Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '89.##.175.44':139
- '89.##.165.126':139
- '89.##.41.139':139
- '89.#6.9.42':139
- '89.##.70.248':139
- '89.#6.53.52':139
- '89.##.71.108':139
- '89.##.204.55':139
- '89.##.96.233':139
- '89.##.15.173':139
- '89.##.76.198':139
- '89.##.72.192':139
- '89.##.198.249':139
- '89.##.174.191':139
- '89.##.174.137':139
- '89.#6.59.75':139
- '89.#6.58.85':139
- '89.##.122.89':139
- '89.##.85.229':139
- '89.##.35.124':139
- '89.#6.10.69':139
- '89.#6.28.25':445
- '89.#6.6.29':445
- '89.##.203.198':445
- '89.#6.102.0':445
- '89.##.198.144':445
- '89.#6.75.88':445
- '89.#6.48.91':445
- '89.##.252.244':445
- '89.##.82.115':445
- '89.#6.178.9':445
- '89.##.204.65':445
- '89.#6.161.3':445
- '89.##.149.16':445
- '89.#6.190.9':139
- '89.##.36.197':139
- '89.#6.19.45':445
- '89.##.208.76':445
- '89.##.111.86':445
- '89.##.159.34':445
- '89.##.86.159':445
- '89.##.62.215':139
- '89.##.108.229':139
- '89.#6.8.87':445
- '89.##.17.124':139
- '89.##.232.184':139
- '89.##.124.232':139
- '89.##.232.184':445
- '89.##.124.232':445
- '89.#6.76.65':445
- '89.##.205.186':445
- '89.#6.46.72':445
- '89.##.101.174':445
- '89.##.33.205':445
- '89.#6.5.237':445
- '89.##.161.100':445
- '89.##.24.218':445
- '89.#6.46.72':139
- '89.#6.76.65':139
- '89.##.205.186':139
- '89.#6.60.76':445
- '89.#6.8.87':139
- '89.##.17.124':445
- '89.#6.6.29':139
- '89.##.82.115':139
- '89.#6.28.25':139
- '89.##.198.144':139
- '89.##.203.198':139
- '89.#6.48.91':139
- '89.#6.199.3':139
- '89.#6.75.88':139
- '89.#6.178.9':139
- '89.##.252.244':139
- '89.#6.161.3':139
- '89.##.159.34':139
- '89.##.204.65':139
- '89.##.108.229':445
- '89.##.149.16':139
- '89.##.208.76':139
- '89.#6.102.0':139
- '89.#6.19.45':139
- '89.##.86.159':139
- '89.##.111.86':139
- '89.#6.199.3':445
- '89.##.26.207':139
- '89.##.184.137':139
- '89.#6.57.34':139
- '89.##.194.238':139
- '89.##.252.194':139
- '89.##.38.228':139
- '89.##.57.167':139
- '89.#6.4.8':139
- '89.##.97.111':139
- '89.#6.45.36':139
- '89.##.45.237':139
- '89.##.183.163':139
- '89.#6.79.44':139
- '89.##.252.93':139
- '89.##.56.229':139
- '89.##.139.228':139
- '89.##.203.194':139
- '89.##.21.225':139
- '89.##.168.37':139
- '89.#6.0.137':139
- '89.#6.90.98':139
- '89.##.36.173':139
- '89.#6.30.29':139
- '89.##.75.176':139
- '89.##.71.180':139
- '89.##.105.218':139
- '89.##.76.125':139
- '89.##.248.188':139
- '89.##.252.190':139
- '89.#6.99.30':139
- '89.#6.103.4':139
- '89.##.170.94':139
- '89.##.80.213':139
- '89.##.180.77':139
- '89.##.104.28':139
- '89.##.227.27':139
- '89.##.74.144':139
- '89.#6.1.122':139
- '89.##.25.232':139
- '89.##.158.39':139
- '89.##.134.251':139
- '89.##.204.182':139
- '89.##.41.139':445
- '89.##.175.44':445
- '89.##.70.248':445
- '89.#6.58.85':445
- '89.#6.9.42':445
- '89.##.204.55':445
- '89.#6.53.52':445
- '89.##.15.173':445
- '89.##.165.126':445
- '89.##.96.233':445
- '89.##.198.249':445
- '89.##.76.198':445
- '89.##.174.137':445
- '89.##.62.215':445
- '89.##.174.191':445
- '89.##.122.89':445
- '89.#6.59.75':445
- '89.##.35.124':445
- '89.##.72.192':445
- '89.##.85.229':445
- '89.##.71.108':445
- '89.##.131.43':445
- '89.##.10.217':445
- '89.#6.53.98':445
- '89.##.135.202':139
- '89.##.203.244':445
- '89.##.135.202':445
- '89.##.176.230':139
- '89.##.102.23':445
- '89.##.223.113':445
- '89.##.162.105':445
- '89.##.203.244':139
- '89.#6.53.98':139
- '89.##.36.197':445
- '89.#6.10.69':445
- '89.#6.190.9':445
- '89.##.162.105':139
- '89.##.102.23':139
- '89.##.223.113':139
- '89.##.131.43':139
- '89.##.10.217':139
- '89.##.10.203':445
- '89.##.12.156':445
- '89.#6.15.49':445
- '89.#6.12.45':445
- '89.##.160.209':445
- '89.##.77.213':445
- '89.##.231.180':445
- '89.##.106.20':445
- '89.##.84.231':445
- '89.#6.46.75':445
- '89.##.200.213':445
- '89.##.224.243':139
- '89.##.128.244':139
- '89.##.52.146':139
- '89.##.152.109':139
- '89.##.230.183':139
- '89.##.141.202':139
- '89.##.53.203':445
- '89.##.26.237':139
- '89.##.171.235':139
- '89.##.180.208':139
- '89.##.41.151':445
- '89.##.112.92':445
- '89.##.254.24':445
- '89.##.161.199':445
- '89.##.13.164':445
- '89.##.222.126':445
- '89.##.149.147':445
- '89.#6.83.52':445
- '89.##.88.117':445
- '89.##.211.161':445
- '89.##.163.111':445
- '89.##.44.215':445
- '89.#6.2.42':445
- '89.#6.17.56':445
- '89.##.93.119':445
- '89.##.114.64':445
- '89.##.158.45':445
- '89.##.117.51':445
- '89.##.34.225':445
- '89.##.194.240':445
- '89.##.133.97':445
- '89.##.125.167':139
- '89.##.114.64':139
- '89.#6.17.56':139
- '89.##.231.180':139
- '89.##.12.156':139
- '89.#6.46.75':139
- '89.##.133.97':139
- '89.##.34.225':139
- '89.##.194.240':139
- '89.##.44.215':139
- '89.#6.2.42':139
- '89.##.53.203':139
- '89.##.106.20':139
- '89.#6.15.49':139
- '89.##.93.119':139
- '89.##.160.209':139
- '89.#6.12.45':139
- '89.##.77.213':139
- '89.##.84.231':139
- '89.##.200.213':139
- '89.##.41.151':139
- '89.##.158.45':139
- '89.##.151.207':139
- '89.#6.33.75':139
- '89.#6.148.6':139
- '89.#6.83.52':139
- '89.#6.64.9':139
- '89.##.201.150':139
- '89.##.140.201':139
- '89.##.162.35':139
- '89.#6.84.92':139
- '89.##.51.129':139
- '89.##.161.199':139
- '89.##.211.161':139
- '89.##.13.164':139
- '89.##.117.51':139
- '89.##.222.126':139
- '89.##.88.117':139
- '89.##.149.147':139
- '89.##.163.111':139
- '89.##.254.24':139
- '89.##.112.92':139
- '89.#6.148.6':445
- '89.#6.5.237':139
- '89.##.101.174':139
- '89.##.24.218':139
- '89.##.10.203':139
- '89.##.161.100':139
- '89.##.163.202':445
- '89.##.102.44':445
- '89.##.197.65':445
- '89.##.33.205':139
- '89.#6.60.76':139
- '89.##.224.183':139
- '89.##.191.44':139
- '89.##.103.155':139
- '89.#6.64.3':139
- '89.##.198.197':139
- '89.#6.0.113':139
- '89.#6.36.0':139
- '89.##.32.226':139
- '89.##.119.182':139
- '89.##.102.212':139
- '89.##.55.128':445
- '89.##.224.183':445
- '89.##.191.44':445
- '89.##.103.155':445
- '89.#6.64.3':445
- '89.##.198.197':445
- '89.#6.0.113':445
- '89.#6.36.0':445
- '89.##.32.226':445
- '89.##.119.182':445
- '89.##.102.212':445
- '89.##.19.136':445
- '89.#6.19.0':445
- '89.##.212.217':445
- '89.##.24.124':445
- '89.##.42.246':445
- '89.##.209.32':445
- '89.#6.23.80':445
- '89.##.164.162':445
- '89.##.179.52':445
- '89.##.162.228':445
- '89.#6.23.80':139
- '89.##.128.244':445
- '89.##.224.243':445
- '89.##.171.235':445
- '89.##.230.183':445
- '89.##.52.146':445
- '89.##.53.203':9988
- '89.##.12.156':9988
- '89.##.141.202':445
- '89.##.180.208':445
- '89.##.26.237':445
- '89.##.51.129':445
- '89.#6.84.92':445
- '89.#6.33.75':445
- '89.##.151.207':445
- '89.#6.64.9':445
- '89.##.125.167':445
- '89.##.140.201':445
- '89.##.152.109':445
- '89.##.162.35':445
- '89.##.201.150':445
- '89.#6.2.42':9988
- '89.##.212.217':139
- '89.##.19.136':139
- '89.##.42.246':139
- '89.##.55.128':139
- '89.##.24.124':139
- '89.##.164.162':139
- '89.##.209.32':139
- '89.##.162.228':139
- '89.#6.19.0':139
- '89.##.179.52':139
- '89.#6.33.75':9988
- '89.##.140.201':9988
- '89.##.149.147':9988
- '89.##.13.164':9988
- '89.##.211.161':9988
- '89.##.163.202':139
- '89.##.102.44':139
- '89.##.197.65':139
- '89.##.230.183':9988
- '89.##.128.244':9988