Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '84.##5.154.235':139
- '84.##5.11.236':139
- '84.##5.235.22':139
- '84.##5.6.212':139
- '84.##5.237.135':139
- '84.##5.120.53':139
- '84.##5.91.140':139
- '84.##5.39.105':139
- '84.##5.99.77':139
- '84.##5.3.134':139
- '84.##5.22.162':139
- '84.##5.186.89':139
- '84.##5.70.162':139
- '84.##5.86.60':139
- '84.##5.243.82':445
- '84.##5.126.251':445
- '84.##5.198.169':139
- '84.##5.12.52':139
- '84.##5.81.34':139
- '84.#05.4.58':139
- '84.##5.161.167':139
- '84.##5.55.250':139
- '84.##5.6.212':445
- '84.##5.237.135':445
- '84.##5.22.162':445
- '84.##5.198.169':445
- '84.##5.12.52':445
- '84.##5.99.77':445
- '84.##5.3.134':445
- '84.##5.11.236':445
- '84.##5.235.22':445
- '84.##5.154.235':445
- '84.##5.81.34':445
- '84.##5.241.223':139
- '84.##5.89.241':139
- '84.##5.224.82':139
- '84.##5.61.29':139
- '84.##5.116.182':139
- '84.#05.4.58':445
- '84.##5.161.167':445
- '84.##5.70.162':445
- '84.##5.86.60':445
- '84.##5.186.89':445
- '84.##5.96.104':139
- '84.##5.149.35':139
- '84.##5.15.219':139
- '84.##5.252.235':139
- '84.##5.189.148':139
- '84.##5.94.69':445
- '84.##5.36.186':445
- '84.##5.126.251':139
- '84.##5.88.179':139
- '84.##5.243.82':139
- '84.##5.204.27':139
- '84.##5.250.13':139
- '84.##5.157.195':139
- '84.##5.180.227':139
- '84.##5.190.4':139
- '84.##5.11.103':139
- '84.##5.214.71':139
- '84.##5.192.232':139
- '84.##5.250.196':139
- '84.##5.174.35':139
- '84.##5.67.72':139
- '84.##5.42.59':445
- '84.##5.204.27':445
- '84.##5.252.235':445
- '84.##5.192.232':445
- '84.##5.250.196':445
- '84.##5.214.71':445
- '84.##5.149.35':445
- '84.##5.88.179':445
- '84.##5.96.104':445
- '84.##5.189.148':445
- '84.##5.15.219':445
- '84.##5.67.72':445
- '84.##5.39.34':445
- '84.##5.190.4':445
- '84.##5.244.254':445
- '84.##5.44.217':445
- '84.##5.255.90':445
- '84.##5.157.195':445
- '84.##5.174.35':445
- '84.##5.250.13':445
- '84.##5.11.103':445
- '84.##5.180.227':445
- '84.##5.146.70':445
- '84.##5.165.101':445
- '84.##5.100.143':445
- '84.##5.12.145':445
- '84.##5.143.105':445
- '84.##5.65.83':139
- '84.##5.255.200':139
- '84.##5.113.65':139
- '84.##5.197.75':445
- '84.##5.246.197':445
- '84.#05.2.89':445
- '84.##5.169.68':445
- '84.##5.190.105':445
- '84.##5.1.163':445
- '84.##5.97.156':445
- '84.##5.165.83':445
- '84.##5.228.213':445
- '84.##5.215.228':445
- '84.##5.214.240':445
- '84.##5.126.105':445
- '84.##5.146.216':445
- '84.##5.12.63':139
- '84.##5.57.95':139
- '84.##5.241.252':139
- '84.##5.201.23':139
- '84.##5.217.77':139
- '84.##5.149.150':139
- '84.##5.130.39':139
- '84.##5.237.197':139
- '84.##5.24.75':139
- '84.##5.20.55':139
- '84.##5.117.175':139
- '84.##5.179.206':139
- '84.##5.254.87':139
- '84.##5.152.15':139
- '84.##5.222.194':139
- '84.##5.113.189':139
- '84.##5.169.242':139
- '84.#05.7.6':139
- '84.##5.212.65':139
- '84.##5.48.61':139
- '84.##5.24.177':139
- '84.##5.39.132':139
- '84.##5.194.229':139
- '84.##5.205.194':139
- '84.##5.131.170':139
- '84.##5.142.107':139
- '84.##5.196.33':139
- '84.##5.1.163':139
- '84.##5.169.68':139
- '84.##5.165.83':139
- '84.##5.104.206':139
- '84.##5.97.156':139
- '84.##5.174.232':139
- '84.##5.55.250':445
- '84.##5.61.29':445
- '84.##5.91.140':445
- '84.##5.39.105':445
- '84.##5.120.53':445
- '84.##5.89.241':445
- '84.##5.61.18':139
- '84.##5.241.223':445
- '84.##5.116.182':445
- '84.##5.224.82':445
- '84.##5.190.105':139
- '84.##5.174.232':445
- '84.##5.142.107':445
- '84.##5.61.18':445
- '84.##5.197.75':139
- '84.##5.246.197':139
- '84.##5.205.194':445
- '84.##5.104.206':445
- '84.##5.194.229':445
- '84.##5.196.33':445
- '84.##5.131.170':445
- '84.##5.165.101':139
- '84.##5.228.213':139
- '84.##5.215.228':139
- '84.##5.214.240':139
- '84.##5.126.105':139
- '84.##5.146.216':139
- '84.##5.100.143':139
- '84.##5.146.70':139
- '84.##5.143.105':139
- '84.#05.2.89':139
- '84.##5.12.145':139
- '84.##5.221.205':445
- '84.##5.241.168':445
- '84.##5.205.162':445
- '84.##5.237.84':445
- '84.#05.87.5':445
- '84.##5.211.176':445
- '84.##5.33.203':445
- '84.##5.136.213':445
- '84.##5.54.48':445
- '84.##5.139.212':445
- '84.##5.84.202':445
- '84.##5.185.194':139
- '84.##5.221.183':139
- '84.##5.244.16':139
- '84.##5.220.32':139
- '84.##5.16.24':139
- '84.##5.220.33':445
- '84.##5.202.170':445
- '84.##5.24.185':139
- '84.##5.19.150':139
- '84.##5.42.232':139
- '84.##5.166.29':445
- '84.##5.114.24':445
- '84.##5.237.237':445
- '84.##5.109.201':445
- '84.##5.96.16':445
- '84.##5.158.199':445
- '84.##5.174.10':445
- '84.##5.220.243':445
- '84.##5.171.30':445
- '84.##5.41.238':445
- '84.##5.141.243':445
- '84.##5.6.125':445
- '84.##5.56.20':445
- '84.##5.15.80':445
- '84.##5.132.250':445
- '84.##5.11.44':445
- '84.##5.47.21':445
- '84.##5.91.31':445
- '84.#05.63.2':445
- '84.##5.247.62':445
- '84.##5.208.229':445
- '84.##5.208.83':445
- '84.##5.11.44':139
- '84.##5.47.21':139
- '84.##5.166.29':139
- '84.##5.211.176':139
- '84.##5.33.203':139
- '84.##5.208.229':139
- '84.##5.208.83':139
- '84.##5.15.80':139
- '84.##5.132.250':139
- '84.##5.56.20':139
- '84.##5.136.213':139
- '84.##5.237.84':139
- '84.#05.87.5':139
- '84.##5.84.202':139
- '84.##5.202.170':139
- '84.##5.220.33':139
- '84.##5.54.48':139
- '84.##5.139.212':139
- '84.##5.241.168':139
- '84.##5.205.162':139
- '84.##5.221.205':139
- '84.##5.247.62':139
- '84.##5.43.176':139
- '84.##5.103.8':139
- '84.##5.206.112':139
- '84.##5.174.10':139
- '84.##5.220.243':139
- '84.##5.109.218':139
- '84.##5.90.158':139
- '84.##5.218.188':139
- '84.##5.120.60':139
- '84.##5.75.170':139
- '84.##5.171.30':139
- '84.##5.96.16':139
- '84.##5.158.199':139
- '84.##5.6.125':139
- '84.##5.91.31':139
- '84.#05.63.2':139
- '84.##5.41.238':139
- '84.##5.141.243':139
- '84.##5.237.237':139
- '84.##5.109.201':139
- '84.##5.114.24':139
- '84.##5.25.114':445
- '84.##5.21.82':445
- '84.##5.185.109':445
- '84.##5.126.252':445
- '84.##5.68.52':445
- '84.##5.210.206':445
- '84.##5.140.186':445
- '84.##5.252.20':445
- '84.##5.247.134':445
- '84.##5.47.60':445
- '84.##5.144.233':139
- '84.##5.47.132':139
- '84.##5.215.243':139
- '84.##5.141.215':139
- '84.##5.221.112':139
- '84.##5.133.107':139
- '84.##5.19.14':139
- '84.##5.182.66':139
- '84.##5.14.69':139
- '84.##5.36.35':139
- '84.##5.69.84':139
- '84.##5.56.87':445
- '84.##5.94.69':139
- '84.##5.36.186':139
- '84.##5.144.233':445
- '84.##5.19.14':445
- '84.##5.182.66':445
- '84.##5.244.254':139
- '84.##5.39.34':139
- '84.##5.255.90':139
- '84.##5.42.59':139
- '84.##5.44.217':139
- '84.##5.14.69':445
- '84.##5.221.112':445
- '84.##5.133.107':445
- '84.##5.65.187':445
- '84.##5.1.108':445
- '84.##5.0.134':445
- '84.##5.36.35':445
- '84.##5.69.84':445
- '84.##5.215.243':445
- '84.##5.141.215':445
- '84.##5.47.132':445
- '84.##5.42.232':445
- '84.##5.24.185':445
- '84.##5.19.150':445
- '84.##5.185.194':445
- '84.##5.221.183':445
- '84.##5.241.168':9988
- '84.##5.54.48':9988
- '84.##5.221.205':9988
- '84.##5.220.33':9988
- '84.##5.205.162':9988
- '84.##5.244.16':445
- '84.##5.120.60':445
- '84.##5.75.170':445
- '84.##5.103.8':445
- '84.##5.206.112':445
- '84.##5.43.176':445
- '84.##5.220.32':445
- '84.##5.16.24':445
- '84.##5.90.158':445
- '84.##5.218.188':445
- '84.##5.109.218':445
- '84.##5.166.29':9988
- '84.##5.252.20':139
- '84.##5.210.206':139
- '84.##5.47.60':139
- '84.##5.21.82':139
- '84.##5.247.134':139
- '84.##5.0.134':139
- '84.##5.65.187':139
- '84.##5.1.108':139
- '84.##5.140.186':139
- '84.##5.56.87':139
- '84.##5.25.114':139
- '84.##5.6.125':9988
- '84.##5.109.201':9988
- '84.#05.63.2':9988
- '84.##5.15.80':9988
- '84.##5.208.229':9988
- '84.##5.68.52':139
- '84.##5.185.109':139
- '84.##5.126.252':139
- '84.##5.237.237':9988
- '84.##5.171.30':9988