Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '58.##.49.241':139
- '58.##.106.211':139
- '58.#1.69.70':139
- '58.##.116.108':139
- '58.##.120.35':139
- '58.#1.1.27':445
- '58.##.200.146':445
- '58.#1.30.28':445
- '58.##.149.230':139
- '58.##.140.149':139
- '58.##.196.44':139
- '58.##.240.195':139
- '58.#1.45.40':139
- '58.##.210.122':139
- '58.##.30.234':139
- '58.##.11.165':139
- '58.##.109.11':139
- '58.##.165.67':139
- '58.#1.225.1':139
- '58.#1.68.45':139
- '58.##.104.107':445
- '58.##.79.242':445
- '58.##.77.241':445
- '58.#1.94.55':445
- '58.#1.2.234':445
- '58.##.180.144':445
- '58.##.100.203':445
- '58.##.144.184':445
- '58.##.27.207':445
- '58.##.148.167':445
- '58.##.61.130':445
- '58.##.57.228':445
- '58.##.130.107':445
- '58.##.207.178':445
- '58.##.242.186':445
- '58.##.127.105':445
- '58.##.132.232':445
- '58.##.40.216':445
- '58.#1.4.160':445
- '58.##.145.84':445
- '58.##.159.150':139
- '58.##.233.10':445
- '58.##.185.253':445
- '58.##.10.215':445
- '58.#1.77.65':445
- '58.##.79.238':445
- '58.##.207.178':139
- '58.##.242.186':139
- '58.##.200.146':139
- '58.#1.30.28':139
- '58.#1.1.27':139
- '58.##.79.238':139
- '58.##.10.215':139
- '58.#1.77.65':139
- '58.##.160.93':139
- '58.##.211.137':139
- '58.##.160.93':445
- '58.##.211.137':445
- '58.##.88.241':445
- '58.##.233.10':139
- '58.##.185.253':139
- '58.##.27.207':139
- '58.##.148.167':139
- '58.##.79.242':139
- '58.##.77.241':139
- '58.##.104.107':139
- '58.##.174.212':139
- '58.##.232.120':139
- '58.##.100.203':139
- '58.##.144.184':139
- '58.##.180.144':139
- '58.#1.4.160':139
- '58.##.145.84':139
- '58.##.57.228':139
- '58.##.130.107':139
- '58.##.61.130':139
- '58.#1.94.55':139
- '58.#1.2.234':139
- '58.##.132.232':139
- '58.##.40.216':139
- '58.##.127.105':139
- '58.##.203.51':139
- '58.#1.61.91':139
- '58.##.110.116':139
- '58.##.159.185':139
- '58.##.24.116':139
- '58.#1.63.25':139
- '58.##.237.62':139
- '58.##.25.245':139
- '58.#1.49.56':139
- '58.##.245.159':139
- '58.##.80.235':139
- '58.##.215.132':139
- '58.##.236.44':139
- '58.##.196.159':139
- '58.##.44.196':139
- '58.##.216.189':139
- '58.##.155.102':139
- '58.##.172.239':139
- '58.##.16.165':139
- '58.#1.5.133':139
- '58.##.120.85':139
- '58.##.109.195':139
- '58.##.84.196':139
- '58.##.162.18':139
- '58.##.115.13':139
- '58.##.191.195':445
- '58.#1.226.9':445
- '58.##.227.163':139
- '58.##.213.209':139
- '58.#1.2.80':139
- '58.##.11.244':139
- '58.##.227.49':139
- '58.##.123.155':139
- '58.##.210.237':139
- '58.##.29.128':139
- '58.##.147.76':139
- '58.##.86.147':139
- '58.##.239.26':139
- '58.##.80.223':139
- '58.##.241.67':139
- '58.##.192.211':139
- '58.##.116.108':445
- '58.##.120.35':445
- '58.##.109.11':445
- '58.##.165.67':445
- '58.##.11.165':445
- '58.##.149.230':445
- '58.##.140.149':445
- '58.##.106.211':445
- '58.#1.69.70':445
- '58.##.49.241':445
- '58.##.210.122':445
- '58.##.30.234':445
- '58.##.159.150':445
- '58.##.174.212':445
- '58.##.232.120':445
- '58.#1.225.1':445
- '58.#1.68.45':445
- '58.##.240.195':445
- '58.#1.45.40':445
- '58.##.196.44':445
- '58.##.41.208':445
- '58.##.251.222':445
- '58.#1.71.91':445
- '58.##.38.223':445
- '58.#1.91.39':445
- '58.#1.8.249':139
- '58.##.55.207':139
- '58.#1.226.9':139
- '58.##.109.13':445
- '58.##.191.195':139
- '58.#1.91.39':139
- '58.#1.71.91':139
- '58.##.38.223':139
- '58.##.72.140':139
- '58.##.60.140':139
- '58.##.72.140':445
- '58.##.60.140':445
- '58.##.109.13':139
- '58.##.41.208':139
- '58.##.251.222':139
- '58.##.88.241':139
- '58.##.199.168':445
- '58.##.168.189':445
- '58.##.189.38':445
- '58.#1.58.49':445
- '58.#1.0.84':445
- '58.#1.203.4':445
- '58.##.87.226':445
- '58.##.121.100':445
- '58.##.106.228':445
- '58.##.157.185':445
- '58.##.75.207':139
- '58.#1.68.39':139
- '58.##.156.71':139
- '58.##.184.221':139
- '58.#1.71.5':139
- '58.#1.51.5':139
- '58.##.69.145':139
- '58.##.109.71':139
- '58.##.81.193':139
- '58.##.171.91':139
- '58.#1.59.66':445
- '58.##.253.231':445
- '58.##.236.79':445
- '58.##.252.156':445
- '58.##.156.200':445
- '58.##.249.20':445
- '58.##.97.246':445
- '58.##.108.90':445
- '58.##.242.162':445
- '58.##.29.204':445
- '58.##.177.107':445
- '58.##.131.119':445
- '58.##.195.87':445
- '58.#1.9.223':445
- '58.##.167.93':445
- '58.#1.21.13':445
- '58.##.159.240':445
- '58.##.232.30':445
- '58.##.18.186':445
- '58.##.114.109':445
- '58.#1.51.39':139
- '58.##.177.107':139
- '58.##.131.119':139
- '58.##.195.87':139
- '58.#1.9.223':139
- '58.##.167.93':139
- '58.#1.21.13':139
- '58.##.159.240':139
- '58.##.232.30':139
- '58.##.18.186':139
- '58.##.114.109':139
- '58.#1.58.49':139
- '58.##.199.168':139
- '58.#1.0.84':139
- '58.##.168.189':139
- '58.##.189.38':139
- '58.#1.203.4':139
- '58.##.87.226':139
- '58.##.121.100':139
- '58.##.106.228':139
- '58.##.157.185':139
- '58.##.226.34':139
- '58.##.230.225':139
- '58.##.29.146':139
- '58.#1.96.90':139
- '58.##.158.117':139
- '58.#1.6.0':139
- '58.##.126.131':139
- '58.##.195.185':139
- '58.##.204.181':139
- '58.##.214.119':139
- '58.#1.59.66':139
- '58.##.253.231':139
- '58.##.236.79':139
- '58.##.252.156':139
- '58.##.156.200':139
- '58.##.249.20':139
- '58.##.97.246':139
- '58.##.108.90':139
- '58.##.242.162':139
- '58.##.29.204':139
- '58.##.199.214':139
- '58.#1.6.219':139
- '58.##.200.245':139
- '58.##.133.39':139
- '58.##.233.132':139
- '58.##.212.236':445
- '58.##.83.247':445
- '58.##.52.117':445
- '58.#1.38.7':139
- '58.##.27.108':139
- '58.##.147.154':139
- '58.#1.132.2':139
- '58.#1.53.90':139
- '58.#1.41.21':139
- '58.##.48.188':139
- '58.##.206.119':139
- '58.##.39.206':139
- '58.##.29.136':139
- '58.##.12.243':139
- '58.##.110.124':139
- '58.##.133.39':445
- '58.##.233.132':445
- '58.##.39.206':445
- '58.##.29.136':445
- '58.##.206.119':445
- '58.#1.38.7':445
- '58.##.27.108':445
- '58.#1.6.219':445
- '58.##.200.245':445
- '58.##.199.214':445
- '58.#1.41.21':445
- '58.##.48.188':445
- '58.#1.0.243':445
- '58.##.235.132':445
- '58.##.241.160':445
- '58.##.12.243':445
- '58.##.110.124':445
- '58.#1.132.2':445
- '58.#1.53.90':445
- '58.##.147.154':445
- '58.#1.0.243':139
- '58.##.156.71':445
- '58.##.75.207':445
- '58.#1.71.5':445
- '58.#1.51.39':445
- '58.##.184.221':445
- '58.##.109.71':445
- '58.#1.51.5':445
- '58.##.171.91':445
- '58.#1.68.39':445
- '58.##.81.193':445
- '58.##.226.34':445
- '58.##.230.225':445
- '58.##.29.146':445
- '58.#1.96.90':445
- '58.##.158.117':445
- '58.#1.6.0':445
- '58.##.126.131':445
- '58.##.195.185':445
- '58.##.204.181':445
- '58.##.214.119':445
- '58.##.97.246':9988
- '58.#1.71.5':9988
- '58.##.249.20':9988
- '58.##.29.204':9988
- '58.##.108.90':9988
- '58.##.235.132':139
- '58.##.241.160':139
- '58.##.83.247':139
- '58.##.52.117':139
- '58.##.212.236':139
- '58.##.121.100':9988
- '58.##.18.186':9988
- '58.#1.58.49':9988
- '58.##.69.145':445
- '58.##.189.38':9988
- '58.#1.59.66':9988
- '58.##.253.231':9988
- '58.##.236.79':9988
- '58.#1.21.13':9988
- '58.##.156.200':9988