Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '67.#6.86.34':139
- '67.#6.61.4':139
- '67.##.34.137':139
- '67.#6.55.84':139
- '67.#6.92.1':139
- '67.##.168.198':139
- '67.##.54.139':139
- '67.##.157.227':139
- '67.#6.70.44':139
- '67.##.45.212':139
- '67.##.118.52':139
- '67.##.173.240':139
- '67.##.135.40':139
- '67.#6.87.20':139
- '67.#6.30.12':139
- '67.##.119.75':139
- '67.##.247.252':139
- '67.#6.39.75':139
- '67.#6.22.16':139
- '67.##.79.125':139
- '67.##.158.55':139
- '67.##.155.112':139
- '67.##.79.125':445
- '67.##.158.55':445
- '67.##.135.40':445
- '67.#6.87.20':445
- '67.##.173.240':445
- '67.##.118.52':445
- '67.#6.55.84':445
- '67.#6.39.75':445
- '67.#6.22.16':445
- '67.##.247.252':445
- '67.##.119.75':445
- '67.##.113.242':139
- '67.#6.1.209':139
- '67.#6.18.27':139
- '67.##.190.145':139
- '67.##.24.119':139
- '67.##.91.245':445
- '67.#6.30.12':445
- '67.##.87.112':445
- '67.##.215.103':445
- '67.##.180.189':445
- '67.##.183.189':139
- '67.##.170.176':139
- '67.##.14.230':139
- '67.##.134.207':139
- '67.##.186.123':139
- '67.##.35.150':445
- '67.##.217.176':445
- '67.#6.5.79':139
- '67.##.179.85':139
- '67.##.69.136':139
- '67.##.105.171':139
- '67.##.178.207':139
- '67.##.221.125':139
- '67.##.78.119':139
- '67.##.217.176':139
- '67.##.114.132':139
- '67.##.139.191':139
- '67.#6.43.19':139
- '67.##.191.76':139
- '67.##.110.100':139
- '67.#6.5.166':139
- '67.##.114.132':445
- '67.##.179.85':445
- '67.##.69.136':445
- '67.##.170.176':445
- '67.##.14.230':445
- '67.##.183.189':445
- '67.##.87.112':139
- '67.##.91.245':139
- '67.##.180.189':139
- '67.#6.5.79':445
- '67.##.215.103':139
- '67.##.186.123':445
- '67.##.110.100':445
- '67.#6.5.166':445
- '67.##.221.125':445
- '67.##.78.119':445
- '67.##.178.207':445
- '67.##.105.171':445
- '67.##.134.207':445
- '67.#6.43.19':445
- '67.##.191.76':445
- '67.##.139.191':445
- '67.##.48.125':139
- '67.##.129.85':139
- '67.##.199.32':139
- '67.##.136.217':445
- '67.##.75.108':139
- '67.##.101.253':139
- '67.##.57.126':139
- '67.##.99.112':139
- '67.##.21.117':139
- '67.##.202.151':139
- '67.##.217.72':445
- '67.#6.3.241':445
- '67.##.146.146':445
- '67.##.243.247':445
- '67.##.149.254':445
- '67.##.136.159':445
- '67.#6.2.177':445
- '67.##.194.86':445
- '67.##.158.47':445
- '67.##.250.146':445
- '67.#6.26.21':445
- '67.#6.3.91':139
- '67.#6.8.61':139
- '67.##.84.243':139
- '67.##.225.211':139
- '67.#6.4.9':139
- '67.#6.84.75':139
- '67.##.63.177':139
- '67.##.152.104':139
- '67.##.187.74':139
- '67.#6.5.173':139
- '67.#6.87.4':139
- '67.##.58.176':139
- '67.##.203.173':139
- '67.#6.55.87':139
- '67.##.223.21':139
- '67.##.229.134':139
- '67.##.21.151':139
- '67.##.38.185':139
- '67.#6.119.0':139
- '67.##.36.106':139
- '67.##.151.26':139
- '67.##.153.229':139
- '67.#6.1.209':445
- '67.##.52.153':139
- '67.##.113.242':445
- '67.##.24.119':445
- '67.#6.18.27':445
- '67.##.191.103':139
- '67.##.46.121':139
- '67.#6.31.93':139
- '67.#6.41.44':139
- '67.##.216.151':139
- '67.##.190.145':445
- '67.#6.61.4':445
- '67.#6.70.44':445
- '67.#6.86.34':445
- '67.#6.92.1':445
- '67.##.34.137':445
- '67.##.54.139':445
- '67.##.155.112':445
- '67.##.168.198':445
- '67.##.45.212':445
- '67.##.157.227':445
- '67.#6.56.91':139
- '67.#6.41.44':445
- '67.##.216.151':445
- '67.##.52.153':445
- '67.##.217.72':139
- '67.##.136.217':139
- '67.#6.56.91':445
- '67.##.170.85':445
- '67.##.46.121':445
- '67.#6.31.93':445
- '67.##.191.103':445
- '67.##.194.86':139
- '67.##.243.247':139
- '67.#6.3.241':139
- '67.##.136.159':139
- '67.##.170.85':139
- '67.##.149.254':139
- '67.##.158.47':139
- '67.#6.2.177':139
- '67.#6.26.21':139
- '67.##.146.146':139
- '67.##.250.146':139
- '67.#6.93.93':445
- '67.#6.43.28':445
- '67.##.187.40':445
- '67.##.112.174':445
- '67.##.81.237':445
- '67.##.111.237':445
- '67.##.43.160':445
- '67.#6.15.72':445
- '67.##.31.125':445
- '67.##.74.134':445
- '67.##.173.221':445
- '67.##.48.189':139
- '67.##.228.22':139
- '67.##.49.245':139
- '67.#6.127.7':139
- '67.##.55.125':139
- '67.##.129.173':445
- '67.#6.85.59':445
- '67.##.51.237':139
- '67.##.24.127':139
- '67.##.236.237':139
- '67.##.170.18':445
- '67.##.131.199':445
- '67.#6.38.53':445
- '67.##.44.141':445
- '67.##.177.159':445
- '67.#6.47.89':445
- '67.##.76.179':445
- '67.##.148.53':445
- '67.##.67.205':445
- '67.##.173.37':445
- '67.##.131.242':445
- '67.#6.61.55':445
- '67.##.141.111':445
- '67.##.182.241':445
- '67.#6.43.27':445
- '67.##.21.211':445
- '67.#6.27.77':445
- '67.#6.8.210':445
- '67.#6.21.97':445
- '67.#6.210.2':445
- '67.##.195.74':445
- '67.##.197.145':445
- '67.##.21.211':139
- '67.#6.27.77':139
- '67.##.170.18':139
- '67.##.111.237':139
- '67.##.43.160':139
- '67.##.195.74':139
- '67.##.197.145':139
- '67.##.182.241':139
- '67.#6.43.27':139
- '67.##.141.111':139
- '67.#6.15.72':139
- '67.##.112.174':139
- '67.##.81.237':139
- '67.##.173.221':139
- '67.##.129.173':139
- '67.#6.85.59':139
- '67.##.31.125':139
- '67.##.74.134':139
- '67.#6.43.28':139
- '67.##.187.40':139
- '67.#6.93.93':139
- '67.#6.210.2':139
- '67.##.96.134':139
- '67.##.39.167':139
- '67.##.215.148':139
- '67.##.76.179':139
- '67.##.148.53':139
- '67.##.184.109':139
- '67.##.112.209':139
- '67.#6.5.229':139
- '67.##.235.240':139
- '67.#6.29.46':139
- '67.##.67.205':139
- '67.##.177.159':139
- '67.#6.47.89':139
- '67.#6.61.55':139
- '67.#6.8.210':139
- '67.#6.21.97':139
- '67.##.173.37':139
- '67.##.131.242':139
- '67.#6.38.53':139
- '67.##.44.141':139
- '67.##.131.199':139
- '67.##.113.108':445
- '67.##.82.113':445
- '67.##.101.99':445
- '67.#6.91.62':139
- '67.#6.57.92':139
- '67.##.192.137':445
- '67.##.214.192':445
- '67.##.154.214':445
- '67.#6.89.82':445
- '67.##.208.60':445
- '67.#6.6.212':139
- '67.#6.61.38':139
- '67.#6.14.25':139
- '67.##.157.95':139
- '67.##.119.237':139
- '67.##.105.230':139
- '67.##.209.115':139
- '67.##.166.82':139
- '67.##.248.106':139
- '67.##.122.105':139
- '67.##.252.200':139
- '67.##.15.215':445
- '67.##.248.106':445
- '67.##.209.115':445
- '67.##.252.200':445
- '67.#6.14.25':445
- '67.##.122.105':445
- '67.#6.57.92':445
- '67.##.35.150':139
- '67.#6.91.62':445
- '67.##.166.82':445
- '67.#6.6.212':445
- '67.#6.61.38':445
- '67.##.37.203':445
- '67.##.29.252':445
- '67.##.19.131':445
- '67.##.58.141':445
- '67.##.87.186':445
- '67.##.105.230':445
- '67.##.157.95':445
- '67.##.119.237':445
- '67.#6.43.70':445
- '67.#6.29.90':445
- '67.##.236.237':445
- '67.##.51.237':445
- '67.##.24.127':445
- '67.##.48.189':445
- '67.##.228.22':445
- '67.#6.43.28':9988
- '67.##.31.125':9988
- '67.#6.93.93':9988
- '67.##.129.173':9988
- '67.##.173.221':9988
- '67.##.49.245':445
- '67.##.235.240':445
- '67.#6.29.46':445
- '67.##.39.167':445
- '67.##.215.148':445
- '67.##.96.134':445
- '67.#6.127.7':445
- '67.##.55.125':445
- '67.##.112.209':445
- '67.#6.5.229':445
- '67.##.184.109':445
- '67.##.43.160':9988
- '67.##.58.141':139
- '67.##.87.186':139
- '67.##.15.215':139
- '67.##.192.137':139
- '67.##.214.192':139
- '67.#6.43.70':139
- '67.#6.29.90':139
- '67.##.29.252':139
- '67.##.19.131':139
- '67.##.37.203':139
- '67.##.154.214':139
- '67.##.173.37':9988
- '67.##.131.242':9988
- '67.##.177.159':9988
- '67.#6.210.2':9988
- '67.##.197.145':9988
- '67.#6.89.82':139
- '67.##.208.60':139
- '67.##.82.113':139
- '67.##.101.99':139
- '67.##.113.108':139