Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '60.#.150.217':139
- '60.#.84.24':139
- '60.#.217.106':139
- '60.#.48.142':139
- '60.#.176.57':139
- '60.#.169.151':139
- '60.#.250.163':445
- '60.#.152.0':139
- '60.#.81.6':139
- '60.#.98.29':139
- '60.#.18.117':139
- '60.#.112.102':139
- '60.#.120.229':139
- '60.#.103.165':139
- '60.#.78.37':139
- '60.#.133.1':139
- '60.#.75.68':139
- '60.#.126.34':139
- '60.#.208.3':139
- '60.#.167.25':139
- '60.#.25.140':445
- '60.#.186.24':445
- '60.#.140.81':445
- '60.#.105.44':445
- '60.#.1.167':445
- '60.#.149.206':445
- '60.#.208.224':445
- '60.#.139.219':445
- '60.#.64.186':445
- '60.#.219.64':445
- '60.#.250.75':445
- '60.#.93.94':445
- '60.#.51.137':445
- '60.#.242.73':445
- '60.#.153.70':445
- '60.#.91.160':445
- '60.#.137.1':445
- '60.#.197.217':445
- '60.#.179.220':445
- '60.#.40.15':445
- '60.#.52.173':445
- '60.#.21.1':445
- '60.#.97.152':445
- '60.#.50.117':445
- '60.#.45.113':445
- '60.#.153.70':139
- '60.#.51.137':139
- '60.#.242.73':139
- '60.#.117.220':445
- '60.#.250.163':139
- '60.#.45.113':139
- '60.#.97.152':139
- '60.#.50.117':139
- '60.#.89.193':139
- '60.#.220.147':139
- '60.#.89.193':445
- '60.#.220.147':445
- '60.#.117.220':139
- '60.#.52.173':139
- '60.#.21.1':139
- '60.#.219.64':139
- '60.#.139.219':139
- '60.#.64.186':139
- '60.#.25.140':139
- '60.#.186.24':139
- '60.#.34.73':139
- '60.#.14.75':139
- '60.#.86.55':139
- '60.#.149.206':139
- '60.#.208.224':139
- '60.#.40.15':139
- '60.#.197.217':139
- '60.#.179.220':139
- '60.#.250.75':139
- '60.#.93.94':139
- '60.#.1.167':139
- '60.#.140.81':139
- '60.#.105.44':139
- '60.#.91.160':139
- '60.#.137.1':139
- '60.#.86.55':445
- '60.#.160.180':139
- '60.#.143.43':139
- '60.#.143.88':139
- '60.#.66.133':139
- '60.#.172.246':139
- '60.#.90.188':139
- '60.#.144.36':139
- '60.#.93.128':139
- '60.#.173.184':139
- '60.#.159.40':139
- '60.#.45.96':139
- '60.#.127.158':139
- '60.#.136.171':139
- '60.#.193.182':139
- '60.#.44.89':139
- '60.#.6.58':139
- '60.#.63.245':139
- '60.#.252.196':139
- '60.#.207.36':139
- '60.#.177.206':139
- '60.#.217.32':139
- '60.#.60.137':139
- '60.#.33.29':139
- '60.#.53.80':139
- '60.#.28.254':139
- '60.#.155.21':139
- '60.#.5.156':139
- '60.#.82.229':139
- '60.#.175.91':139
- '60.#.36.175':139
- '60.#.154.18':139
- '60.#.234.9':139
- '60.#.103.222':139
- '60.#.40.66':139
- '60.#.31.147':139
- '60.#.4.27':139
- '60.#.45.208':139
- '60.#.9.52':139
- '60.#.172.240':139
- '60.#.213.15':139
- '60.#.176.57':445
- '60.#.217.106':445
- '60.#.48.142':445
- '60.#.133.1':445
- '60.#.75.68':445
- '60.#.98.29':445
- '60.#.152.0':445
- '60.#.81.6':445
- '60.#.150.217':445
- '60.#.84.24':445
- '60.#.78.37':445
- '60.#.120.229':445
- '60.#.103.165':445
- '60.#.34.73':445
- '60.#.14.75':445
- '60.#.167.25':445
- '60.#.126.34':445
- '60.#.208.3':445
- '60.#.18.117':445
- '60.#.112.102':445
- '60.#.100.224':445
- '60.#.208.151':445
- '60.#.227.167':445
- '60.#.59.9':445
- '60.#.108.61':445
- '60.#.142.133':139
- '60.#.122.107':139
- '60.#.132.176':139
- '60.#.145.198':445
- '60.#.90.180':445
- '60.#.108.61':139
- '60.#.227.167':139
- '60.#.59.9':139
- '60.#.169.151':445
- '60.#.151.170':139
- '60.#.90.180':139
- '60.#.151.170':445
- '60.#.145.198':139
- '60.#.100.224':139
- '60.#.208.151':139
- '60.#.234.74':445
- '60.#.184.233':445
- '60.#.149.51':445
- '60.#.244.133':445
- '60.#.168.47':139
- '60.#.71.247':445
- '60.#.180.117':445
- '60.#.168.180':445
- '60.#.117.58':445
- '60.#.198.135':445
- '60.#.249.157':445
- '60.#.110.45':139
- '60.#.201.188':139
- '60.#.56.11':139
- '60.#.158.114':139
- '60.#.88.191':139
- '60.#.81.216':139
- '60.#.13.142':139
- '60.#.50.127':139
- '60.#.35.253':139
- '60.#.46.58':139
- '60.#.7.39':445
- '60.#.7.233':445
- '60.#.4.141':445
- '60.#.185.185':445
- '60.#.178.231':445
- '60.#.209.117':445
- '60.#.10.50':445
- '60.#.54.113':445
- '60.#.110.64':445
- '60.#.168.21':445
- '60.#.29.94':445
- '60.#.230.168':445
- '60.#.73.161':445
- '60.#.164.202':445
- '60.#.54.41':445
- '60.#.212.114':445
- '60.#.109.28':445
- '60.#.147.180':445
- '60.#.20.244':445
- '60.#.164.211':445
- '60.#.230.168':139
- '60.#.20.244':139
- '60.#.29.94':139
- '60.#.54.41':139
- '60.#.73.161':139
- '60.#.109.28':139
- '60.#.185.185':139
- '60.#.212.114':139
- '60.#.164.211':139
- '60.#.147.180':139
- '60.#.184.233':139
- '60.#.198.135':139
- '60.#.149.51':139
- '60.#.71.247':139
- '60.#.244.133':139
- '60.#.168.180':139
- '60.#.164.202':139
- '60.#.180.117':139
- '60.#.249.157':139
- '60.#.117.58':139
- '60.#.71.167':139
- '60.#.115.87':139
- '60.#.90.132':139
- '60.#.75.252':139
- '60.#.147.48':139
- '60.#.204.111':139
- '60.#.114.204':139
- '60.#.31.125':139
- '60.#.30.188':139
- '60.#.255.75':139
- '60.#.7.233':139
- '60.#.110.64':139
- '60.#.7.39':139
- '60.#.178.231':139
- '60.#.4.141':139
- '60.#.10.50':139
- '60.#.190.161':139
- '60.#.209.117':139
- '60.#.168.21':139
- '60.#.54.113':139
- '60.#.190.161':445
- '60.#.66.20':139
- '60.#.167.66':139
- '60.#.20.20':139
- '60.#.93.81':139
- '60.#.125.208':139
- '60.#.62.17':445
- '60.#.50.56':445
- '60.#.234.74':139
- '60.#.144.167':139
- '60.#.75.72':139
- '60.#.138.193':139
- '60.#.243.185':139
- '60.#.187.214':139
- '60.#.117.193':139
- '60.#.80.118':139
- '60.#.12.224':139
- '60.#.10.241':139
- '60.#.183.237':139
- '60.#.194.116':139
- '60.#.25.137':139
- '60.#.93.81':445
- '60.#.125.208':445
- '60.#.10.241':445
- '60.#.183.237':445
- '60.#.12.224':445
- '60.#.144.167':445
- '60.#.75.72':445
- '60.#.167.66':445
- '60.#.20.20':445
- '60.#.66.20':445
- '60.#.117.193':445
- '60.#.80.118':445
- '60.#.155.181':445
- '60.#.80.19':445
- '60.#.207.66':445
- '60.#.194.116':445
- '60.#.25.137':445
- '60.#.243.185':445
- '60.#.187.214':445
- '60.#.138.193':445
- '60.#.110.45':445
- '60.#.201.188':445
- '60.#.56.11':445
- '60.#.158.114':445
- '60.#.88.191':445
- '60.#.81.216':445
- '60.#.13.142':445
- '60.#.50.127':445
- '60.#.35.253':445
- '60.#.46.58':445
- '60.#.71.167':445
- '60.#.115.87':445
- '60.#.90.132':445
- '60.#.75.252':445
- '60.#.147.48':445
- '60.#.204.111':445
- '60.#.114.204':445
- '60.#.31.125':445
- '60.#.30.188':445
- '60.#.255.75':445
- '60.#.114.204':9988
- '60.#.56.11':9988
- '60.#.204.111':9988
- '60.#.75.252':9988
- '60.#.90.132':9988
- '60.#.207.66':139
- '60.#.155.181':139
- '60.#.80.19':139
- '60.#.62.17':139
- '60.#.50.56':139
- '60.#.117.58':9988
- '60.#.180.117':9988
- '60.#.249.157':9988
- '60.#.168.47':445
- '60.#.184.233':9988
- '60.#.209.117':9988
- '60.#.190.161':9988
- '60.#.54.113':9988
- '60.#.7.233':9988
- '60.#.168.21':9988