Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '80.##.208.150':139
- '80.#8.168.0':139
- '80.#8.184.8':139
- '80.##.40.204':139
- '80.#8.87.91':139
- '80.#8.216.6':139
- '80.##.145.104':139
- '80.##.235.58':445
- '80.##.130.49':445
- '80.##.154.40':445
- '80.##.105.215':139
- '80.##.237.105':139
- '80.##.249.49':139
- '80.##.110.21':139
- '80.##.37.172':139
- '80.##.248.190':139
- '80.##.84.116':139
- '80.#8.8.16':139
- '80.##.197.97':139
- '80.##.215.10':139
- '80.##.252.171':139
- '80.#8.5.203':139
- '80.##.245.243':139
- '80.#8.5.144':139
- '80.##.241.46':139
- '80.##.153.205':139
- '80.##.37.172':445
- '80.##.248.190':445
- '80.##.215.10':445
- '80.#8.8.16':445
- '80.##.197.97':445
- '80.##.110.21':445
- '80.#8.5.144':445
- '80.#8.5.203':445
- '80.##.245.243':445
- '80.##.40.204':445
- '80.##.241.46':445
- '80.##.153.205':445
- '80.##.252.171':445
- '80.#8.96.20':445
- '80.##.193.146':445
- '80.##.252.57':445
- '80.##.207.198':445
- '80.#8.46.47':445
- '80.##.201.166':445
- '80.##.164.131':445
- '80.##.88.130':445
- '80.#8.44.93':445
- '80.##.84.116':445
- '80.##.201.72':445
- '80.##.111.34':445
- '80.#8.43.20':445
- '80.#8.44.93':139
- '80.#8.2.141':139
- '80.#8.13.7':139
- '80.#8.5.11':139
- '80.##.248.158':139
- '80.##.19.141':139
- '80.##.250.222':139
- '80.##.188.47':139
- '80.##.18.242':139
- '80.#8.2.88':139
- '80.##.112.53':445
- '80.##.85.148':139
- '80.##.74.106':139
- '80.##.110.124':139
- '80.##.156.172':445
- '80.##.172.187':445
- '80.##.243.242':445
- '80.##.56.143':445
- '80.##.250.189':445
- '80.##.136.223':445
- '80.#8.14.20':445
- '80.##.55.214':445
- '80.##.62.139':445
- '80.##.112.53':139
- '80.##.70.213':445
- '80.##.190.195':445
- '80.##.209.151':445
- '80.#8.46.47':139
- '80.##.201.166':139
- '80.#8.96.20':139
- '80.##.130.49':139
- '80.##.154.40':139
- '80.##.207.198':139
- '80.##.193.146':139
- '80.##.111.34':139
- '80.#8.43.20':139
- '80.##.88.130':139
- '80.##.252.57':139
- '80.##.164.131':139
- '80.##.201.72':139
- '80.#8.2.141':445
- '80.#8.13.7':445
- '80.#8.5.11':445
- '80.##.248.158':445
- '80.##.19.141':445
- '80.##.250.222':445
- '80.##.188.47':445
- '80.##.18.242':445
- '80.#8.2.88':445
- '80.##.235.58':139
- '80.##.85.148':445
- '80.##.74.106':445
- '80.##.110.124':445
- '80.#8.11.13':139
- '80.##.71.217':139
- '80.##.246.22':139
- '80.##.83.188':139
- '80.##.123.97':139
- '80.##.186.122':139
- '80.##.152.123':139
- '80.##.101.101':445
- '80.##.36.185':445
- '80.##.219.103':445
- '80.#8.86.80':445
- '80.##.197.86':445
- '80.##.37.197':445
- '80.##.130.123':139
- '80.##.183.200':139
- '80.##.150.183':139
- '80.##.187.106':139
- '80.##.137.187':139
- '80.##.203.137':139
- '80.##.178.150':139
- '80.##.194.227':139
- '80.##.107.185':139
- '80.##.59.200':139
- '80.##.215.178':139
- '80.##.236.215':139
- '80.##.201.158':139
- '80.##.183.200':445
- '80.##.150.183':445
- '80.##.178.150':445
- '80.##.137.187':445
- '80.##.203.137':445
- '80.##.130.123':445
- '80.##.215.178':445
- '80.##.107.185':445
- '80.##.59.200':445
- '80.##.83.188':445
- '80.##.236.215':445
- '80.##.201.158':445
- '80.##.194.227':445
- '80.#8.7.6':445
- '80.#8.28.7':445
- '80.#8.98.27':445
- '80.#8.3.141':445
- '80.##.213.189':445
- '80.#8.5.222':445
- '80.#8.30.12':445
- '80.#8.9.14':445
- '80.##.185.15':445
- '80.##.187.106':445
- '80.#8.167.1':445
- '80.##.65.164':445
- '80.##.190.104':445
- '80.##.185.15':139
- '80.##.62.159':139
- '80.##.161.157':139
- '80.##.157.126':139
- '80.##.160.87':139
- '80.#8.54.10':139
- '80.##.195.129':139
- '80.##.219.226':139
- '80.##.134.67':445
- '80.##.87.157':445
- '80.#8.75.61':445
- '80.##.255.205':139
- '80.##.213.169':139
- '80.#8.82.99':445
- '80.#8.168.0':445
- '80.#8.184.8':445
- '80.##.145.104':445
- '80.#8.87.91':445
- '80.#8.216.6':445
- '80.##.208.150':445
- '80.##.105.215':445
- '80.##.134.67':139
- '80.##.87.157':139
- '80.#8.75.61':139
- '80.##.237.105':445
- '80.##.249.49':445
- '80.#8.82.99':139
- '80.##.213.189':139
- '80.#8.5.222':139
- '80.#8.7.6':139
- '80.##.36.185':139
- '80.##.219.103':139
- '80.#8.3.141':139
- '80.#8.28.7':139
- '80.##.65.164':139
- '80.##.190.104':139
- '80.#8.9.14':139
- '80.#8.98.27':139
- '80.#8.30.12':139
- '80.#8.167.1':139
- '80.##.62.159':445
- '80.##.161.157':445
- '80.##.157.126':445
- '80.##.160.87':445
- '80.#8.54.10':445
- '80.##.195.129':445
- '80.##.219.226':445
- '80.##.197.86':139
- '80.##.37.197':139
- '80.##.101.101':139
- '80.##.255.205':445
- '80.##.213.169':445
- '80.#8.86.80':139
- '80.#8.65.71':445
- '80.#8.50.61':445
- '80.##.226.98':445
- '80.##.163.109':445
- '80.##.99.235':445
- '80.##.59.234':445
- '80.#8.29.16':445
- '80.##.229.236':445
- '80.##.56.107':445
- '80.#8.1.15':445
- '80.#8.207.1':445
- '80.##.227.121':445
- '80.##.80.136':445
- '80.#8.41.80':445
- '80.##.176.56':445
- '80.##.153.11':445
- '80.##.64.122':445
- '80.#8.96.48':445
- '80.##.82.245':445
- '80.##.83.232':445
- '80.#8.56.52':445
- '80.##.23.107':445
- '80.##.61.153':445
- '80.##.242.231':445
- '80.##.125.112':445
- '80.#8.1.125':445
- '80.#8.61.1':445
- '80.#8.76.44':445
- '80.##.21.254':445
- '80.##.150.21':445
- '80.##.201.56':445
- '80.#8.5.137':445
- '80.#8.5.55':445
- '80.#8.68.69':445
- '80.##.25.110':9988
- '80.##.82.245':9988
- '80.##.176.56':9988
- '80.#8.229.3':445
- '80.##.72.101':445
- '80.##.112.203':445
- '80.#8.42.34':445
- '80.##.213.42':445
- '80.##.251.212':445
- '80.##.180.206':445
- '80.##.96.180':445
- '80.#8.34.97':445
- '80.##.237.250':445
- '80.##.152.15':445
- '80.##.100.243':445
- '80.##.66.131':445
- '80.##.84.238':445
- '80.##.193.82':445
- '80.##.48.108':445
- '80.##.192.68':445
- '80.##.59.234':139
- '80.#8.29.16':139
- '80.#8.50.61':139
- '80.##.61.153':139
- '80.##.242.231':139
- '80.##.99.235':139
- '80.##.226.98':139
- '80.##.80.136':139
- '80.#8.41.80':139
- '80.##.56.107':139
- '80.##.163.109':139
- '80.##.229.236':139
- '80.##.227.121':139
- '80.##.153.11':139
- '80.#8.96.48':139
- '80.##.192.68':139
- '80.##.83.232':139
- '80.##.25.110':139
- '80.##.82.245':139
- '80.##.176.56':139
- '80.#8.1.125':139
- '80.#8.61.1':139
- '80.##.23.107':139
- '80.##.64.122':139
- '80.#8.56.52':139
- '80.##.125.112':139
- '80.#8.5.137':139
- '80.#8.5.55':139
- '80.#8.76.44':139
- '80.##.100.243':139
- '80.##.66.131':139
- '80.##.201.56':139
- '80.##.21.254':139
- '80.##.72.101':139
- '80.##.112.203':139
- '80.##.25.110':445
- '80.##.150.21':139
- '80.#8.68.69':139
- '80.#8.229.3':139
- '80.##.96.180':139
- '80.#8.34.97':139
- '80.#8.42.34':139
- '80.#8.1.15':139
- '80.#8.207.1':139
- '80.##.180.206':139
- '80.##.213.42':139
- '80.##.193.82':139
- '80.##.48.108':139
- '80.##.152.15':139
- '80.##.251.212':139
- '80.##.237.250':139
- '80.##.84.238':139
- '80.##.250.189':139
- '80.##.136.223':139
- '80.##.156.172':139
- '80.##.167.35':139
- '80.#8.65.71':139
- '80.##.56.143':139
- '80.##.172.187':139
- '80.##.190.195':139
- '80.##.209.151':139
- '80.##.55.214':139
- '80.##.243.242':139
- '80.#8.14.20':139
- '80.##.70.213':139
- '80.#8.4.141':139
- '80.##.217.48':139
- '80.##.129.182':139
- '80.##.234.182':139
- '80.##.63.137':139
- '80.##.224.47':139
- '80.##.24.233':139
- '80.#8.59.87':139
- '80.#8.7.65':139
- '80.##.80.156':139
- '80.##.165.153':139
- '80.##.213.180':139
- '80.#8.87.90':139
- '80.##.217.48':445
- '80.##.129.182':445
- '80.##.24.233':445
- '80.##.63.137':445
- '80.##.224.47':445
- '80.#8.4.141':445
- '80.##.165.153':445
- '80.#8.7.65':445
- '80.##.80.156':445
- '80.##.167.35':445
- '80.##.213.180':445
- '80.#8.87.90':445
- '80.#8.59.87':445
- '80.#8.94.20':445
- '80.##.138.22':445
- '80.##.176.193':445
- '80.##.62.139':139
- '80.#8.5.7':445
- '80.##.192.220':445
- '80.##.225.174':445
- '80.##.26.168':445
- '80.#8.68.70':445
- '80.##.234.182':445
- '80.##.254.226':445
- '80.#8.71.1':445
- '80.##.40.252':445
- '80.#8.68.70':139
- '80.##.20.225':139
- '80.##.150.243':139
- '80.##.230.142':139
- '80.#8.1.15':9988
- '80.##.180.206':9988
- '80.##.48.108':9988
- '80.##.154.213':139
- '80.##.199.82':139
- '80.##.20.120':139
- '80.##.33.172':139
- '80.##.69.186':139
- '80.#8.8.72':139
- '80.##.57.203':139
- '80.##.61.153':9988
- '80.##.242.231':9988
- '80.##.99.235':9988
- '80.#8.96.48':9988
- '80.#8.56.52':9988
- '80.##.125.112':9988
- '80.##.59.234':9988
- '80.##.227.121':9988
- '80.##.56.107':9988
- '80.#8.207.1':9988
- '80.#8.50.61':9988
- '80.##.226.98':9988
- '80.##.163.109':9988
- '80.#8.5.7':139
- '80.##.192.220':139
- '80.#8.94.20':139
- '80.#8.84.95':445
- '80.##.212.79':445
- '80.##.202.58':445
- '80.##.138.22':139
- '80.#8.71.1':139
- '80.##.40.252':139
- '80.##.26.168':139
- '80.##.176.193':139
- '80.##.225.174':139
- '80.##.254.226':139
- '80.##.20.225':445
- '80.##.150.243':445
- '80.##.230.142':445
- '80.#8.84.95':139
- '80.##.212.79':139
- '80.##.202.58':139
- '80.##.154.213':445
- '80.##.199.82':445
- '80.##.20.120':445
- '80.##.33.172':445
- '80.##.69.186':445
- '80.#8.8.72':445
- '80.##.57.203':445