Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.#8.71.8':139
- '59.#8.75.89':139
- '59.#8.7.76':139
- '59.##.132.173':139
- '59.##.90.254':139
- '59.##.135.157':139
- '59.##.50.205':139
- '59.##.157.216':139
- '59.##.238.75':139
- '59.##.216.237':139
- '59.#8.23.90':139
- '59.#8.37.5':445
- '59.#8.0.241':445
- '59.##.192.210':445
- '59.##.221.235':445
- '59.##.105.127':445
- '59.##.45.105':445
- '59.#8.14.89':445
- '59.#8.17.22':445
- '59.##.178.53':445
- '59.##.18.146':445
- '59.##.50.205':445
- '59.##.127.114':445
- '59.##.135.157':445
- '59.##.216.237':445
- '59.##.157.216':445
- '59.##.184.123':139
- '59.##.203.60':139
- '59.##.109.98':445
- '59.##.94.237':445
- '59.#8.82.49':445
- '59.##.238.75':445
- '59.##.109.98':139
- '59.#8.23.90':445
- '59.#8.82.49':139
- '59.##.127.114':139
- '59.##.94.237':139
- '59.#8.71.8':445
- '59.#8.75.89':445
- '59.#8.7.76':445
- '59.##.132.173':445
- '59.##.90.254':445
- '59.##.45.105':139
- '59.#8.14.89':139
- '59.#8.17.22':139
- '59.##.178.53':139
- '59.##.18.146':139
- '59.#8.21.83':445
- '59.##.64.107':445
- '59.##.184.68':445
- '59.##.247.15':445
- '59.##.18.130':445
- '59.#8.0.241':139
- '59.##.168.218':139
- '59.##.139.119':139
- '59.#8.98.38':139
- '59.##.196.17':139
- '59.##.77.229':139
- '59.##.192.210':139
- '59.#8.37.5':139
- '59.##.105.127':139
- '59.##.173.23':139
- '59.##.221.235':139
- '59.##.177.145':445
- '59.##.196.17':445
- '59.##.193.27':445
- '59.#8.77.23':445
- '59.#8.55.77':445
- '59.##.139.119':445
- '59.##.173.23':445
- '59.##.168.218':445
- '59.##.77.229':445
- '59.#8.98.38':445
- '59.##.132.246':445
- '59.##.255.17':445
- '59.##.56.235':445
- '59.##.93.223':445
- '59.##.138.118':445
- '59.#8.48.34':445
- '59.##.167.144':445
- '59.##.51.197':445
- '59.##.110.129':445
- '59.##.53.244':445
- '59.##.128.250':445
- '59.##.179.24':139
- '59.##.52.162':445
- '59.##.150.179':445
- '59.##.245.232':445
- '59.##.120.141':445
- '59.#8.80.50':445
- '59.##.170.92':445
- '59.##.136.166':445
- '59.##.129.189':445
- '59.##.99.166':445
- '59.##.216.165':445
- '59.##.220.166':445
- '59.##.25.221':445
- '59.##.115.203':445
- '59.##.101.172':445
- '59.##.100.241':445
- '59.##.129.28':445
- '59.##.55.221':445
- '59.##.93.143':445
- '59.##.149.145':445
- '59.##.54.162':445
- '59.##.251.78':445
- '59.##.251.245':139
- '59.##.183.102':139
- '59.##.245.34':139
- '59.##.10.167':139
- '59.#8.35.12':139
- '59.##.190.151':139
- '59.##.56.164':139
- '59.#8.18.47':139
- '59.#8.2.79':139
- '59.#8.40.56':139
- '59.##.189.20':139
- '59.#8.6.20':445
- '59.##.141.132':445
- '59.##.68.201':445
- '59.##.59.136':445
- '59.##.201.59':445
- '59.#8.32.89':139
- '59.##.192.188':139
- '59.##.89.214':139
- '59.##.54.147':445
- '59.#8.142.9':139
- '59.##.55.221':139
- '59.##.93.143':139
- '59.##.149.145':139
- '59.##.54.162':139
- '59.##.251.78':139
- '59.##.245.232':139
- '59.##.52.162':139
- '59.#8.80.50':139
- '59.##.220.166':139
- '59.##.120.141':139
- '59.##.115.203':139
- '59.##.10.231':139
- '59.##.11.182':139
- '59.##.204.146':139
- '59.#8.46.55':139
- '59.##.167.27':139
- '59.##.101.172':139
- '59.##.25.221':139
- '59.##.129.28':139
- '59.##.140.128':139
- '59.##.100.241':139
- '59.##.179.24':445
- '59.#8.46.55':445
- '59.##.203.60':445
- '59.##.54.147':139
- '59.##.184.123':445
- '59.##.11.182':445
- '59.##.140.128':445
- '59.##.10.231':445
- '59.##.167.27':445
- '59.##.204.146':445
- '59.##.141.132':139
- '59.##.129.189':139
- '59.##.170.92':139
- '59.##.216.165':139
- '59.##.150.179':139
- '59.##.99.166':139
- '59.##.68.201':139
- '59.#8.6.20':139
- '59.##.201.59':139
- '59.##.136.166':139
- '59.##.59.136':139
- '59.##.177.145':139
- '59.##.123.159':445
- '59.#8.7.61':445
- '59.#8.37.83':445
- '59.##.30.104':445
- '59.##.201.202':445
- '59.#8.3.66':445
- '59.#8.116.3':445
- '59.#8.66.68':445
- '59.#8.91.15':445
- '59.##.68.206':445
- '59.##.129.146':445
- '59.##.246.203':139
- '59.##.20.189':139
- '59.##.206.107':139
- '59.#8.21.91':139
- '59.#8.5.51':139
- '59.#8.0.80':139
- '59.##.79.222':445
- '59.##.162.234':139
- '59.##.209.164':139
- '59.##.49.117':139
- '59.##.204.178':445
- '59.##.42.205':445
- '59.##.237.194':445
- '59.##.219.252':445
- '59.#8.14.12':445
- '59.#8.57.82':445
- '59.#8.56.24':445
- '59.##.146.86':445
- '59.##.94.164':445
- '59.##.187.127':445
- '59.##.71.239':445
- '59.##.185.120':445
- '59.##.174.250':445
- '59.##.166.120':445
- '59.##.99.116':445
- '59.##.45.149':445
- '59.#8.93.68':445
- '59.##.173.132':445
- '59.##.144.121':445
- '59.##.169.174':445
- '59.##.112.135':445
- '59.##.166.120':139
- '59.##.185.120':139
- '59.##.45.149':139
- '59.#8.116.3':139
- '59.##.99.116':139
- '59.##.144.121':139
- '59.#8.93.68':139
- '59.##.112.135':139
- '59.##.174.250':139
- '59.##.169.174':139
- '59.#8.3.66':139
- '59.##.129.146':139
- '59.##.79.222':139
- '59.##.30.104':139
- '59.#8.37.83':139
- '59.##.201.202':139
- '59.##.68.206':139
- '59.#8.66.68':139
- '59.#8.91.15':139
- '59.##.123.159':139
- '59.#8.7.61':139
- '59.##.230.214':139
- '59.##.112.230':139
- '59.##.49.186':139
- '59.#8.56.24':139
- '59.##.27.104':139
- '59.##.179.138':139
- '59.#8.30.22':139
- '59.#8.64.0':139
- '59.##.79.188':139
- '59.#8.39.77':139
- '59.#8.57.82':139
- '59.#8.14.12':139
- '59.##.237.194':139
- '59.##.219.252':139
- '59.##.173.132':139
- '59.##.71.239':139
- '59.##.187.127':139
- '59.##.146.86':139
- '59.##.94.164':139
- '59.##.204.178':139
- '59.##.42.205':139
- '59.##.27.104':445
- '59.#8.185.5':445
- '59.##.206.98':445
- '59.#8.25.52':445
- '59.##.67.148':445
- '59.#8.82.92':445
- '59.#8.4.55':445
- '59.##.13.111':445
- '59.##.98.190':445
- '59.##.175.206':445
- '59.##.51.175':445
- '59.##.111.237':445
- '59.##.98.190':139
- '59.#8.4.55':139
- '59.##.51.175':139
- '59.##.206.98':139
- '59.##.175.206':139
- '59.#8.5.44':445
- '59.##.186.181':445
- '59.##.15.220':139
- '59.##.13.111':139
- '59.##.220.13':139
- '59.##.110.129':139
- '59.##.167.144':139
- '59.##.128.250':139
- '59.##.56.235':139
- '59.##.53.244':139
- '59.#8.55.77':139
- '59.##.193.27':139
- '59.#8.77.23':139
- '59.##.51.197':139
- '59.##.132.246':139
- '59.##.255.17':139
- '59.##.18.130':139
- '59.##.184.68':139
- '59.##.247.15':139
- '59.##.220.13':445
- '59.##.15.220':445
- '59.#8.48.34':139
- '59.##.93.223':139
- '59.##.138.118':139
- '59.#8.21.83':139
- '59.##.64.107':139
- '59.##.49.117':445
- '59.##.162.234':445
- '59.##.209.164':445
- '59.##.246.203':445
- '59.##.20.189':445
- '59.#8.91.15':9988
- '59.#8.116.3':9988
- '59.##.201.202':9988
- '59.#8.0.80':445
- '59.##.129.146':9988
- '59.##.206.107':445
- '59.##.79.188':445
- '59.#8.39.77':445
- '59.##.112.230':445
- '59.##.49.186':445
- '59.##.230.214':445
- '59.#8.21.91':445
- '59.#8.5.51':445
- '59.#8.30.22':445
- '59.#8.64.0':445
- '59.##.179.138':445
- '59.#8.5.44':139
- '59.##.186.181':139
- '59.#8.57.82':9988
- '59.##.187.127':9988
- '59.##.146.86':9988
- '59.#8.25.52':139
- '59.#8.185.5':139
- '59.#8.82.92':139
- '59.##.111.237':139
- '59.##.67.148':139
- '59.##.42.205':9988
- '59.#8.37.83':9988
- '59.##.174.250':9988
- '59.##.185.120':9988
- '59.##.99.116':9988
- '59.##.45.149':9988
- '59.##.71.239':9988
- '59.##.204.178':9988
- '59.##.173.132':9988
- '59.##.169.174':9988
- '59.##.112.135':9988