Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#6.196.35':139
- '20#.#6.194.4':139
- '20#.#6.234.15':139
- '20#.#6.48.201':139
- '20#.#6.171.70':139
- '20#.#6.114.161':139
- '20#.#6.147.208':139
- '20#.#6.221.91':139
- '20#.#6.16.59':139
- '20#.#6.164.96':139
- '20#.#6.231.63':139
- '20#.#6.127.99':139
- '20#.#6.184.162':139
- '20#.16.99.6':139
- '20#.#6.46.13':139
- '20#.16.7.18':139
- '20#.#6.149.222':139
- '20#.#6.52.241':139
- '20#.#6.233.0':139
- '20#.#6.209.230':139
- '20#.#6.234.34':139
- '20#.#6.54.168':139
- '20#.#6.209.230':445
- '20#.#6.234.34':445
- '20#.#6.184.162':445
- '20#.16.99.6':445
- '20#.#6.127.99':445
- '20#.#6.231.63':445
- '20#.#6.48.201':445
- '20#.#6.52.241':445
- '20#.#6.233.0':445
- '20#.#6.149.222':445
- '20#.16.7.18':445
- '20#.#6.50.86':139
- '20#.#6.27.35':139
- '20#.#6.201.206':139
- '20#.#6.177.71':139
- '20#.#6.231.26':139
- '20#.#6.18.248':445
- '20#.#6.46.13':445
- '20#.#6.152.0':445
- '20#.#6.133.78':445
- '20#.#6.129.89':445
- '20#.#6.16.44':139
- '20#.#6.117.125':139
- '20#.#6.62.188':139
- '20#.16.13.3':139
- '20#.#6.212.242':139
- '20#.#6.40.16':445
- '20#.#6.139.1':445
- '20#.#6.78.201':139
- '20#.#6.198.90':139
- '20#.#6.201.44':139
- '20#.16.3.47':139
- '20#.#6.101.106':139
- '20#.#6.106.105':139
- '20#.#6.106.194':139
- '20#.#6.139.1':139
- '20#.#6.193.139':139
- '20#.#6.128.220':139
- '20#.#6.129.145':139
- '20#.#6.248.133':139
- '20#.#6.8.116':139
- '20#.#6.15.166':139
- '20#.#6.193.139':445
- '20#.#6.198.90':445
- '20#.#6.201.44':445
- '20#.#6.117.125':445
- '20#.#6.62.188':445
- '20#.#6.16.44':445
- '20#.#6.152.0':139
- '20#.#6.18.248':139
- '20#.#6.129.89':139
- '20#.#6.78.201':445
- '20#.#6.133.78':139
- '20#.#6.212.242':445
- '20#.#6.8.116':445
- '20#.#6.15.166':445
- '20#.#6.106.105':445
- '20#.#6.106.194':445
- '20#.#6.101.106':445
- '20#.16.3.47':445
- '20#.16.13.3':445
- '20#.#6.129.145':445
- '20#.#6.248.133':445
- '20#.#6.128.220':445
- '20#.#6.121.163':139
- '20#.#6.85.103':139
- '20#.#6.139.3':139
- '20#.#6.1.179':445
- '20#.#6.239.48':139
- '20#.#6.153.135':139
- '20#.#6.73.154':139
- '20#.#6.117.105':139
- '20#.#6.167.217':139
- '20#.#6.111.167':139
- '20#.#6.54.182':445
- '20#.16.0.5':445
- '20#.#6.36.52':445
- '20#.#6.119.21':445
- '20#.#6.55.209':445
- '20#.#6.116.5':445
- '20#.#6.219.18':445
- '20#.#6.187.219':445
- '20#.#6.15.174':445
- '20#.#6.55.196':445
- '20#.16.4.56':445
- '20#.#6.92.198':139
- '20#.#6.104.89':139
- '20#.#6.165.116':139
- '20#.#6.147.165':139
- '20#.#6.196.91':139
- '20#.#6.184.50':139
- '20#.#6.69.214':139
- '20#.#6.70.91':139
- '20#.#6.78.46':139
- '20#.#6.197.164':139
- '20#.#6.60.51':139
- '20#.#6.86.47':139
- '20#.#6.98.153':139
- '20#.#6.75.61':139
- '20#.#6.153.123':139
- '20#.#6.14.102':139
- '20#.#6.228.3':139
- '20#.#6.64.41':139
- '20#.#6.172.64':139
- '20#.#6.229.208':139
- '20#.#6.187.13':139
- '20#.#6.33.45':139
- '20#.#6.27.35':445
- '20#.#6.71.139':139
- '20#.#6.50.86':445
- '20#.#6.231.26':445
- '20#.#6.201.206':445
- '20#.#6.45.23':139
- '20#.#6.80.203':139
- '20#.#6.81.32':139
- '20#.#6.76.192':139
- '20#.#6.36.196':139
- '20#.#6.177.71':445
- '20#.#6.194.4':445
- '20#.#6.16.59':445
- '20#.#6.196.35':445
- '20#.#6.171.70':445
- '20#.#6.234.15':445
- '20#.#6.147.208':445
- '20#.#6.54.168':445
- '20#.#6.114.161':445
- '20#.#6.164.96':445
- '20#.#6.221.91':445
- '20#.#6.160.96':139
- '20#.#6.76.192':445
- '20#.#6.36.196':445
- '20#.#6.71.139':445
- '20#.#6.54.182':139
- '20#.#6.1.179':139
- '20#.#6.160.96':445
- '20#.#6.230.153':445
- '20#.#6.80.203':445
- '20#.#6.81.32':445
- '20#.#6.45.23':445
- '20#.#6.187.219':139
- '20#.#6.119.21':139
- '20#.16.0.5':139
- '20#.#6.116.5':139
- '20#.#6.230.153':139
- '20#.#6.55.209':139
- '20#.#6.15.174':139
- '20#.#6.219.18':139
- '20#.16.4.56':139
- '20#.#6.36.52':139
- '20#.#6.55.196':139
- '20#.#6.196.78':445
- '20#.#6.9.196':445
- '20#.#6.57.80':445
- '20#.#6.45.219':445
- '20#.#6.42.174':445
- '20#.#6.37.138':445
- '20#.#6.24.37':445
- '20#.#6.138.38':445
- '20#.#6.151.216':445
- '20#.#6.226.107':445
- '20#.#6.139.240':445
- '20#.#6.197.207':139
- '20#.#6.236.111':139
- '20#.#6.51.66':139
- '20#.#6.230.56':139
- '20#.#6.173.91':139
- '20#.#6.100.222':445
- '20#.#6.103.234':445
- '20#.#6.80.95':139
- '20#.#6.116.94':139
- '20#.#6.61.209':139
- '20#.#6.47.220':445
- '20#.#6.221.143':445
- '20#.#6.201.77':445
- '20#.#6.101.112':445
- '20#.#6.44.86':445
- '20#.#6.143.166':445
- '20#.#6.14.40':445
- '20#.#6.162.230':445
- '20#.16.6.26':445
- '20#.#6.244.248':445
- '20#.#6.80.74':445
- '20#.#6.146.70':445
- '20#.#6.31.154':445
- '20#.#6.154.211':445
- '20#.#6.131.21':445
- '20#.#6.162.150':445
- '20#.#6.120.186':445
- '20#.#6.211.200':445
- '20#.16.9.20':445
- '20#.#6.200.189':445
- '20#.#6.212.165':445
- '20#.#6.56.177':445
- '20#.#6.162.150':139
- '20#.#6.120.186':139
- '20#.#6.47.220':139
- '20#.#6.37.138':139
- '20#.#6.24.37':139
- '20#.#6.212.165':139
- '20#.#6.56.177':139
- '20#.#6.154.211':139
- '20#.#6.131.21':139
- '20#.#6.31.154':139
- '20#.#6.138.38':139
- '20#.#6.139.240':139
- '20#.#6.42.174':139
- '20#.#6.100.222':139
- '20#.#6.45.219':139
- '20#.#6.103.234':139
- '20#.#6.151.216':139
- '20#.#6.226.107':139
- '20#.#6.9.196':139
- '20#.#6.57.80':139
- '20#.#6.196.78':139
- '20#.#6.200.189':139
- '20#.#6.191.12':139
- '20#.#6.24.33':139
- '20#.#6.37.195':139
- '20#.#6.14.40':139
- '20#.#6.162.230':139
- '20#.#6.114.141':139
- '20#.#6.27.123':139
- '20#.#6.99.110':139
- '20#.#6.3.186':139
- '20#.#6.14.17':139
- '20#.16.6.26':139
- '20#.#6.44.86':139
- '20#.#6.143.166':139
- '20#.#6.146.70':139
- '20#.#6.211.200':139
- '20#.16.9.20':139
- '20#.#6.244.248':139
- '20#.#6.80.74':139
- '20#.#6.201.77':139
- '20#.#6.101.112':139
- '20#.#6.221.143':139
- '20#.#6.220.204':445
- '20#.#6.139.249':445
- '20#.#6.190.222':445
- '20#.#6.97.109':139
- '20#.#6.147.226':139
- '20#.#6.177.145':445
- '20#.#6.32.206':445
- '20#.#6.244.101':445
- '20#.#6.204.110':445
- '20#.#6.10.172':445
- '20#.#6.17.162':139
- '20#.#6.131.85':139
- '20#.#6.6.135':139
- '20#.#6.147.192':139
- '20#.#6.68.229':139
- '20#.#6.61.87':139
- '20#.#6.54.140':139
- '20#.#6.63.224':139
- '20#.#6.99.211':139
- '20#.#6.40.91':139
- '20#.#6.210.251':139
- '20#.#6.103.167':445
- '20#.#6.99.211':445
- '20#.#6.54.140':445
- '20#.#6.210.251':445
- '20#.#6.6.135':445
- '20#.#6.40.91':445
- '20#.#6.147.226':445
- '20#.#6.40.16':139
- '20#.#6.97.109':445
- '20#.#6.63.224':445
- '20#.#6.17.162':445
- '20#.#6.131.85':445
- '20#.#6.145.102':445
- '20#.#6.108.53':445
- '20#.#6.90.183':445
- '20#.#6.73.107':445
- '20#.#6.251.76':445
- '20#.#6.61.87':445
- '20#.#6.147.192':445
- '20#.#6.68.229':445
- '20#.#6.101.108':445
- '20#.16.64.7':445
- '20#.#6.61.209':445
- '20#.#6.80.95':445
- '20#.#6.116.94':445
- '20#.#6.197.207':445
- '20#.#6.236.111':445
- '20#.#6.226.107':9988
- '20#.#6.138.38':9988
- '20#.#6.9.196':9988
- '20#.#6.151.216':9988
- '20#.#6.57.80':9988
- '20#.#6.51.66':445
- '20#.#6.3.186':445
- '20#.#6.14.17':445
- '20#.#6.24.33':445
- '20#.#6.37.195':445
- '20#.#6.191.12':445
- '20#.#6.230.56':445
- '20#.#6.173.91':445
- '20#.#6.27.123':445
- '20#.#6.99.110':445
- '20#.#6.114.141':445
- '20#.#6.154.211':9988
- '20#.#6.73.107':139
- '20#.#6.251.76':139
- '20#.#6.103.167':139
- '20#.#6.177.145':139
- '20#.#6.32.206':139
- '20#.#6.101.108':139
- '20#.16.64.7':139
- '20#.#6.108.53':139
- '20#.#6.90.183':139
- '20#.#6.145.102':139
- '20#.#6.244.101':139
- '20#.#6.201.77':9988
- '20#.#6.230.56':9988
- '20#.#6.101.112':9988
- '20#.16.9.20':9988
- '20#.#6.146.70':9988
- '20#.#6.204.110':139
- '20#.#6.10.172':139
- '20#.#6.139.249':139
- '20#.#6.190.222':139
- '20#.#6.220.204':139