Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- '19#.#9.120.34':139
- '19#.#9.34.113':445
- '19#.#9.113.150':445
- '19#.#9.34.113':139
- '19#.#9.120.34':445
- '19#.#9.255.88':139
- '19#.#9.132.166':139
- '19#.#9.57.112':139
- '19#.#9.205.206':139
- '19#.#9.232.170':445
- '19#.#9.136.47':445
- '19#.#9.21.140':445
- '19#.#9.90.80':445
- '19#.#9.64.53':445
- '19#.#9.192.221':445
- '19#.#9.180.212':445
- '19#.#9.34.202':445
- '19#.#9.231.164':445
- '19#.#9.120.231':445
- '19#.#9.223.143':139
- '19#.#9.142.122':139
- '19#.#9.149.170':139
- '19#.#9.175.179':139
- '19#.#9.217.38':139
- '19#.#9.120.9':139
- '19#.#9.73.21':139
- '19#.#9.103.136':139
- '19#.#9.167.101':139
- '19#.#9.170.121':139
- '19#.#9.91.109':139
- '19#.#9.216.91':139
- '19#.#9.164.89':139
- '19#.#9.161.197':139
- '19#.#9.45.58':139
- '19#.#9.2.252':139
- '19#.#9.66.15':139
- '19#.69.19.5':139
- '19#.#9.0.154':139
- '19#.#9.67.39':445
- '19#.#9.138.222':445
- '19#.#9.180.185':445
- '19#.#9.105.1':445
- '19#.#9.123.13':445
- '19#.#9.227.111':445
- '19#.#9.106.171':445
- '19#.#9.203.119':445
- '19#.#9.18.16':445
- '19#.#9.148.36':445
- '19#.69.78.7':445
- '19#.#9.45.20':445
- '19#.#9.134.15':445
- '19#.#9.113.150':139
- '19#.#9.43.38':445
- '19#.#9.77.33':445
- '19#.#9.162.215':445
- '19#.#9.212.135':445
- '19#.#9.102.220':445
- '19#.69.5.40':445
- '19#.69.20.9':445
- '19#.#9.247.132':445
- '19#.#9.150.53':445
- '19#.#9.225.216':445
- '19#.#9.52.242':445
- '19#.#9.208.48':445
- '19#.#9.192.101':445
- '19#.#9.73.185':445
- '19#.#9.115.71':445
- '19#.#9.6.189':445
- '19#.#9.215.155':445
- '19#.#9.112.215':445
- '19#.#9.167.203':445
- '19#.#9.32.53':445
- '19#.#9.48.187':445
- '19#.#9.139.180':445
- '19#.#9.116.227':445
- '19#.69.6.45':445
- '19#.#9.181.224':445
- '19#.#9.104.84':445
- '19#.#9.204.110':445
- '19#.#9.145.106':445
- '19#.#9.236.120':445
- '19#.#9.59.205':445
- '19#.#9.120.48':445
- '19#.#9.55.63':445
- '19#.#9.27.89':445
- '19#.#9.77.105':445
- '19#.#9.73.21':445
- '19#.#9.175.179':445
- '19#.#9.223.143':445
- '19#.#9.170.121':445
- '19#.#9.149.170':445
- '19#.#9.142.122':445
- '19#.#9.167.101':445
- '19#.#9.120.9':445
- '19#.#9.217.38':445
- '19#.#9.103.136':445
- '19#.#9.77.84':445
- '19#.#9.248.57':445
- '19#.#9.61.214':445
- '19#.#9.206.93':445
- '19#.#9.76.183':445
- '19#.#9.35.130':139
- '19#.#9.196.45':139
- '19#.#9.25.59':445
- '19#.#9.85.196':445
- '19#.#9.101.249':445
- '19#.#9.134.79':445
- '19#.#9.23.134':445
- '19#.#9.98.50':445
- '19#.#9.45.118':445
- '19#.#9.178.23':445
- '19#.#9.219.130':445
- '19#.#9.176.218':445
- '19#.#9.9.152':445
- '19#.#9.130.244':445
- '19#.#9.66.15':445
- '19#.#9.23.134':139
- '19#.#9.178.23':139
- '19#.#9.45.118':139
- '19#.#9.134.79':139
- '19#.#9.9.152':139
- '19#.#9.176.218':139
- '19#.#9.101.249':139
- '19#.#9.130.244':139
- '19#.#9.219.130':139
- '19#.#9.98.50':139
- '19#.#9.104.84':139
- '19#.#9.204.110':139
- '19#.#9.145.106':139
- '19#.#9.236.120':139
- '19#.#9.59.205':139
- '19#.#9.120.48':139
- '19#.#9.55.63':139
- '19#.#9.27.89':139
- '19#.#9.77.105':139
- '19#.#9.161.197':445
- '19#.#9.91.109':445
- '19#.#9.132.166':445
- '19#.#9.164.89':445
- '19#.#9.216.91':445
- '19#.#9.0.154':445
- '19#.#9.2.252':445
- '19#.#9.45.58':445
- '19#.69.19.5':445
- '19#.#9.255.88':445
- '19#.#9.77.84':139
- '19#.#9.248.57':139
- '19#.#9.61.214':139
- '19#.#9.206.93':139
- '19#.#9.76.183':139
- '19#.#9.57.112':445
- '19#.#9.205.206':445
- '19#.#9.25.59':139
- '19#.#9.85.196':139
- '19#.#9.150.193':445
- '19#.#9.143.141':445
- '19#.#9.76.174':139
- '19#.#9.116.44':139
- '19#.#9.200.137':445
- '19#.69.7.90':445
- '19#.#9.26.236':445
- '19#.69.5.73':445
- '19#.#9.138.42':445
- '19#.#9.173.47':139
- '19#.#9.158.222':139
- '19#.#9.194.207':139
- '19#.#9.31.101':139
- '19#.#9.26.141':139
- '19#.#9.22.240':139
- '19#.#9.179.146':139
- '19#.#9.33.35':139
- '19#.#9.196.93':139
- '19#.#9.87.168':139
- '19#.#9.65.211':445
- '19#.#9.158.59':445
- '19#.#9.47.100':445
- '19#.#9.211.132':445
- '19#.#9.173.137':445
- '19#.#9.203.249':445
- '19#.#9.118.203':445
- '19#.#9.177.22':445
- '19#.#9.234.3':445
- '19#.#9.19.202':445
- '19#.#9.252.101':445
- '19#.#9.13.72':445
- '19#.#9.249.75':445
- '19#.#9.135.82':445
- '19#.#9.176.94':445
- '19#.#9.163.28':445
- '19#.#9.163.170':445
- '19#.#9.51.119':445
- '19#.#9.204.51':445
- '19#.#9.136.99':139
- '19#.#9.51.119':139
- '19#.#9.204.51':139
- '19#.#9.13.72':139
- '19#.#9.176.94':139
- '19#.#9.163.28':139
- '19#.#9.47.100':139
- '19#.#9.211.132':139
- '19#.#9.163.170':139
- '19#.#9.19.202':139
- '19#.#9.252.101':139
- '19#.#9.143.141':139
- '19#.69.7.90':139
- '19#.#9.138.42':139
- '19#.#9.150.193':139
- '19#.#9.200.137':139
- '19#.#9.249.75':139
- '19#.#9.135.82':139
- '19#.69.5.73':139
- '19#.#9.26.236':139
- '19#.#9.113.162':139
- '19#.#9.202.209':139
- '19#.#9.48.34':139
- '19#.69.2.40':139
- '19#.#9.44.171':139
- '19#.#9.114.48':139
- '19#.#9.120.121':139
- '19#.#9.165.235':139
- '19#.#9.189.32':139
- '19#.#9.110.175':139
- '19#.#9.173.137':139
- '19#.#9.177.22':139
- '19#.#9.65.211':139
- '19#.#9.158.59':139
- '19#.#9.234.3':139
- '19#.#9.203.118':139
- '19#.#9.2.236':139
- '19#.#9.203.249':139
- '19#.#9.118.203':139
- '19#.#9.48.187':139
- '19#.69.6.45':139
- '19#.#9.215.155':139
- '19#.#9.112.215':139
- '19#.#9.181.224':139
- '19#.#9.6.189':139
- '19#.#9.150.53':139
- '19#.#9.139.180':139
- '19#.#9.116.227':139
- '19#.#9.32.53':139
- '19#.#9.180.185':139
- '19#.#9.227.111':139
- '19#.#9.123.13':139
- '19#.#9.138.222':139
- '19#.#9.18.16':139
- '19#.#9.203.119':139
- '19#.#9.167.203':139
- '19#.#9.148.36':139
- '19#.#9.106.171':139
- '19#.#9.21.140':139
- '19#.#9.192.221':139
- '19#.#9.64.53':139
- '19#.#9.136.47':139
- '19#.#9.231.164':139
- '19#.#9.34.202':139
- '19#.#9.232.170':139
- '19#.#9.120.231':139
- '19#.#9.180.212':139
- '19#.#9.90.80':139
- '19#.#9.247.132':139
- '19#.#9.52.242':139
- '19#.#9.225.216':139
- '19#.69.20.9':139
- '19#.#9.73.185':139
- '19#.#9.192.101':139
- '19#.#9.67.39':139
- '19#.#9.115.71':139
- '19#.#9.208.48':139
- '19#.#9.105.1':139
- '19#.#9.158.222':445
- '19#.#9.31.101':445
- '19#.#9.22.240':445
- '19#.#9.26.141':445
- '19#.69.2.40':445
- '19#.#9.202.209':445
- '19#.#9.136.99':445
- '19#.#9.44.171':445
- '19#.#9.196.93':445
- '19#.#9.120.121':445
- '19#.#9.110.175':445
- '19#.#9.48.34':445
- '19#.#9.203.118':445
- '19#.#9.2.236':445
- '19#.#9.114.48':445
- '19#.#9.165.235':445
- '19#.#9.194.207':445
- '19#.#9.113.162':445
- '19#.#9.189.32':445
- '19#.#9.134.15':139
- '19#.#9.77.33':139
- '19#.#9.43.38':139
- '19#.#9.45.20':139
- '19#.#9.102.220':139
- '19#.#9.212.135':139
- '19#.69.78.7':139
- '19#.69.5.40':139
- '19#.#9.162.215':139
- '19#.#9.48.34':9988
- '19#.#9.33.35':445
- '19#.#9.173.47':445
- '19#.#9.87.168':445
- '19#.#9.179.146':445
- '19#.#9.76.174':445
- '19#.69.7.90':9988
- '19#.#9.252.101':9988
- '19#.#9.116.44':445
- '19#.#9.138.42':9988