Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '12#.#7.137.206':445
- '12#.#7.117.250':445
- '12#.#7.55.44':445
- '12#.#7.239.207':445
- '12#.#7.73.16':445
- '12#.#7.183.17':445
- '12#.#7.152.2':445
- '12#.#7.138.124':445
- '12#.67.30.7':445
- '12#.#7.79.99':445
- '12#.#7.73.52':445
- '12#.#7.110.244':445
- '12#.#7.26.233':445
- '12#.#7.150.117':445
- '12#.#7.161.105':445
- '12#.#7.3.179':445
- '12#.#7.247.179':445
- '12#.#7.49.20':445
- '12#.#7.121.198':445
- '12#.#7.187.61':445
- '12#.#7.92.216':445
- '12#.#7.124.42':445
- '12#.#7.243.242':445
- '12#.#7.102.59':445
- '12#.#7.158.243':139
- '12#.#7.11.187':139
- '12#.#7.160.217':139
- '12#.#7.196.96':139
- '12#.#7.248.169':139
- '12#.#7.8.145':139
- '12#.#7.77.36':445
- '12#.#7.36.84':445
- '12#.#7.242.44':445
- '12#.#7.153.129':445
- '12#.#7.19.37':445
- '12#.#7.103.181':445
- '12#.#7.36.84':139
- '12#.#7.77.36':139
- '12#.#7.242.44':139
- '12#.#7.153.129':139
- '12#.#7.103.181':139
- '12#.#7.19.37':139
- '12#.#7.166.168':139
- '12#.#7.221.139':139
- '12#.#7.89.197':139
- '12#.#7.73.179':139
- '12#.#7.172.195':139
- '12#.#7.92.173':139
- '12#.#7.3.179':139
- '12#.#7.247.179':139
- '12#.#7.49.20':139
- '12#.#7.170.122':139
- '12#.#7.91.170':139
- '12#.#7.194.121':139
- '12#.#7.102.59':139
- '12#.#7.26.233':139
- '12#.#7.124.42':139
- '12#.#7.243.242':139
- '12#.#7.161.105':139
- '12#.#7.150.117':139
- '12#.#7.151.212':445
- '12#.#7.36.35':445
- '12#.#7.57.63':445
- '12#.#7.13.34':445
- '12#.#7.87.40':445
- '12#.#7.212.252':445
- '12#.#7.116.82':139
- '12#.#7.88.34':139
- '12#.#7.28.212':139
- '12#.#7.3.135':139
- '12#.#7.57.135':139
- '12#.#7.157.55':139
- '12#.#7.3.135':445
- '12#.#7.57.135':445
- '12#.#7.157.55':445
- '12#.67.30.7':139
- '12#.#7.138.124':139
- '12#.#7.152.2':139
- '12#.#7.170.122':445
- '12#.#7.91.170':445
- '12#.#7.194.121':445
- '12#.#7.88.34':445
- '12#.#7.28.212':445
- '12#.#7.116.82':445
- '12#.#7.73.16':139
- '12#.#7.239.207':139
- '12#.#7.183.17':139
- '12#.#7.187.61':139
- '12#.#7.121.198':139
- '12#.#7.92.216':139
- '12#.#7.79.99':139
- '12#.#7.110.244':139
- '12#.#7.73.52':139
- '12#.#7.137.206':139
- '12#.#7.55.44':139
- '12#.#7.117.250':139
- '12#.#7.237.53':445
- '12#.#7.26.85':445
- '12#.#7.246.131':445
- '12#.#7.205.131':445
- '12#.#7.97.64':445
- '12#.#7.104.141':445
- '12#.#7.192.80':445
- '12#.#7.224.12':445
- '12#.#7.92.70':445
- '12#.#7.80.246':445
- '12#.#7.13.254':445
- '12#.#7.241.223':445
- '12#.67.29.8':445
- '12#.#7.83.215':445
- '12#.#7.16.118':445
- '12#.#7.238.123':445
- '12#.#7.101.76':445
- '12#.#7.89.38':445
- '12#.#7.122.170':445
- '12#.#7.43.122':445
- '12#.#7.249.184':445
- '12#.#7.40.60':445
- '12#.#7.90.179':445
- '12#.#7.58.31':445
- '12#.#7.205.47':139
- '12#.#7.79.61':139
- '12#.#7.59.216':139
- '12#.#7.46.173':139
- '12#.#7.191.237':139
- '12#.#7.126.86':139
- '12#.#7.44.187':139
- '12#.#7.33.101':139
- '12#.#7.228.5':139
- '12#.#7.48.143':139
- '12#.#7.15.76':139
- '12#.#7.126.47':139
- '12#.#7.39.97':445
- '12#.#7.127.134':445
- '12#.#7.249.127':445
- '12#.#7.80.216':445
- '12#.67.13.0':445
- '12#.#7.120.104':445
- '12#.#7.98.138':139
- '12#.#7.9.117':139
- '12#.#7.76.33':139
- '12#.67.5.61':139
- '12#.#7.40.77':139
- '12#.#7.225.155':139
- '12#.#7.238.123':139
- '12#.#7.101.76':139
- '12#.#7.16.118':139
- '12#.#7.49.150':139
- '12#.#7.126.143':139
- '12#.#7.40.67':139
- '12#.#7.40.60':139
- '12#.#7.90.179':139
- '12#.#7.58.31':139
- '12#.67.29.8':139
- '12#.#7.89.38':139
- '12#.#7.83.215':139
- '12#.#7.166.168':445
- '12#.#7.221.139':445
- '12#.#7.89.197':445
- '12#.#7.73.179':445
- '12#.#7.172.195':445
- '12#.#7.92.173':445
- '12#.#7.158.243':445
- '12#.#7.11.187':445
- '12#.#7.160.217':445
- '12#.#7.196.96':445
- '12#.#7.248.169':445
- '12#.#7.8.145':445
- '12#.#7.92.70':139
- '12#.#7.39.97':139
- '12#.#7.80.216':139
- '12#.#7.127.134':139
- '12#.#7.249.127':139
- '12#.67.13.0':139
- '12#.#7.49.150':445
- '12#.#7.40.67':445
- '12#.#7.126.143':445
- '12#.#7.192.80':139
- '12#.#7.120.104':139
- '12#.#7.224.12':139
- '12#.#7.205.131':139
- '12#.#7.97.64':139
- '12#.#7.26.85':139
- '12#.#7.122.170':139
- '12#.#7.43.122':139
- '12#.#7.249.184':139
- '12#.#7.246.131':139
- '12#.#7.80.246':139
- '12#.#7.241.223':139
- '12#.#7.104.141':139
- '12#.#7.13.254':139
- '12#.#7.237.53':139
- '12#.#7.11.176':445
- '12#.#7.180.11':445
- '12#.#7.187.179':445
- '12#.#7.52.153':445
- '12#.#7.165.165':445
- '12#.#7.56.11':445
- '12#.#7.110.14':445
- '12#.#7.12.82':445
- '12#.#7.100.182':445
- '12#.#7.24.73':445
- '12#.#7.129.216':445
- '12#.#7.33.40':445
- '12#.#7.102.62':445
- '12#.#7.33.51':445
- '12#.#7.144.69':445
- '12#.#7.178.188':139
- '12#.#7.64.43':139
- '12#.67.1.85':139
- '12#.#7.57.227':445
- '12#.#7.150.221':445
- '12#.67.8.85':445
- '12#.#7.180.226':445
- '12#.#7.213.180':445
- '12#.#7.82.202':445
- '12#.#7.108.125':445
- '12#.#7.74.162':445
- '12#.#7.26.22':445
- '12#.#7.131.233':445
- '12#.#7.35.34':445
- '12#.#7.60.235':445
- '12#.#7.186.118':445
- '12#.#7.70.253':445
- '12#.#7.105.90':445
- '12#.#7.5.119':445
- '12#.#7.46.169':445
- '12#.#7.253.46':445
- '12#.#7.231.167':445
- '12#.#7.73.144':445
- '12#.#7.187.127':445
- '12#.#7.58.77':445
- '12#.#7.165.60':445
- '12#.#7.167.101':445
- '12#.#7.12.202':445
- '12#.#7.79.13':445
- '12#.#7.60.79':445
- '12#.#7.122.39':445
- '12#.#7.19.109':445
- '12#.#7.229.169':445
- '12#.#7.24.73':139
- '12#.#7.129.216':139
- '12#.#7.33.40':139
- '12#.#7.11.176':139
- '12#.#7.180.11':139
- '12#.#7.187.179':139
- '12#.#7.58.77':139
- '12#.#7.165.60':139
- '12#.#7.167.101':139
- '12#.#7.110.14':139
- '12#.#7.12.82':139
- '12#.#7.100.182':139
- '12#.#7.180.226':139
- '12#.#7.213.180':139
- '12#.#7.82.202':139
- '12#.#7.102.62':139
- '12#.#7.33.51':139
- '12#.#7.144.69':139
- '12#.#7.52.153':139
- '12#.#7.165.165':139
- '12#.#7.56.11':139
- '12#.#7.57.227':139
- '12#.#7.150.221':139
- '12#.67.8.85':139
- '12#.#7.5.119':139
- '12#.#7.46.169':139
- '12#.#7.253.46':139
- '12#.#7.108.125':139
- '12#.#7.74.162':139
- '12#.#7.26.22':139
- '12#.#7.140.222':139
- '12#.#7.245.239':139
- '12#.#7.49.234':139
- '12#.#7.186.118':139
- '12#.#7.70.253':139
- '12#.#7.105.90':139
- '12#.#7.122.39':139
- '12#.#7.19.109':139
- '12#.#7.229.169':139
- '12#.#7.231.167':139
- '12#.#7.73.144':139
- '12#.#7.187.127':139
- '12#.#7.131.233':139
- '12#.#7.35.34':139
- '12#.#7.60.235':139
- '12#.#7.12.202':139
- '12#.#7.79.13':139
- '12#.#7.60.79':139
- '12#.#7.200.79':445
- '12#.#7.71.85':445
- '12#.#7.99.127':445
- '12#.#7.44.67':445
- '12#.#7.138.53':445
- '12#.#7.29.94':445
- '12#.#7.118.122':139
- '12#.#7.221.176':139
- '12#.#7.140.138':139
- '12#.#7.174.139':139
- '12#.#7.197.9':139
- '12#.#7.34.236':139
- '12#.#7.177.242':445
- '12#.#7.60.118':445
- '12#.#7.156.205':445
- '12#.#7.21.142':445
- '12#.#7.14.22':445
- '12#.#7.173.43':445
- '12#.#7.5.116':445
- '12#.#7.229.137':445
- '12#.#7.214.80':445
- '12#.#7.253.156':445
- '12#.#7.138.253':445
- '12#.#7.16.54':445
- '12#.#7.34.236':445
- '12#.#7.197.9':445
- '12#.#7.118.122':445
- '12#.#7.215.34':445
- '12#.#7.34.140':445
- '12#.#7.174.139':445
- '12#.#7.216.214':445
- '12#.#7.54.54':445
- '12#.#7.34.69':445
- '12#.#7.221.176':445
- '12#.#7.140.138':445
- '12#.#7.53.138':445
- '12#.#7.53.138':139
- '12#.#7.54.54':139
- '12#.#7.34.69':139
- '12#.#7.34.140':139
- '12#.#7.215.34':139
- '12#.#7.216.214':139
- '12#.#7.151.212':139
- '12#.#7.36.35':139
- '12#.#7.57.63':139
- '12#.#7.13.34':139
- '12#.#7.87.40':139
- '12#.#7.212.252':139
- '12#.#7.131.233':9988
- '12#.#7.60.235':9988
- '12#.#7.108.125':9988
- '12#.#7.110.14':9988
- '12#.#7.100.182':9988
- '12#.#7.58.77':9988
- '12#.#7.29.129':139
- '12#.#7.203.182':139
- '12#.#7.228.37':139
- '12#.#7.74.162':9988
- '12#.#7.70.253':9988
- '12#.#7.109.1':139
- '12#.#7.178.188':445
- '12#.#7.64.43':445
- '12#.67.1.85':445
- '12#.#7.140.222':445
- '12#.#7.245.239':445
- '12#.#7.49.234':445
- '12#.#7.52.153':9988
- '12#.#7.165.165':9988
- '12#.#7.187.179':9988
- '12#.#7.102.62':9988
- '12#.#7.57.227':9988
- '12#.67.8.85':9988
- '12#.#7.29.94':139
- '12#.#7.200.79':139
- '12#.#7.71.85':139
- '12#.#7.214.80':139
- '12#.#7.44.67':139
- '12#.#7.138.53':139
- '12#.#7.203.182':445
- '12#.#7.228.37':445
- '12#.67.58.6':445
- '12#.#7.99.127':139
- '12#.#7.109.1':445
- '12#.#7.29.129':445
- '12#.#7.173.43':139
- '12#.#7.177.242':139
- '12#.#7.60.118':139
- '12#.67.58.6':139
- '12#.#7.21.142':139
- '12#.#7.14.22':139
- '12#.#7.16.54':139
- '12#.#7.5.116':139
- '12#.#7.229.137':139
- '12#.#7.156.205':139
- '12#.#7.253.156':139
- '12#.#7.138.253':139