- '58.#0.44.32':445
- '58.##.35.228':445
- '58.##.196.90':445
- '58.##.231.25':445
- '58.##.169.57':445
- '58.#0.61.23':445
- '58.##.72.210':445
- '58.#0.90.20':445
- '58.##.75.182':445
- '58.##.214.19':139
- '58.##.34.251':139
- '58.#0.20.22':139
- '58.##.45.172':139
- '58.##.22.127':139
- '58.##.246.172':139
- '58.##.192.168':139
- '58.##.42.159':139
- '58.#0.2.49':139
- '58.##.241.200':139
- '58.##.31.177':139
- '58.##.40.129':139
- '58.#0.76.64':139
- '58.##.134.180':139
- '58.##.75.182':139
- '58.##.55.143':139
- '58.##.190.181':139
- '58.##.104.190':139
- '58.#0.53.62':139
- '58.#0.33.86':139
- '58.##.165.27':139
- '58.##.199.251':139
- '58.##.145.145':445
- '58.##.168.141':445
- '58.##.136.202':139
- '58.##.11.169':139
- '58.##.161.245':139
- '58.##.245.190':445
- '58.##.141.190':445
- '58.##.190.210':445
- '58.##.53.181':445
- '58.#0.22.7':445
- '58.##.169.57':139
- '58.#0.44.32':139
- '58.##.56.139':139
- '58.##.196.90':139
- '58.##.223.105':139
- '58.##.35.228':139
- '58.#0.61.23':139
- '58.##.231.25':139
- '58.#0.90.20':139
- '58.#0.16.16':139
- '58.##.72.210':139
- '58.#0.7.132':139
- '58.##.20.155':445
- '58.##.135.18':445
- '58.##.119.131':445
- '58.##.136.171':445
- '58.##.64.165':445
- '58.##.50.253':445
- '58.##.49.103':445
- '58.##.117.144':445
- '58.#0.50.89':445
- '58.##.194.30':445
- '58.##.137.56':445
- '58.#0.252.8':139
- '58.#0.91.92':139
- '58.##.194.187':139
- '58.#0.20.65':139
- '58.##.128.254':139
- '58.##.31.197':445
- '58.#0.82.95':445
- '58.##.255.108':445
- '58.##.63.199':139
- '58.##.184.27':139
- '58.##.244.48':445
- '58.##.238.86':445
- '58.##.47.245':445
- '58.##.88.130':445
- '58.##.87.196':445
- '58.##.61.192':445
- '58.##.104.174':445
- '58.##.12.145':445
- '58.##.17.237':445
- '58.##.26.109':445
- '58.#0.86.46':445
- '58.#0.122.9':445
- '58.##.71.191':445
- '58.##.133.122':445
- '58.##.52.125':445
- '58.##.255.155':445
- '58.##.248.153':445
- '58.#0.8.158':445
- '58.##.234.176':445
- '58.##.221.74':445
- '58.##.104.110':445
- '58.##.68.188':445
- '58.##.57.102':139
- '58.##.244.48':139
- '58.##.255.155':139
- '58.##.49.103':139
- '58.##.117.144':139
- '58.##.50.253':139
- '58.##.133.122':139
- '58.##.104.110':139
- '58.##.52.125':139
- '58.##.248.153':139
- '58.##.71.191':139
- '58.##.194.30':139
- '58.##.255.108':139
- '58.#0.82.95':139
- '58.##.136.171':139
- '58.##.137.56':139
- '58.##.31.197':139
- '58.##.135.18':139
- '58.#0.50.89':139
- '58.##.20.155':139
- '58.##.64.165':139
- '58.##.119.131':139
- '58.##.68.188':139
- '58.##.137.125':139
- '58.##.228.15':139
- '58.##.12.145':139
- '58.##.17.237':139
- '58.##.104.174':139
- '58.##.105.86':139
- '58.##.167.33':139
- '58.##.237.222':139
- '58.##.80.237':139
- '58.##.35.112':139
- '58.#0.86.46':139
- '58.#0.122.9':139
- '58.##.87.196':139
- '58.#0.8.158':139
- '58.##.221.74':139
- '58.##.234.176':139
- '58.##.47.245':139
- '58.##.26.109':139
- '58.##.238.86':139
- '58.##.61.192':139
- '58.##.88.130':139
- '58.##.231.214':445
- '58.##.73.141':445
- '58.##.162.57':139
- '58.#0.5.139':139
- '58.#0.57.72':139
- '58.#0.5.139':445
- '58.#0.57.72':445
- '58.##.142.52':445
- '58.##.151.45':445
- '58.#0.53.48':445
- '58.##.142.52':139
- '58.#0.38.48':445
- '58.#0.52.64':445
- '58.##.83.248':445
- '58.##.103.22':445
- '58.##.131.220':445
- '58.##.151.45':139
- '58.#0.53.48':139
- '58.##.73.141':139
- '58.##.147.116':445
- '58.##.231.214':139
- '58.##.162.57':445
- '58.##.157.249':139
- '58.##.142.157':139
- '58.#0.51.23':139
- '58.#0.29.53':139
- '58.##.15.210':139
- '58.##.240.60':139
- '58.#0.6.3':139
- '58.##.67.159':139
- '58.##.13.247':139
- '58.##.34.128':139
- '58.##.207.33':139
- '58.#0.66.18':139
- '58.##.150.47':139
- '58.##.144.223':139
- '58.##.166.52':139
- '58.##.223.154':139
- '58.##.178.237':139
- '58.#0.8.25':139
- '58.##.134.156':139
- '58.##.155.168':139
- '58.##.155.110':139
- '58.##.226.134':445
- '58.##.184.27':445
- '58.#0.82.95':9988
- '58.##.63.199':445
- '58.#0.252.8':445
- '58.#0.91.92':445
- '58.##.133.122':9988
- '58.#0.8.158':9988
- '58.##.50.253':9988
- '58.##.136.171':9988
- '58.##.244.48':9988
- '58.##.194.187':445
- '58.##.35.112':445
- '58.##.237.222':445
- '58.##.80.237':445
- '58.##.137.125':445
- '58.##.228.15':445
- '58.##.128.254':445
- '58.#0.20.65':445
- '58.##.57.102':445
- '58.##.105.86':445
- '58.##.167.33':445
- '58.##.64.165':9988
- '58.##.131.220':139
- '58.##.83.248':139
- '58.##.103.22':139
- '58.##.21.111':139
- '58.##.226.134':139
- '58.##.189.180':445
- '58.##.21.111':445
- '58.##.147.116':139
- '58.#0.38.48':139
- '58.#0.52.64':139
- '58.##.189.180':139
- '58.##.194.30':9988
- '58.##.221.74':9988
- '58.##.255.155':9988
- '58.##.68.188':9988
- '58.##.87.196':9988
- '58.##.119.131':9988
- '58.##.49.103':9988
- '58.##.104.110':9988
- '58.#0.50.89':9988
- '58.##.20.155':9988