Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '19#.#49.0.158':445
- '19#.#49.139.109':139
- '19#.#49.92.226':445
- '19#.#49.30.195':445
- '19#.#49.162.178':139
- '19#.#49.59.24':139
- '19#.#49.31.19':139
- '19#.#49.139.109':445
- '19#.#49.162.178':445
- '19#.#49.165.124':445
- '19#.#49.241.126':445
- '19#.#49.212.240':445
- '19#.#49.121.172':445
- '19#.#49.70.42':445
- '19#.#49.210.212':445
- '19#.#49.234.71':445
- '19#.#49.96.176':445
- '19#.#49.16.107':445
- '19#.#49.151.236':445
- '19#.#49.128.52':139
- '19#.#49.108.241':139
- '19#.#49.5.115':139
- '19#.#49.227.136':139
- '19#.#49.144.180':139
- '19#.#49.227.5':139
- '19#.#49.56.122':139
- '19#.#49.50.84':139
- '19#.#49.7.227':139
- '19#.#49.91.60':139
- '19#.#49.48.219':139
- '19#.#49.46.16':139
- '19#.#49.16.175':139
- '19#.#49.23.170':139
- '19#.#49.95.162':139
- '19#.#49.249.40':139
- '19#.#49.171.241':139
- '19#.#49.20.116':139
- '19#.#49.75.154':139
- '19#.#49.9.151':139
- '19#.#49.172.215':445
- '19#.#49.117.39':445
- '19#.#49.152.76':445
- '19#.#49.21.129':445
- '19#.#49.23.174':445
- '19#.#49.23.124':445
- '19#.#49.195.176':445
- '19#.#49.206.78':445
- '19#.#49.206.23':445
- '19#.#49.41.14':445
- '19#.#49.0.158':139
- '19#.#49.67.223':445
- '19#.#49.92.226':139
- '19#.#49.30.195':139
- '19#.#49.225.12':445
- '19#.#49.61.58':445
- '19#.#49.68.118':445
- '19#.#49.162.206':445
- '19#.#49.183.66':445
- '19#.#49.20.114':445
- '19#.#49.105.69':445
- '19#.#49.241.104':445
- '19#.#49.153.106':445
- '19#.#49.202.120':445
- '19#.#49.9.53':445
- '19#.#49.19.48':445
- '19#.#49.145.134':445
- '19#.#49.151.167':445
- '19#.#49.188.32':445
- '19#.#49.204.217':445
- '19#.#49.135.184':445
- '19#.#49.148.239':445
- '19#.#49.3.142':445
- '19#.#49.1.50':445
- '19#.#49.94.164':445
- '19#.#49.58.249':445
- '19#.#49.141.58':445
- '19#.#49.186.161':445
- '19#.#49.22.116':445
- '19#.#49.35.177':445
- '19#.#49.160.217':445
- '19#.#49.154.213':445
- '19#.#49.52.127':445
- '19#.#49.235.220':445
- '19#.#49.98.248':445
- '19#.#49.77.166':445
- '19#.#49.101.52':445
- '19#.#49.247.152':445
- '19#.#49.50.84':445
- '19#.#49.144.180':445
- '19#.#49.108.241':445
- '19#.#49.48.219':445
- '19#.#49.227.136':445
- '19#.#49.5.115':445
- '19#.#49.91.60':445
- '19#.#49.56.122':445
- '19#.#49.227.5':445
- '19#.#49.7.227':445
- '19#.#49.151.152':445
- '19#.#49.204.121':445
- '19#.#49.119.135':445
- '19#.#49.108.247':445
- '19#.#49.26.79':445
- '19#.#49.138.20':445
- '19#.#49.8.224':139
- '19#.#49.77.169':139
- '19#.#49.95.184':445
- '19#.#49.49.145':445
- '19#.#49.14.103':445
- '19#.#49.26.196':445
- '19#.#49.239.25':445
- '19#.#49.55.25':445
- '19#.#49.151.100':445
- '19#.#49.38.161':445
- '19#.#49.26.32':445
- '19#.#49.166.134':445
- '19#.#49.21.202':445
- '19#.#49.200.200':445
- '19#.#49.26.196':139
- '19#.#49.239.25':139
- '19#.#49.55.25':139
- '19#.#49.151.100':139
- '19#.#49.38.161':139
- '19#.#49.26.32':139
- '19#.#49.166.134':139
- '19#.#49.21.202':139
- '19#.#49.200.200':139
- '19#.#49.151.152':139
- '19#.#49.35.177':139
- '19#.#49.160.217':139
- '19#.#49.154.213':139
- '19#.#49.52.127':139
- '19#.#49.235.220':139
- '19#.#49.98.248':139
- '19#.#49.77.166':139
- '19#.#49.101.52':139
- '19#.#49.247.152':139
- '19#.#49.14.103':139
- '19#.#49.46.16':445
- '19#.#49.16.175':445
- '19#.#49.23.170':445
- '19#.#49.95.162':445
- '19#.#49.249.40':445
- '19#.#49.171.241':445
- '19#.#49.20.116':445
- '19#.#49.75.154':445
- '19#.#49.9.151':445
- '19#.#49.128.52':445
- '19#.#49.204.121':139
- '19#.#49.119.135':139
- '19#.#49.108.247':139
- '19#.#49.26.79':139
- '19#.#49.138.20':139
- '19#.#49.59.24':445
- '19#.#49.31.19':445
- '19#.#49.95.184':139
- '19#.#49.49.145':139
- '19#.#49.82.251':445
- '19#.#49.141.34':445
- '19#.#49.164.131':139
- '19#.#49.222.164':139
- '19#.#49.62.196':445
- '19#.#49.37.71':445
- '19#.#49.106.191':445
- '19#.#49.32.32':445
- '19#.#49.253.82':445
- '19#.#49.131.83':139
- '19#.#49.238.161':139
- '19#.#49.116.79':139
- '19#.#49.149.110':139
- '19#.#49.124.72':139
- '19#.#49.105.229':139
- '19#.#49.189.61':139
- '19#.#49.19.72':139
- '19#.#49.226.155':139
- '19#.#49.171.119':139
- '19#.#49.42.60':445
- '19#.#49.153.65':445
- '19#.#49.195.161':445
- '19#.#49.206.4':445
- '19#.#49.143.105':445
- '19#.#49.120.195':445
- '19#.#49.91.9':445
- '19#.#49.224.90':445
- '19#.#49.238.1':445
- '19#.#49.8.214':445
- '19#.#49.4.245':445
- '19#.#49.179.94':445
- '19#.#49.20.48':445
- '19#.#49.52.250':445
- '19#.#49.98.6':445
- '19#.#49.58.181':445
- '19#.#49.72.36':445
- '19#.#49.44.132':445
- '19#.#49.239.21':445
- '19#.#49.162.225':445
- '19#.#49.58.181':139
- '19#.#49.239.21':139
- '19#.#49.179.94':139
- '19#.#49.20.48':139
- '19#.#49.162.225':139
- '19#.#49.4.245':139
- '19#.#49.206.4':139
- '19#.#49.72.36':139
- '19#.#49.44.132':139
- '19#.#49.98.6':139
- '19#.#49.82.251':139
- '19#.#49.141.34':139
- '19#.#49.62.196':139
- '19#.#49.253.82':139
- '19#.#49.32.32':139
- '19#.#49.42.60':139
- '19#.#49.52.250':139
- '19#.#49.37.71':139
- '19#.#49.106.191':139
- '19#.#49.143.105':139
- '19#.#49.121.157':139
- '19#.#49.220.107':139
- '19#.#49.100.24':139
- '19#.#49.25.56':139
- '19#.#49.104.220':139
- '19#.#49.179.22':139
- '19#.#49.5.42':139
- '19#.#49.46.104':139
- '19#.#49.251.181':139
- '19#.#49.60.121':139
- '19#.#49.120.195':139
- '19#.#49.238.1':139
- '19#.#49.153.65':139
- '19#.#49.195.161':139
- '19#.#49.8.214':139
- '19#.#49.137.166':139
- '19#.#49.178.29':139
- '19#.#49.91.9':139
- '19#.#49.224.90':139
- '19#.#49.135.184':139
- '19#.#49.148.239':139
- '19#.#49.3.142':139
- '19#.#49.1.50':139
- '19#.#49.94.164':139
- '19#.#49.58.249':139
- '19#.#49.141.58':139
- '19#.#49.186.161':139
- '19#.#49.22.116':139
- '19#.#49.20.114':139
- '19#.#49.172.215':139
- '19#.#49.117.39':139
- '19#.#49.152.76':139
- '19#.#49.21.129':139
- '19#.#49.23.174':139
- '19#.#49.23.124':139
- '19#.#49.195.176':139
- '19#.#49.206.78':139
- '19#.#49.206.23':139
- '19#.#49.204.217':139
- '19#.#49.212.240':139
- '19#.#49.210.212':139
- '19#.#49.70.42':139
- '19#.#49.241.126':139
- '19#.#49.16.107':139
- '19#.#49.96.176':139
- '19#.#49.165.124':139
- '19#.#49.151.236':139
- '19#.#49.234.71':139
- '19#.#49.121.172':139
- '19#.#49.105.69':139
- '19#.#49.241.104':139
- '19#.#49.153.106':139
- '19#.#49.202.120':139
- '19#.#49.9.53':139
- '19#.#49.19.48':139
- '19#.#49.145.134':139
- '19#.#49.151.167':139
- '19#.#49.188.32':139
- '19#.#49.149.110':445
- '19#.#49.124.72':445
- '19#.#49.179.22':445
- '19#.#49.5.42':445
- '19#.#49.238.161':445
- '19#.#49.226.155':445
- '19#.#49.171.119':445
- '19#.#49.116.79':445
- '19#.#49.105.229':445
- '19#.#49.251.181':445
- '19#.#49.60.121':445
- '19#.#49.100.24':445
- '19#.#49.137.166':445
- '19#.#49.178.29':445
- '19#.#49.25.56':445
- '19#.#49.104.220':445
- '19#.#49.46.104':445
- '19#.#49.121.157':445
- '19#.#49.220.107':445
- '19#.#49.189.61':445
- '19#.#49.67.223':139
- '19#.#49.225.12':139
- '19#.#49.206.4':9988
- '19#.#49.19.72':9988
- '19#.#49.162.206':139
- '19#.#49.68.118':139
- '19#.#49.41.14':139
- '19#.#49.183.66':139
- '19#.#49.61.58':139
- '19#.#49.44.132':9988
- '19#.#49.164.131':445
- '19#.#49.222.164':445
- '19#.#49.19.72':445
- '19#.#49.131.83':445
- '19#.#49.62.196':9988
- '19#.#49.162.225':9988
- '19#.#49.52.250':9988
- '19#.#49.179.94':9988
- '19#.#49.82.251':9988