Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '80.#.143.56':139
- '80.#.161.142':139
- '80.#.122.161':139
- '80.#.27.205':139
- '80.#.59.184':139
- '80.#.56.233':139
- '80.#.153.156':139
- '80.#.17.204':139
- '80.#.4.6':139
- '80.#.177.122':139
- '80.#.6.244':139
- '80.#.137.13':139
- '80.#.60.183':139
- '80.#.79.229':139
- '80.#.206.65':139
- '80.#.99.54':139
- '80.#.110.176':139
- '80.#.43.111':139
- '80.#.238.200':139
- '80.#.41.198':139
- '80.#.176.219':139
- '80.#.22.176':139
- '80.#.149.9':139
- '80.#.127.148':139
- '80.#.106.227':139
- '80.#.9.175':139
- '80.#.23.91':139
- '80.#.83.68':139
- '80.#.39.133':139
- '80.#.161.121':139
- '80.#.107.127':445
- '80.#.99.54':445
- '80.#.110.176':445
- '80.#.43.177':445
- '80.#.150.244':445
- '80.#.183.17':445
- '80.#.149.29':139
- '80.#.29.110':139
- '80.#.24.180':139
- '80.#.1.103':139
- '80.#.79.235':139
- '80.#.56.228':139
- '80.#.127.224':139
- '80.#.106.96':139
- '80.#.67.226':139
- '80.#.228.204':139
- '80.#.20.101':139
- '80.#.223.131':139
- '80.#.234.66':445
- '80.#.6.93':445
- '80.#.103.130':445
- '80.#.35.30':445
- '80.#.68.119':445
- '80.#.51.126':445
- '80.#.181.166':445
- '80.#.215.209':445
- '80.#.58.223':445
- '80.#.45.21':445
- '80.#.147.0':445
- '80.#.166.32':445
- '80.#.3.62':445
- '80.#.126.144':445
- '80.#.50.81':445
- '80.#.135.85':445
- '80.#.6.90':445
- '80.#.248.101':445
- '80.#.169.71':445
- '80.#.13.194':445
- '80.#.29.252':445
- '80.#.217.93':445
- '80.#.2.126':445
- '80.#.65.2':445
- '80.#.154.183':445
- '80.#.38.154':445
- '80.#.64.84':445
- '80.#.64.84':139
- '80.#.77.87':139
- '80.#.110.220':139
- '80.#.43.177':139
- '80.#.183.17':139
- '80.#.107.127':139
- '80.#.77.87':445
- '80.#.110.220':445
- '80.#.150.244':139
- '80.#.126.214':445
- '80.#.11.84':445
- '80.#.76.201':445
- '80.#.128.215':445
- '80.#.216.58':445
- '80.#.181.229':445
- '80.#.167.46':445
- '80.#.154.183':139
- '80.#.38.154':139
- '80.#.48.68':445
- '80.#.217.244':445
- '80.#.123.170':445
- '80.#.38.17':139
- '80.#.60.59':139
- '80.#.74.33':139
- '80.#.53.80':139
- '80.#.235.135':139
- '80.#.197.195':139
- '80.#.121.226':139
- '80.#.205.41':139
- '80.#.130.101':139
- '80.#.43.46':139
- '80.#.105.158':139
- '80.#.226.70':139
- '80.#.55.63':139
- '80.#.87.94':139
- '80.#.59.8':139
- '80.#.54.114':445
- '80.#.78.223':445
- '80.#.94.119':139
- '80.#.173.191':139
- '80.#.167.189':139
- '80.#.30.70':139
- '80.#.172.206':139
- '80.#.12.5':139
- '80.#.182.163':139
- '80.#.59.23':139
- '80.#.63.59':139
- '80.#.51.157':139
- '80.#.65.248':139
- '80.#.245.65':139
- '80.#.23.246':139
- '80.#.168.203':139
- '80.#.245.23':139
- '80.#.119.246':139
- '80.#.44.221':139
- '80.#.83.34':139
- '80.#.131.98':139
- '80.#.186.54':139
- '80.#.146.111':139
- '80.#.185.93':139
- '80.#.73.4':139
- '80.#.36.24':139
- '80.#.207.177':139
- '80.#.155.29':139
- '80.#.20.171':139
- '80.#.62.197':139
- '80.#.225.188':139
- '80.#.59.192':139
- '80.#.30.30':139
- '80.#.122.161':445
- '80.#.177.122':445
- '80.#.6.244':445
- '80.#.56.233':445
- '80.#.143.56':445
- '80.#.161.142':445
- '80.#.4.6':445
- '80.#.1.103':445
- '80.#.79.235':445
- '80.#.137.13':445
- '80.#.153.156':445
- '80.#.17.204':445
- '80.#.206.65':445
- '80.#.22.176':445
- '80.#.149.9':445
- '80.#.43.111':445
- '80.#.60.183':445
- '80.#.79.229':445
- '80.#.176.219':445
- '80.#.27.205':445
- '80.#.59.184':445
- '80.#.127.148':445
- '80.#.238.200':445
- '80.#.41.198':445
- '80.#.23.91':445
- '80.#.123.70':139
- '80.#.39.145':139
- '80.#.161.121':445
- '80.#.106.227':445
- '80.#.9.175':445
- '80.#.123.70':445
- '80.#.39.145':445
- '80.#.100.88':445
- '80.#.100.88':139
- '80.#.54.114':139
- '80.#.78.223':139
- '80.#.24.180':445
- '80.#.228.204':445
- '80.#.20.101':445
- '80.#.56.228':445
- '80.#.149.29':445
- '80.#.29.110':445
- '80.#.67.226':445
- '80.#.83.68':445
- '80.#.39.133':445
- '80.#.223.131':445
- '80.#.127.224':445
- '80.#.106.96':445
- '80.#.85.129':445
- '80.#.217.123':445
- '80.#.49.147':445
- '80.#.244.162':445
- '80.#.13.180':445
- '80.#.25.132':445
- '80.#.48.25':445
- '80.#.247.195':445
- '80.#.26.104':445
- '80.#.63.16':445
- '80.#.36.223':445
- '80.#.170.40':445
- '80.#.169.52':445
- '80.#.130.178':445
- '80.#.112.183':445
- '80.#.61.211':445
- '80.#.182.123':139
- '80.#.167.240':139
- '80.#.239.125':139
- '80.#.11.237':445
- '80.#.68.235':445
- '80.#.143.233':445
- '80.#.209.100':445
- '80.#.159.1':445
- '80.#.98.158':445
- '80.#.168.167':445
- '80.#.62.207':445
- '80.#.86.239':445
- '80.#.87.64':445
- '80.#.120.69':445
- '80.#.116.50':445
- '80.#.118.225':445
- '80.#.154.1':445
- '80.#.191.198':445
- '80.#.250.176':445
- '80.#.105.250':445
- '80.#.24.226':445
- '80.#.232.10':445
- '80.#.84.153':445
- '80.#.82.141':445
- '80.#.110.20':445
- '80.#.237.218':445
- '80.#.10.96':445
- '80.#.101.155':445
- '80.#.16.186':445
- '80.#.63.252':445
- '80.#.132.231':445
- '80.#.129.205':445
- '80.#.156.3':445
- '80.#.36.223':139
- '80.#.170.40':139
- '80.#.169.52':139
- '80.#.217.123':139
- '80.#.49.147':139
- '80.#.244.162':139
- '80.#.110.20':139
- '80.#.237.218':139
- '80.#.10.96':139
- '80.#.247.195':139
- '80.#.26.104':139
- '80.#.63.16':139
- '80.#.209.100':139
- '80.#.159.1':139
- '80.#.98.158':139
- '80.#.130.178':139
- '80.#.61.211':139
- '80.#.112.183':139
- '80.#.13.180':139
- '80.#.25.132':139
- '80.#.48.25':139
- '80.#.11.237':139
- '80.#.68.235':139
- '80.#.143.233':139
- '80.#.250.176':139
- '80.#.105.250':139
- '80.#.24.226':139
- '80.#.168.167':139
- '80.#.62.207':139
- '80.#.86.239':139
- '80.#.131.43':139
- '80.#.20.238':139
- '80.#.7.106':139
- '80.#.118.225':139
- '80.#.154.1':139
- '80.#.191.198':139
- '80.#.132.231':139
- '80.#.129.205':139
- '80.#.156.3':139
- '80.#.232.10':139
- '80.#.84.153':139
- '80.#.82.141':139
- '80.#.87.64':139
- '80.#.120.69':139
- '80.#.116.50':139
- '80.#.101.155':139
- '80.#.16.186':139
- '80.#.63.252':139
- '80.#.35.30':139
- '80.#.51.126':139
- '80.#.147.0':139
- '80.#.169.71':139
- '80.#.13.194':139
- '80.#.29.252':139
- '80.#.234.66':139
- '80.#.6.93':139
- '80.#.166.32':139
- '80.#.68.119':139
- '80.#.45.21':139
- '80.#.103.130':139
- '80.#.135.85':139
- '80.#.6.90':139
- '80.#.248.101':139
- '80.#.41.173':139
- '80.#.129.72':139
- '80.#.85.129':139
- '80.#.126.144':139
- '80.#.2.126':139
- '80.#.65.2':139
- '80.#.3.62':139
- '80.#.217.93':139
- '80.#.50.81':139
- '80.#.4.156':445
- '80.#.178.20':445
- '80.#.244.161':445
- '80.#.167.46':139
- '80.#.98.24':445
- '80.#.74.98':445
- '80.#.217.178':445
- '80.#.41.173':445
- '80.#.129.72':445
- '80.#.3.245':445
- '80.#.249.168':445
- '80.#.24.246':445
- '80.#.216.58':139
- '80.#.128.215':139
- '80.#.181.229':139
- '80.#.181.166':139
- '80.#.215.209':139
- '80.#.58.223':139
- '80.#.48.68':139
- '80.#.123.170':139
- '80.#.217.244':139
- '80.#.126.214':139
- '80.#.11.84':139
- '80.#.76.201':139
- '80.#.48.25':9988
- '80.#.169.52':9988
- '80.#.247.195':9988
- '80.#.143.233':9988
- '80.#.13.180':9988
- '80.#.25.132':9988
- '80.#.232.10':9988
- '80.#.82.141':9988
- '80.#.132.231':9988
- '80.#.26.104':9988
- '80.#.63.16':9988
- '80.#.110.20':9988
- '80.#.182.123':445
- '80.#.167.240':445
- '80.#.239.125':445
- '80.#.131.43':445
- '80.#.20.238':445
- '80.#.7.106':445
- '80.#.61.211':9988
- '80.#.98.158':9988
- '80.#.11.237':9988
- '80.#.130.178':9988
- '80.#.159.1':9988
- '80.#.209.100':9988
- '80.#.98.24':139
- '80.#.74.98':139
- '80.#.4.156':139
- '80.#.239.112':445
- '80.#.217.239':445
- '80.#.24.218':445
- '80.#.249.168':139
- '80.#.24.246':139
- '80.#.217.178':139
- '80.#.178.20':139
- '80.#.244.161':139
- '80.#.3.245':139
- '80.#.118.225':9988
- '80.#.20.238':9988
- '80.#.247.235':139
- '80.#.63.252':9988
- '80.#.87.64':9988
- '80.#.24.226':9988
- '80.#.24.218':139
- '80.#.247.235':445
- '80.#.112.219':445
- '80.#.112.219':139
- '80.#.239.112':139
- '80.#.217.239':139