Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '84.##.11.243':445
- '84.##.230.41':445
- '84.##.102.63':445
- '84.##.134.99':445
- '84.##.93.134':445
- '84.##.235.169':445
- '84.##.235.28':445
- '84.##.222.247':445
- '84.##.112.131':445
- '84.##.205.131':445
- '84.##.100.104':445
- '84.##.48.162':445
- '84.##.35.193':445
- '84.##.197.122':445
- '84.##.198.202':445
- '84.##.213.109':445
- '84.##.99.213':445
- '84.#3.87.67':445
- '84.#3.99.55':445
- '84.#3.10.99':445
- '84.##.213.179':445
- '84.##.151.227':445
- '84.##.125.171':445
- '84.#3.118.8':445
- '84.##.71.172':445
- '84.##.21.153':445
- '84.##.37.157':445
- '84.##.39.124':445
- '84.##.12.167':445
- '84.#3.2.237':445
- '84.##.215.212':445
- '84.##.126.215':445
- '84.##.212.209':445
- '84.##.146.180':445
- '84.##.209.139':445
- '84.##.232.221':445
- '84.##.31.204':445
- '84.##.253.208':445
- '84.##.212.126':445
- '84.##.185.168':445
- '84.##.126.215':139
- '84.##.212.126':139
- '84.##.215.212':139
- '84.##.209.139':139
- '84.##.212.209':139
- '84.##.31.204':139
- '84.#3.118.8':139
- '84.##.232.221':139
- '84.##.185.168':139
- '84.##.253.208':139
- '84.##.230.41':139
- '84.##.112.131':139
- '84.##.11.243':139
- '84.##.93.134':139
- '84.##.102.63':139
- '84.##.235.28':139
- '84.##.146.180':139
- '84.##.235.169':139
- '84.##.205.131':139
- '84.##.222.247':139
- '84.##.201.213':139
- '84.##.73.111':139
- '84.##.237.100':139
- '84.##.132.61':139
- '84.#3.113.0':139
- '84.#3.4.10':445
- '84.##.153.24':445
- '84.##.36.161':445
- '84.##.86.159':139
- '84.##.176.171':139
- '84.##.151.227':139
- '84.##.12.167':139
- '84.##.213.179':139
- '84.##.71.172':139
- '84.##.125.171':139
- '84.##.37.157':139
- '84.##.175.240':139
- '84.##.21.153':139
- '84.#3.2.237':139
- '84.##.39.124':139
- '84.##.33.175':139
- '84.##.133.117':139
- '84.##.147.18':139
- '84.##.206.95':139
- '84.##.118.234':139
- '84.#3.9.41':139
- '84.#3.41.68':445
- '84.#3.89.74':139
- '84.##.181.32':139
- '84.#3.36.59':139
- '84.##.184.186':139
- '84.##.146.184':139
- '84.##.115.110':139
- '84.##.156.230':139
- '84.##.232.15':139
- '84.##.29.210':139
- '84.##.219.29':139
- '84.##.209.56':139
- '84.#3.58.63':139
- '84.##.59.211':139
- '84.#3.32.53':445
- '84.##.61.248':445
- '84.##.156.226':445
- '84.##.211.54':445
- '84.##.211.119':445
- '84.#3.72.22':445
- '84.##.128.182':445
- '84.##.148.235':445
- '84.##.202.133':445
- '84.#3.64.90':445
- '84.##.99.201':445
- '84.#3.0.158':445
- '84.#3.21.29':445
- '84.#3.4.85':445
- '84.##.83.210':445
- '84.#3.90.16':445
- '84.##.182.146':445
- '84.#3.36.23':445
- '84.##.10.102':445
- '84.#3.73.47':445
- '84.#3.0.158':139
- '84.##.10.102':139
- '84.##.99.201':139
- '84.##.83.210':139
- '84.#3.21.29':139
- '84.##.182.146':139
- '84.##.211.54':139
- '84.#3.90.16':139
- '84.#3.73.47':139
- '84.#3.36.23':139
- '84.##.237.100':445
- '84.##.201.213':445
- '84.#3.113.0':445
- '84.##.175.240':445
- '84.##.132.61':445
- '84.#3.41.68':139
- '84.#3.4.85':139
- '84.##.176.171':445
- '84.##.73.111':445
- '84.##.86.159':445
- '84.#3.68.87':139
- '84.##.129.68':139
- '84.##.44.189':139
- '84.##.144.230':139
- '84.#3.5.69':139
- '84.##.83.209':139
- '84.##.17.128':139
- '84.#3.22.56':139
- '84.##.210.129':139
- '84.#3.11.60':139
- '84.##.61.248':139
- '84.##.202.133':139
- '84.#3.32.53':139
- '84.##.211.119':139
- '84.##.156.226':139
- '84.##.128.182':139
- '84.##.141.128':139
- '84.#3.72.22':139
- '84.#3.64.90':139
- '84.##.148.235':139
- '84.##.134.99':139
- '84.##.90.193':445
- '84.##.168.104':445
- '84.##.32.154':445
- '84.##.137.29':139
- '84.##.243.117':445
- '84.##.75.128':445
- '84.##.152.167':445
- '84.##.91.210':445
- '84.##.121.20':445
- '84.##.195.92':445
- '84.#3.8.182':139
- '84.##.83.154':139
- '84.##.129.13':139
- '84.#3.88.22':139
- '84.#3.98.47':139
- '84.##.91.230':139
- '84.#3.70.82':139
- '84.##.229.203':139
- '84.##.229.82':139
- '84.##.206.85':139
- '84.#3.83.20':445
- '84.#3.4.51':445
- '84.##.193.246':445
- '84.#3.95.74':445
- '84.##.246.210':445
- '84.##.136.28':445
- '84.#3.21.28':445
- '84.#3.9.226':445
- '84.#3.179.9':445
- '84.##.189.50':445
- '84.##.211.147':445
- '84.##.92.211':445
- '84.#3.69.62':445
- '84.##.161.38':445
- '84.##.130.50':445
- '84.##.232.122':445
- '84.##.26.233':445
- '84.##.247.162':445
- '84.#3.0.37':445
- '84.##.88.102':445
- '84.##.92.211':139
- '84.#3.0.37':139
- '84.##.211.147':139
- '84.##.130.50':139
- '84.#3.69.62':139
- '84.##.26.233':139
- '84.#3.95.74':139
- '84.##.232.122':139
- '84.##.88.102':139
- '84.##.247.162':139
- '84.##.168.104':139
- '84.##.121.20':139
- '84.##.90.193':139
- '84.##.243.117':139
- '84.##.32.154':139
- '84.##.152.167':139
- '84.##.161.38':139
- '84.##.75.128':139
- '84.##.195.92':139
- '84.##.91.210':139
- '84.##.79.188':139
- '84.##.29.172':139
- '84.##.188.129':139
- '84.##.90.145':139
- '84.##.129.90':139
- '84.#3.49.0':139
- '84.##.177.57':139
- '84.##.167.207':139
- '84.##.165.173':139
- '84.##.13.113':139
- '84.#3.4.51':139
- '84.#3.179.9':139
- '84.#3.83.20':139
- '84.##.246.210':139
- '84.##.193.246':139
- '84.#3.21.28':139
- '84.##.220.214':139
- '84.##.136.28':139
- '84.##.189.50':139
- '84.#3.9.226':139
- '84.##.198.213':139
- '84.##.58.213':445
- '84.##.191.244':139
- '84.##.210.27':139
- '84.##.239.109':139
- '84.#3.12.31':445
- '84.#3.15.88':445
- '84.#3.7.182':445
- '84.##.137.97':445
- '84.#3.7.151':445
- '84.#3.7.151':139
- '84.#3.7.182':139
- '84.##.137.97':139
- '84.##.211.147':9988
- '84.##.58.213':139
- '84.##.127.144':139
- '84.##.84.232':139
- '84.#3.69.21':139
- '84.#3.12.31':139
- '84.#3.15.88':139
- '84.##.100.104':139
- '84.##.48.162':139
- '84.##.35.193':139
- '84.##.197.122':139
- '84.##.198.202':139
- '84.##.213.109':139
- '84.##.99.213':139
- '84.#3.87.67':139
- '84.#3.99.55':139
- '84.#3.10.99':139
- '84.##.210.27':445
- '84.##.239.109':445
- '84.##.84.232':445
- '84.#3.69.21':445
- '84.##.127.144':445
- '84.#3.4.10':139
- '84.##.153.24':139
- '84.##.36.161':139
- '84.##.191.244':445
- '84.##.198.213':445
- '84.##.129.13':445
- '84.#3.8.182':445
- '84.#3.98.47':445
- '84.##.177.57':445
- '84.#3.88.22':445
- '84.##.229.203':445
- '84.##.91.230':445
- '84.##.206.85':445
- '84.##.83.154':445
- '84.##.229.82':445
- '84.##.188.129':445
- '84.##.79.188':445
- '84.##.129.90':445
- '84.##.220.214':445
- '84.##.90.145':445
- '84.##.167.207':445
- '84.#3.49.0':445
- '84.##.13.113':445
- '84.##.29.172':445
- '84.##.165.173':445
- '84.##.129.90':9988
- '84.#3.0.37':9988
- '84.##.247.162':9988
- '84.#3.83.20':9988
- '84.##.136.28':9988
- '84.#3.69.62':9988
- '84.##.189.50':9988
- '84.##.232.122':9988
- '84.##.88.102':9988
- '84.#3.95.74':9988
- '84.##.243.117':9988
- '84.##.32.154':9988
- '84.##.90.193':9988
- '84.#3.70.82':445
- '84.##.137.29':445
- '84.##.26.233':9988
- '84.##.246.210':9988
- '84.##.195.92':9988
- '84.##.168.104':9988
- '84.##.121.20':9988