Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '24.##.207.82':445
- '24.##.120.235':445
- '24.#8.6.242':139
- '24.#8.5.176':445
- '24.##.143.113':445
- '24.##.161.230':445
- '24.#8.110.4':445
- '24.##.132.82':445
- '24.##.193.39':445
- '24.##.123.91':139
- '24.#8.5.124':139
- '24.##.126.157':139
- '24.##.69.228':139
- '24.#8.183.4':139
- '24.##.39.196':139
- '24.##.241.131':139
- '24.##.241.182':139
- '24.##.131.110':139
- '24.##.69.253':445
- '24.##.102.212':445
- '24.##.16.137':445
- '24.##.84.213':445
- '24.#8.13.25':445
- '24.##.143.66':445
- '24.##.37.174':445
- '24.##.88.121':445
- '24.##.129.235':445
- '24.##.173.129':445
- '24.##.213.19':445
- '24.##.120.222':445
- '24.##.159.141':445
- '24.##.130.146':445
- '24.##.210.40':445
- '24.##.226.149':445
- '24.##.97.102':445
- '24.##.60.161':445
- '24.##.148.164':445
- '24.#8.143.9':139
- '24.##.120.222':139
- '24.##.210.40':139
- '24.##.130.146':139
- '24.##.213.19':139
- '24.##.60.161':139
- '24.##.97.102':139
- '24.##.84.213':139
- '24.##.148.164':139
- '24.##.226.149':139
- '24.##.143.113':139
- '24.##.132.82':139
- '24.##.207.82':139
- '24.##.120.235':139
- '24.##.193.39':139
- '24.##.69.253':139
- '24.##.159.141':139
- '24.##.161.230':139
- '24.#8.110.4':139
- '24.#8.13.25':139
- '24.#8.246.9':139
- '24.##.138.246':139
- '24.##.229.112':139
- '24.#8.9.226':139
- '24.##.67.138':139
- '24.##.158.80':139
- '24.#8.2.20':139
- '24.##.109.67':139
- '24.##.204.109':139
- '24.##.143.66':139
- '24.##.129.235':139
- '24.##.102.212':139
- '24.##.16.137':139
- '24.##.173.129':139
- '24.##.215.52':139
- '24.##.142.215':139
- '24.##.37.174':139
- '24.##.88.121':139
- '24.##.205.107':139
- '24.##.239.204':139
- '24.##.62.117':139
- '24.##.112.204':139
- '24.##.51.145':139
- '24.##.164.73':139
- '24.##.226.163':139
- '24.##.46.196':139
- '24.#8.19.48':139
- '24.##.184.144':139
- '24.#8.8.169':139
- '24.#8.9.19':139
- '24.##.143.129':139
- '24.##.184.134':139
- '24.#8.25.37':139
- '24.##.98.174':139
- '24.##.245.47':139
- '24.##.37.211':139
- '24.##.212.84':139
- '24.##.100.175':139
- '24.##.86.100':139
- '24.##.195.116':139
- '24.##.175.88':139
- '24.#8.75.78':139
- '24.##.30.225':139
- '24.##.100.115':139
- '24.##.15.208':139
- '24.##.113.250':139
- '24.##.110.76':139
- '24.##.31.110':139
- '24.#8.74.60':139
- '24.#8.76.74':139
- '24.##.88.200':139
- '24.##.37.172':139
- '24.##.220.33':139
- '24.#8.39.88':139
- '24.##.234.250':139
- '24.#8.7.235':139
- '24.#8.143.9':445
- '24.##.126.157':445
- '24.##.158.80':445
- '24.#8.2.20':445
- '24.##.69.228':445
- '24.#8.183.4':445
- '24.##.241.182':445
- '24.##.123.91':445
- '24.#8.5.124':445
- '24.##.229.112':445
- '24.#8.9.226':445
- '24.##.215.52':445
- '24.##.142.215':445
- '24.#8.246.9':445
- '24.##.109.67':445
- '24.##.204.109':445
- '24.##.138.246':445
- '24.##.67.138':445
- '24.##.131.110':445
- '24.#8.9.91':139
- '24.#8.0.12':139
- '24.##.71.122':139
- '24.##.96.130':139
- '24.#8.21.28':139
- '24.##.84.243':139
- '24.##.115.122':139
- '24.#8.30.26':139
- '24.##.221.165':139
- '24.#8.6.242':445
- '24.#8.159.6':139
- '24.##.39.196':445
- '24.##.241.131':445
- '24.##.14.206':139
- '24.#8.9.118':139
- '24.##.158.212':139
- '24.#8.159.6':445
- '24.##.14.206':445
- '24.#8.5.176':139
- '24.##.236.100':139
- '24.##.27.120':139
- '24.##.97.184':139
- '24.##.105.106':139
- '24.#8.3.183':445
- '24.##.113.170':445
- '24.##.251.34':445
- '24.#8.89.31':445
- '24.##.196.89':445
- '24.#8.7.10':139
- '24.#8.151.7':139
- '24.##.158.117':139
- '24.#8.10.22':139
- '24.##.124.151':139
- '24.#8.62.76':139
- '24.##.184.23':139
- '24.##.196.124':139
- '24.##.185.194':139
- '24.##.171.250':445
- '24.##.125.171':445
- '24.##.17.180':445
- '24.#8.210.9':445
- '24.##.170.229':445
- '24.##.22.202':445
- '24.##.139.160':445
- '24.##.145.107':445
- '24.##.39.172':445
- '24.##.69.238':445
- '24.#8.14.80':445
- '24.##.47.138':445
- '24.#8.20.11':445
- '24.##.106.184':445
- '24.##.63.212':445
- '24.##.11.156':445
- '24.##.179.143':445
- '24.##.172.46':445
- '24.##.94.212':445
- '24.##.153.246':139
- '24.##.172.46':139
- '24.##.94.212':139
- '24.##.47.138':139
- '24.##.63.212':139
- '24.##.11.156':139
- '24.##.170.229':139
- '24.##.125.171':139
- '24.##.179.143':139
- '24.#8.210.9':139
- '24.##.196.89':139
- '24.##.113.170':139
- '24.#8.89.31':139
- '24.#8.3.183':139
- '24.##.251.34':139
- '24.##.106.184':139
- '24.#8.14.80':139
- '24.##.171.250':139
- '24.#8.20.11':139
- '24.##.17.180':139
- '24.##.236.22':139
- '24.#8.0.152':139
- '24.#8.10.80':139
- '24.##.114.49':139
- '24.##.22.239':139
- '24.##.194.17':139
- '24.##.241.201':139
- '24.##.241.83':139
- '24.##.210.83':139
- '24.##.69.238':139
- '24.##.139.160':139
- '24.##.22.202':139
- '24.##.39.172':139
- '24.##.145.107':139
- '24.##.56.135':139
- '24.##.101.47':139
- '24.##.119.16':139
- '24.##.171.143':139
- '24.##.104.235':139
- '24.##.32.199':139
- '24.##.137.147':139
- '24.##.148.172':139
- '24.#8.88.98':139
- '24.##.236.50':139
- '24.##.127.206':139
- '24.#8.94.88':139
- '24.##.177.226':139
- '24.##.101.47':9988
- '24.##.210.83':9988
- '24.##.119.16':9988
- '24.##.56.135':9988
- '24.##.194.17':9988
- '24.#8.60.30':139
- '24.##.22.136':139
- '24.##.124.151':9988
- '24.##.196.124':9988
- '24.##.103.134':139
- '24.##.127.206':445
- '24.##.103.134':445
- '24.##.177.226':445
- '24.##.236.50':445
- '24.##.202.170':445
- '24.#8.63.77':445
- '24.##.67.229':445
- '24.#8.63.77':139
- '24.##.67.229':139
- '24.##.22.136':445
- '24.##.137.147':445
- '24.##.202.170':139
- '24.#8.60.30':445
- '24.##.148.172':445
- '24.#8.88.98':445
- '24.#8.94.88':445
- '24.##.104.235':445
- '24.##.32.199':445
- '24.##.145.107':9988
- '24.##.194.17':445
- '24.##.241.201':445
- '24.##.241.83':445
- '24.##.210.83':445
- '24.##.153.246':445
- '24.#8.7.10':445
- '24.#8.151.7':445
- '24.##.158.117':445
- '24.#8.10.22':445
- '24.##.56.135':445
- '24.##.101.47':445
- '24.##.119.16':445
- '24.##.171.143':445
- '24.#8.10.80':445
- '24.#8.0.152':445
- '24.##.22.239':445
- '24.##.114.49':445
- '24.##.236.22':445
- '24.##.124.151':445
- '24.##.113.170':9988
- '24.##.171.250':9988
- '24.#8.89.31':9988
- '24.##.196.89':9988
- '24.##.106.184':9988
- '24.##.179.143':9988
- '24.#8.210.9':9988
- '24.##.63.212':9988
- '24.##.11.156':9988
- '24.#8.62.76':445
- '24.##.184.23':445
- '24.##.196.124':445
- '24.##.185.194':445
- '24.##.97.184':445
- '24.##.27.120':445
- '24.#8.3.183':9988
- '24.##.105.106':445
- '24.##.236.100':445