Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##.57.180':139
- '88.##.61.135':139
- '88.##.134.71':139
- '88.##.156.173':139
- '88.##.189.157':139
- '88.##.234.132':139
- '88.#0.53.11':139
- '88.##.49.105':139
- '88.##.105.158':139
- '88.##.167.172':139
- '88.#0.110.3':139
- '88.##.144.173':139
- '88.##.107.189':139
- '88.##.254.109':139
- '88.##.119.31':139
- '88.##.167.119':139
- '88.##.255.80':139
- '88.##.223.30':139
- '88.#0.60.87':139
- '88.#0.58.74':139
- '88.#0.6.197':139
- '88.##.255.80':445
- '88.##.223.30':445
- '88.#0.60.87':445
- '88.#0.58.74':445
- '88.#0.6.197':445
- '88.##.134.71':445
- '88.##.57.180':445
- '88.##.189.157':445
- '88.#0.110.3':445
- '88.##.156.173':445
- '88.##.107.189':445
- '88.#0.9.78':445
- '88.#0.76.26':445
- '88.#0.11.10':139
- '88.##.209.62':139
- '88.#0.19.29':139
- '88.##.254.109':445
- '88.##.144.173':445
- '88.##.167.119':445
- '88.##.137.30':445
- '88.##.119.31':445
- '88.##.161.239':139
- '88.#0.2.184':445
- '88.##.20.172':139
- '88.##.253.168':139
- '88.##.103.72':139
- '88.##.206.24':445
- '88.##.66.189':445
- '88.#0.30.28':445
- '88.#0.7.137':445
- '88.##.201.227':445
- '88.##.55.162':139
- '88.##.233.69':139
- '88.##.174.232':139
- '88.#0.69.39':139
- '88.##.193.139':139
- '88.##.39.193':139
- '88.##.203.107':139
- '88.##.163.54':139
- '88.#0.113.9':139
- '88.##.34.175':139
- '88.##.102.34':139
- '88.##.253.168':445
- '88.##.103.72':445
- '88.##.55.162':445
- '88.##.203.107':445
- '88.##.163.54':445
- '88.#0.76.26':139
- '88.##.137.30':139
- '88.#0.9.78':139
- '88.##.20.172':445
- '88.##.161.239':445
- '88.#0.113.9':445
- '88.##.193.139':445
- '88.##.39.193':445
- '88.##.233.103':445
- '88.##.104.71':445
- '88.##.26.219':445
- '88.##.34.175':445
- '88.##.102.34':445
- '88.##.174.232':445
- '88.#0.69.39':445
- '88.##.233.69':445
- '88.##.159.56':445
- '88.##.166.233':139
- '88.##.26.235':445
- '88.#0.85.68':445
- '88.##.225.95':445
- '88.#0.49.89':139
- '88.#0.98.49':139
- '88.#0.89.9':139
- '88.#0.15.59':139
- '88.##.138.69':139
- '88.#0.95.27':445
- '88.#0.139.3':445
- '88.##.254.103':445
- '88.##.81.224':445
- '88.##.28.188':445
- '88.##.254.192':445
- '88.##.192.76':445
- '88.#0.1.193':445
- '88.##.248.238':445
- '88.##.229.253':445
- '88.##.251.229':445
- '88.##.84.187':139
- '88.##.163.199':139
- '88.##.99.211':139
- '88.#0.5.99':139
- '88.#0.76.15':139
- '88.#0.39.68':139
- '88.##.149.135':139
- '88.##.227.97':139
- '88.##.138.58':139
- '88.#0.3.238':139
- '88.#0.99.6':139
- '88.##.30.223':139
- '88.##.233.167':139
- '88.##.104.117':139
- '88.##.47.178':139
- '88.#0.5.159':139
- '88.#0.41.36':139
- '88.#0.6.37':139
- '88.#0.29.89':139
- '88.##.53.233':139
- '88.#0.3.196':139
- '88.#0.15.14':139
- '88.##.168.117':139
- '88.#0.236.1':139
- '88.#0.47.19':139
- '88.##.108.123':139
- '88.##.254.192':139
- '88.##.81.224':139
- '88.##.28.188':139
- '88.#0.0.83':139
- '88.##.162.87':139
- '88.#0.8.121':139
- '88.##.49.105':445
- '88.##.234.132':445
- '88.##.167.172':445
- '88.##.61.135':445
- '88.##.105.158':445
- '88.#0.11.10':445
- '88.##.208.155':139
- '88.#0.19.29':445
- '88.#0.53.11':445
- '88.##.209.62':445
- '88.#0.47.19':445
- '88.##.108.123':445
- '88.#0.8.121':445
- '88.##.159.56':139
- '88.##.208.155':445
- '88.#0.0.83':445
- '88.##.162.87':445
- '88.##.168.117':445
- '88.#0.236.1':445
- '88.#0.15.14':445
- '88.##.26.235':139
- '88.##.251.229':139
- '88.##.248.238':139
- '88.##.229.253':139
- '88.#0.139.3':139
- '88.##.254.103':139
- '88.#0.85.68':139
- '88.##.225.95':139
- '88.#0.95.27':139
- '88.##.192.76':139
- '88.#0.1.193':139
- '88.##.156.213':445
- '88.##.205.135':445
- '88.##.81.196':445
- '88.##.82.161':445
- '88.#0.10.25':445
- '88.##.162.15':445
- '88.##.20.162':445
- '88.#0.18.87':445
- '88.#0.172.3':445
- '88.##.240.88':445
- '88.##.183.151':445
- '88.##.180.165':139
- '88.##.76.141':139
- '88.##.17.105':139
- '88.##.236.135':139
- '88.##.197.20':139
- '88.##.128.152':139
- '88.##.52.183':445
- '88.##.234.128':139
- '88.##.144.67':139
- '88.##.211.167':139
- '88.##.216.113':445
- '88.##.168.230':445
- '88.##.61.152':445
- '88.#0.72.31':445
- '88.#0.62.55':445
- '88.##.135.57':445
- '88.##.38.136':445
- '88.##.213.225':445
- '88.##.179.36':445
- '88.##.76.106':445
- '88.##.191.131':445
- '88.##.48.168':445
- '88.##.163.48':445
- '88.##.105.75':445
- '88.#0.9.94':445
- '88.##.224.228':445
- '88.##.119.141':445
- '88.##.53.186':445
- '88.##.89.130':445
- '88.##.75.147':445
- '88.##.199.210':445
- '88.##.105.75':139
- '88.##.48.168':139
- '88.##.224.228':139
- '88.##.20.162':139
- '88.#0.9.94':139
- '88.##.89.130':139
- '88.##.119.141':139
- '88.##.199.210':139
- '88.##.163.48':139
- '88.##.75.147':139
- '88.##.162.15':139
- '88.#0.10.25':139
- '88.##.81.196':139
- '88.##.82.161':139
- '88.##.52.183':139
- '88.##.183.151':139
- '88.##.240.88':139
- '88.#0.18.87':139
- '88.#0.172.3':139
- '88.##.156.213':139
- '88.##.205.135':139
- '88.##.169.88':139
- '88.##.154.213':139
- '88.#0.14.95':139
- '88.##.38.136':139
- '88.##.23.222':139
- '88.##.98.133':139
- '88.##.37.191':139
- '88.#0.5.198':139
- '88.##.156.74':139
- '88.##.104.104':139
- '88.##.135.57':139
- '88.#0.62.55':139
- '88.##.61.152':139
- '88.#0.72.31':139
- '88.##.53.186':139
- '88.##.191.131':139
- '88.##.76.106':139
- '88.##.213.225':139
- '88.##.179.36':139
- '88.##.216.113':139
- '88.##.168.230':139
- '88.##.147.240':445
- '88.##.193.120':445
- '88.##.172.177':445
- '88.##.222.78':139
- '88.##.245.137':445
- '88.##.110.70':445
- '88.#0.85.0':445
- '88.##.12.192':445
- '88.##.164.215':445
- '88.#0.18.30':445
- '88.##.30.234':139
- '88.##.213.41':139
- '88.#0.21.26':139
- '88.##.15.150':139
- '88.##.18.197':139
- '88.##.245.148':139
- '88.##.95.222':139
- '88.##.142.95':139
- '88.##.221.112':139
- '88.##.199.21':139
- '88.##.126.229':139
- '88.##.201.227':139
- '88.#0.30.28':139
- '88.#0.7.137':139
- '88.##.222.78':445
- '88.#0.2.184':139
- '88.##.26.219':139
- '88.##.233.103':139
- '88.##.104.71':139
- '88.##.206.24':139
- '88.##.66.189':139
- '88.##.30.234':445
- '88.##.213.41':445
- '88.#0.21.26':445
- '88.##.15.150':445
- '88.##.18.197':445
- '88.##.245.148':445
- '88.##.95.222':445
- '88.##.142.95':445
- '88.##.221.112':445
- '88.##.199.21':445
- '88.##.126.229':445
- '88.##.144.67':445
- '88.##.211.167':445
- '88.##.76.141':445
- '88.##.17.105':445
- '88.##.180.165':445
- '88.##.81.196':9988
- '88.#0.9.94':9988
- '88.##.52.183':9988
- '88.##.234.128':445
- '88.##.128.152':445
- '88.##.197.20':445
- '88.##.154.213':445
- '88.##.156.74':445
- '88.##.169.88':445
- '88.##.23.222':445
- '88.#0.14.95':445
- '88.##.37.191':445
- '88.##.236.135':445
- '88.##.98.133':445
- '88.##.104.104':445
- '88.#0.5.198':445
- '88.##.147.240':139
- '88.##.193.120':139
- '88.##.172.177':139
- '88.##.236.135':9988
- '88.##.245.137':139
- '88.##.110.70':139
- '88.#0.85.0':139
- '88.##.12.192':139
- '88.##.164.215':139
- '88.#0.18.30':139
- '88.##.98.133':9988
- '88.##.163.48':9988
- '88.##.75.147':9988
- '88.##.48.168':9988
- '88.##.224.228':9988
- '88.##.105.75':9988
- '88.##.168.230':9988
- '88.##.179.36':9988
- '88.##.216.113':9988
- '88.##.191.131':9988
- '88.#0.72.31':9988