Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#03.24.175':445
- '20#.#03.178.99':445
- '20#.#03.67.253':445
- '20#.#03.30.172':445
- '20#.#03.234.80':445
- '20#.#03.168.210':445
- '20#.#03.105.45':445
- '20#.#03.25.34':445
- '20#.#03.127.68':445
- '20#.#03.7.162':445
- '20#.#03.79.98':445
- '20#.#03.119.117':445
- '20#.#03.53.27':445
- '20#.#03.177.230':445
- '20#.#03.67.186':445
- '20#.#03.192.157':445
- '20#.#03.66.195':445
- '20#.#03.186.66':445
- '20#.#03.252.231':139
- '20#.#03.148.220':139
- '20#.#03.199.110':139
- '20#.#03.34.202':139
- '20#.#03.131.254':139
- '20#.#03.26.210':139
- '20#.#03.22.249':139
- '20#.#03.64.149':139
- '20#.#03.64.56':139
- '20#.#03.143.201':445
- '20#.#03.150.80':445
- '20#.#03.98.151':445
- '20#.#03.103.252':445
- '20#.#03.205.86':445
- '20#.#03.73.161':445
- '20#.#03.110.181':445
- '20#.#03.73.140':445
- '20#.#03.179.145':445
- '20#.#03.78.107':445
- '20#.#03.73.161':139
- '20#.#03.110.181':139
- '20#.#03.73.140':139
- '20#.#03.179.145':139
- '20#.#03.18.233':445
- '20#.#03.191.152':445
- '20#.#03.117.132':445
- '20#.#03.181.122':445
- '20#.#03.122.145':445
- '20#.#03.168.210':139
- '20#.#03.105.45':139
- '20#.#03.25.34':139
- '20#.#03.127.68':139
- '20#.#03.98.151':139
- '20#.#03.150.80':139
- '20#.#03.205.86':139
- '20#.#03.103.252':139
- '20#.#03.143.201':139
- '20#.#03.169.168':445
- '20#.#03.247.168':445
- '20#.#03.50.51':445
- '20#.#03.168.50':445
- '20#.#03.45.224':445
- '20#.#03.155.9':445
- '20#.#03.35.4':445
- '20#.#03.84.129':445
- '20#.#03.229.233':445
- '20#.#03.214.20':445
- '20#.#03.178.5':445
- '20#.#03.154.126':445
- '20#.#03.238.196':445
- '20#.#03.161.67':445
- '20#.#03.250.250':445
- '20#.#03.20.33':445
- '20#.#03.1.122':445
- '20#.#03.39.9':445
- '20#.#03.80.165':139
- '20#.#03.26.210':445
- '20#.#03.22.249':445
- '20#.#03.64.149':445
- '20#.#03.64.56':445
- '20#.#03.80.165':445
- '20#.#03.64.67':445
- '20#.#03.186.198':445
- '20#.#03.133.159':445
- '20#.#03.81.191':445
- '20#.#03.8.241':139
- '20#.#03.124.70':139
- '20#.#03.132.27':139
- '20#.#03.71.132':139
- '20#.#03.199.110':445
- '20#.#03.148.220':445
- '20#.#03.131.254':445
- '20#.#03.34.202':445
- '20#.#03.252.231':445
- '20#.#03.126.36':445
- '20#.#03.20.37':445
- '20#.#03.65.163':445
- '20#.#03.197.148':445
- '20#.#03.2.148':445
- '20#.#03.147.252':445
- '20#.#03.72.48':445
- '20#.#03.3.211':445
- '20#.#03.110.222':445
- '20#.#03.94.197':445
- '20#.#03.169.36':445
- '20#.#03.73.154':445
- '20#.#03.10.114':445
- '20#.#03.224.40':445
- '20#.#03.69.195':445
- '20#.#03.24.150':445
- '20#.#03.3.224':445
- '20#.#03.87.146':445
- '20#.#03.86.56':139
- '20#.#03.69.195':139
- '20#.#03.24.150':139
- '20#.#03.3.224':139
- '20#.#03.87.146':139
- '20#.#03.65.163':139
- '20#.#03.20.37':139
- '20#.#03.2.148':139
- '20#.#03.197.148':139
- '20#.#03.126.36':139
- '20#.#03.64.67':139
- '20#.#03.186.198':139
- '20#.#03.133.159':139
- '20#.#03.81.191':139
- '20#.#03.73.154':139
- '20#.#03.169.36':139
- '20#.#03.224.40':139
- '20#.#03.10.114':139
- '20#.#03.94.197':139
- '20#.#03.233.192':139
- '20#.#03.19.107':139
- '20#.#03.186.211':139
- '20#.#03.29.86':139
- '20#.#03.99.69':139
- '20#.#03.161.243':139
- '20#.#03.100.0':139
- '20#.#03.245.98':139
- '20#.#03.10.95':139
- '20#.#03.147.252':139
- '20#.#03.72.48':139
- '20#.#03.3.211':139
- '20#.#03.110.222':139
- '20#.#03.130.132':139
- '20#.#03.250.81':139
- '20#.#03.103.93':139
- '20#.#03.49.199':139
- '20#.#03.102.150':139
- '20#.#03.234.80':139
- '20#.#03.14.231':139
- '20#.#03.181.135':139
- '20#.#03.93.176':139
- '20#.#03.135.157':139
- '20#.#03.108.184':139
- '20#.#03.148.60':445
- '20#.#03.46.61':445
- '20#.#03.20.7':445
- '20#.#03.188.176':445
- '20#.#03.135.60':139
- '20#.#03.18.179':139
- '20#.#03.54.1':139
- '20#.#03.42.185':139
- '20#.#03.136.22':139
- '20#.#03.36.151':139
- '20#.#03.176.185':139
- '20#.#03.29.143':139
- '20#.#03.251.121':139
- '20#.#03.51.151':445
- '20#.#03.156.50':445
- '20#.#03.190.35':445
- '20#.#03.74.62':445
- '20#.#03.124.100':445
- '20#.#03.194.71':445
- '20#.#03.173.239':445
- '20#.#03.215.124':445
- '20#.#03.55.235':445
- '20#.#03.16.112':445
- '20#.#03.25.53':445
- '20#.#03.18.99':445
- '20#.#03.153.185':445
- '20#.#03.1.250':445
- '20#.#03.114.176':445
- '20#.#03.20.95':445
- '20#.#03.24.48':445
- '20#.#03.177.23':445
- '20#.#03.135.245':139
- '20#.#03.114.176':139
- '20#.#03.20.95':139
- '20#.#03.24.48':139
- '20#.#03.177.23':139
- '20#.#03.190.35':139
- '20#.#03.156.50':139
- '20#.#03.124.100':139
- '20#.#03.74.62':139
- '20#.#03.51.151':139
- '20#.#03.188.176':139
- '20#.#03.148.60':139
- '20#.#03.46.61':139
- '20#.#03.20.7':139
- '20#.#03.18.99':139
- '20#.#03.25.53':139
- '20#.#03.1.250':139
- '20#.#03.153.185':139
- '20#.#03.16.112':139
- '20#.#03.88.144':139
- '20#.#03.193.229':139
- '20#.#03.171.65':139
- '20#.#03.254.87':139
- '20#.#03.77.193':139
- '20#.#03.207.169':139
- '20#.#03.92.49':139
- '20#.#03.11.65':139
- '20#.#03.162.77':139
- '20#.#03.194.71':139
- '20#.#03.173.239':139
- '20#.#03.215.124':139
- '20#.#03.55.235':139
- '20#.#03.43.185':139
- '20#.#03.79.25':139
- '20#.#03.144.78':139
- '20#.#03.126.211':139
- '20#.#03.221.159':139
- '20#.#03.43.185':445
- '20#.#03.250.250':139
- '20#.#03.20.33':139
- '20#.#03.1.122':139
- '20#.#03.39.9':139
- '20#.#03.50.51':139
- '20#.#03.247.168':139
- '20#.#03.45.224':139
- '20#.#03.168.50':139
- '20#.#03.169.168':139
- '20#.#03.191.152':139
- '20#.#03.117.132':139
- '20#.#03.181.122':139
- '20#.#03.122.145':139
- '20#.#03.154.126':139
- '20#.#03.178.5':139
- '20#.#03.161.67':139
- '20#.#03.238.196':139
- '20#.#03.214.20':139
- '20#.#03.186.66':139
- '20#.#03.67.186':139
- '20#.#03.177.230':139
- '20#.#03.66.195':139
- '20#.#03.192.157':139
- '20#.#03.24.175':139
- '20#.#03.178.99':139
- '20#.#03.67.253':139
- '20#.#03.30.172':139
- '20#.#03.155.9':139
- '20#.#03.35.4':139
- '20#.#03.84.129':139
- '20#.#03.229.233':139
- '20#.#03.78.107':139
- '20#.#03.7.162':139
- '20#.#03.79.98':139
- '20#.#03.119.117':139
- '20#.#03.53.27':139
- '20#.#03.18.233':139
- '20#.#03.207.169':445
- '20#.#03.92.49':445
- '20#.#03.11.65':445
- '20#.#03.162.77':445
- '20#.#03.135.245':445
- '20#.#03.135.60':445
- '20#.#03.18.179':445
- '20#.#03.54.1':445
- '20#.#03.42.185':445
- '20#.#03.79.25':445
- '20#.#03.144.78':445
- '20#.#03.126.211':445
- '20#.#03.221.159':445
- '20#.#03.171.65':445
- '20#.#03.193.229':445
- '20#.#03.77.193':445
- '20#.#03.254.87':445
- '20#.#03.88.144':445
- '20#.#03.55.235':9988
- '20#.#03.156.50':9988
- '20#.#03.108.184':445
- '20#.#03.162.77':9988
- '20#.#03.207.169':9988
- '20#.#03.20.7':9988
- '20#.#03.135.60':9988
- '20#.#03.77.193':9988
- '20#.#03.124.100':9988
- '20#.#03.251.121':445
- '20#.#03.36.151':445
- '20#.#03.136.22':445
- '20#.#03.29.143':445
- '20#.#03.176.185':445
- '20#.#03.14.231':445
- '20#.#03.181.135':445
- '20#.#03.93.176':445
- '20#.#03.135.157':445