Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '58.##.208.29':139
- '58.##.122.124':139
- '58.##.63.251':139
- '58.##.224.133':139
- '58.#8.59.2':139
- '58.##.181.190':139
- '58.#8.23.2':139
- '58.##.50.227':139
- '58.##.60.191':139
- '58.##.70.122':139
- '58.##.85.163':139
- '58.##.88.234':139
- '58.##.172.172':139
- '58.##.203.64':139
- '58.##.81.225':139
- '58.#8.44.50':139
- '58.##.251.28':139
- '58.##.61.251':139
- '58.##.33.113':139
- '58.#8.99.31':139
- '58.#8.17.6':139
- '58.##.162.222':139
- '58.#8.99.31':445
- '58.#8.17.6':445
- '58.##.172.172':445
- '58.##.203.64':445
- '58.##.88.234':445
- '58.##.85.163':445
- '58.##.224.133':445
- '58.##.61.251':445
- '58.##.33.113':445
- '58.##.251.28':445
- '58.#8.44.50':445
- '58.#8.9.112':139
- '58.#8.7.247':139
- '58.##.214.205':139
- '58.##.49.225':139
- '58.##.15.163':139
- '58.##.225.84':445
- '58.##.81.225':445
- '58.#8.85.31':445
- '58.##.26.123':139
- '58.##.205.163':445
- '58.##.195.111':139
- '58.##.190.56':139
- '58.##.112.111':139
- '58.##.233.250':139
- '58.#8.81.61':139
- '58.##.100.211':139
- '58.##.199.129':445
- '58.##.220.37':139
- '58.##.42.203':139
- '58.#8.33.53':139
- '58.##.129.101':139
- '58.##.157.181':139
- '58.#8.37.88':139
- '58.##.78.127':139
- '58.##.199.129':139
- '58.##.126.199':139
- '58.##.122.56':139
- '58.##.174.109':139
- '58.#8.68.24':139
- '58.##.247.39':139
- '58.##.192.246':139
- '58.##.126.199':445
- '58.##.42.203':445
- '58.#8.33.53':445
- '58.##.190.56':445
- '58.##.112.111':445
- '58.##.195.111':445
- '58.#8.85.31':139
- '58.##.225.84':139
- '58.##.205.163':139
- '58.##.220.37':445
- '58.##.100.211':445
- '58.#8.81.61':445
- '58.##.247.39':445
- '58.##.192.246':445
- '58.#8.37.88':445
- '58.##.78.127':445
- '58.##.157.181':445
- '58.##.129.101':445
- '58.##.233.250':445
- '58.##.174.109':445
- '58.#8.68.24':445
- '58.##.122.56':445
- '58.#8.59.2':445
- '58.##.91.139':139
- '58.##.30.214':139
- '58.##.202.88':139
- '58.##.247.175':445
- '58.##.30.253':139
- '58.##.146.91':139
- '58.##.81.108':139
- '58.##.48.143':139
- '58.#8.5.147':139
- '58.##.115.42':139
- '58.##.175.79':445
- '58.##.80.237':445
- '58.##.203.77':445
- '58.##.173.204':445
- '58.##.118.49':445
- '58.#8.185.0':445
- '58.##.164.55':445
- '58.##.79.164':445
- '58.##.55.153':445
- '58.##.236.202':445
- '58.##.153.237':445
- '58.##.254.220':139
- '58.##.199.211':139
- '58.##.106.166':139
- '58.#8.35.38':139
- '58.##.173.67':139
- '58.##.197.226':139
- '58.##.79.148':139
- '58.##.255.26':139
- '58.##.105.199':139
- '58.##.17.172':139
- '58.##.198.188':139
- '58.##.91.137':139
- '58.#8.62.44':139
- '58.#8.9.239':139
- '58.##.95.117':139
- '58.##.228.254':139
- '58.##.254.91':139
- '58.##.120.44':139
- '58.#8.23.22':139
- '58.##.224.216':139
- '58.#8.25.6':139
- '58.##.116.120':139
- '58.##.26.123':445
- '58.#8.14.88':139
- '58.#8.7.247':445
- '58.##.214.205':445
- '58.#8.9.112':445
- '58.##.13.149':139
- '58.##.28.189':139
- '58.#8.67.83':139
- '58.##.165.140':139
- '58.##.82.165':139
- '58.##.15.163':445
- '58.##.60.191':445
- '58.##.70.122':445
- '58.##.122.124':445
- '58.##.63.251':445
- '58.##.208.29':445
- '58.##.162.222':445
- '58.##.49.225':445
- '58.#8.23.2':445
- '58.##.50.227':445
- '58.##.181.190':445
- '58.##.149.239':139
- '58.##.165.140':445
- '58.##.82.165':445
- '58.#8.14.88':445
- '58.##.175.79':139
- '58.##.247.175':139
- '58.##.149.239':445
- '58.##.61.149':445
- '58.##.28.189':445
- '58.#8.67.83':445
- '58.##.13.149':445
- '58.##.79.164':139
- '58.##.173.204':139
- '58.##.80.237':139
- '58.#8.185.0':139
- '58.##.61.149':139
- '58.##.118.49':139
- '58.##.55.153':139
- '58.##.164.55':139
- '58.##.153.237':139
- '58.##.203.77':139
- '58.##.236.202':139
- '58.##.130.75':445
- '58.##.170.132':445
- '58.#8.162.2':445
- '58.#8.25.78':445
- '58.##.211.119':445
- '58.#8.78.41':445
- '58.##.174.194':445
- '58.##.162.114':445
- '58.##.165.87':445
- '58.#8.63.26':445
- '58.##.51.127':445
- '58.##.190.113':445
- '58.##.96.194':139
- '58.##.110.96':139
- '58.##.194.197':139
- '58.##.253.201':139
- '58.#8.198.6':139
- '58.#8.20.53':445
- '58.##.100.155':445
- '58.#8.31.33':139
- '58.##.136.202':139
- '58.##.65.252':139
- '58.##.42.223':445
- '58.#8.17.66':445
- '58.##.123.14':445
- '58.#8.92.22':445
- '58.##.212.182':445
- '58.##.122.212':445
- '58.##.43.240':445
- '58.##.184.43':445
- '58.##.107.108':445
- '58.##.23.179':445
- '58.##.121.32':445
- '58.##.183.70':445
- '58.##.86.146':445
- '58.##.182.201':445
- '58.##.24.220':445
- '58.#8.4.220':445
- '58.##.130.105':445
- '58.##.217.28':445
- '58.#8.71.97':445
- '58.#8.49.47':445
- '58.##.131.44':445
- '58.##.70.184':445
- '58.#8.4.220':139
- '58.##.130.105':139
- '58.##.42.223':139
- '58.##.174.194':139
- '58.##.162.114':139
- '58.##.131.44':139
- '58.##.70.184':139
- '58.##.182.201':139
- '58.##.24.220':139
- '58.##.86.146':139
- '58.##.165.87':139
- '58.##.211.119':139
- '58.#8.78.41':139
- '58.#8.20.53':139
- '58.##.190.113':139
- '58.##.100.155':139
- '58.#8.63.26':139
- '58.##.51.127':139
- '58.#8.162.2':139
- '58.#8.25.78':139
- '58.##.170.132':139
- '58.#8.49.47':139
- '58.##.122.193':139
- '58.##.145.55':139
- '58.##.97.184':139
- '58.##.43.240':139
- '58.##.184.43':139
- '58.##.109.224':139
- '58.#8.69.80':139
- '58.##.149.12':139
- '58.##.222.20':139
- '58.#8.19.7':139
- '58.##.107.108':139
- '58.##.212.182':139
- '58.##.122.212':139
- '58.##.183.70':139
- '58.##.217.28':139
- '58.#8.71.97':139
- '58.##.23.179':139
- '58.##.121.32':139
- '58.##.123.14':139
- '58.#8.92.22':139
- '58.#8.17.66':139
- '58.##.97.184':445
- '58.##.253.219':445
- '58.#8.93.2':445
- '58.##.133.103':445
- '58.#8.75.66':139
- '58.##.130.75':139
- '58.##.33.122':445
- '58.##.42.120':445
- '58.##.77.250':445
- '58.#8.79.96':445
- '58.#8.97.11':445
- '58.##.49.143':139
- '58.##.71.213':139
- '58.##.35.214':139
- '58.#8.1.38':139
- '58.##.80.153':139
- '58.#8.29.81':139
- '58.#8.78.69':139
- '58.#8.4.173':139
- '58.##.77.178':139
- '58.##.198.56':139
- '58.##.153.37':139
- '58.#8.1.180':445
- '58.##.198.56':445
- '58.##.153.37':445
- '58.##.35.214':445
- '58.#8.1.38':445
- '58.##.71.213':445
- '58.##.49.143':445
- '58.#8.75.66':445
- '58.#8.4.173':445
- '58.##.77.178':445
- '58.#8.78.69':445
- '58.#8.29.81':445
- '58.##.76.149':445
- '58.##.61.191':445
- '58.#8.35.57':445
- '58.##.107.122':445
- '58.##.93.112':445
- '58.##.141.112':445
- '58.##.80.153':445
- '58.##.162.145':445
- '58.##.159.188':445
- '58.##.32.130':445
- '58.#8.31.33':445
- '58.##.211.119':9988
- '58.##.65.252':445
- '58.##.110.96':445
- '58.##.136.202':445
- '58.#8.4.220':9988
- '58.##.24.220':9988
- '58.##.162.114':9988
- '58.#8.20.53':9988
- '58.#8.63.26':9988
- '58.##.96.194':445
- '58.#8.19.7':445
- '58.##.149.12':445
- '58.##.222.20':445
- '58.##.122.193':445
- '58.##.145.55':445
- '58.#8.198.6':445
- '58.##.194.197':445
- '58.##.253.201':445
- '58.##.109.224':445
- '58.#8.69.80':445
- '58.##.70.184':9988
- '58.#8.35.57':139
- '58.##.76.149':139
- '58.##.93.112':139
- '58.#8.1.180':139
- '58.##.107.122':139
- '58.##.162.145':139
- '58.##.141.112':139
- '58.##.32.130':139
- '58.##.61.191':139
- '58.##.159.188':139
- '58.##.42.120':139
- '58.##.133.103':139
- '58.##.253.219':139
- '58.##.122.212':9988
- '58.#8.49.47':9988
- '58.##.217.28':9988
- '58.##.77.250':139
- '58.##.33.122':139
- '58.#8.97.11':139
- '58.#8.93.2':139
- '58.#8.79.96':139