Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '58.##9.54.159':445
- '58.##9.104.39':445
- '58.##9.227.237':445
- '58.##9.18.72':445
- '58.##9.79.64':445
- '58.#19.20.4':445
- '58.##9.170.45':445
- '58.##9.94.44':445
- '58.##9.141.159':445
- '58.##9.66.117':445
- '58.##9.76.37':445
- '58.##9.10.203':445
- '58.##9.193.111':445
- '58.##9.143.43':445
- '58.##9.72.51':445
- '58.#19.61.4':445
- '58.##9.86.244':445
- '58.##9.214.86':445
- '58.##9.54.215':445
- '58.##9.187.195':445
- '58.##9.53.176':445
- '58.##9.200.205':445
- '58.##9.150.226':139
- '58.##9.90.140':139
- '58.##9.2.189':139
- '58.##9.18.244':139
- '58.##9.240.242':139
- '58.##9.187.219':139
- '58.##9.27.214':139
- '58.##9.184.195':139
- '58.##9.4.142':139
- '58.##9.170.181':139
- '58.##9.58.26':139
- '58.##9.163.224':139
- '58.##9.101.18':139
- '58.##9.45.54':139
- '58.##9.171.154':445
- '58.##9.137.137':445
- '58.##9.101.18':445
- '58.##9.188.105':445
- '58.##9.163.224':445
- '58.##9.188.105':139
- '58.##9.45.54':445
- '58.##9.94.44':139
- '58.#19.20.4':139
- '58.##9.66.117':139
- '58.##9.104.39':139
- '58.##9.141.159':139
- '58.##9.137.137':139
- '58.##9.86.222':445
- '58.##9.171.154':139
- '58.##9.170.45':139
- '58.##9.200.205':139
- '58.##9.54.159':139
- '58.##9.54.215':139
- '58.##9.86.244':139
- '58.##9.53.176':139
- '58.##9.193.111':139
- '58.##9.187.195':139
- '58.##9.79.64':139
- '58.##9.227.237':139
- '58.##9.18.72':139
- '58.##9.214.86':139
- '58.##9.76.37':139
- '58.##9.167.150':445
- '58.##9.250.208':445
- '58.##9.178.73':445
- '58.##9.208.195':445
- '58.##9.29.81':445
- '58.##9.157.20':445
- '58.#19.28.9':445
- '58.##9.237.27':445
- '58.##9.8.216':445
- '58.##9.255.226':445
- '58.##9.25.154':445
- '58.##9.43.79':445
- '58.##9.121.96':445
- '58.##9.76.247':445
- '58.##9.186.67':445
- '58.##9.122.3':445
- '58.##9.92.128':445
- '58.##9.183.15':445
- '58.##9.61.61':445
- '58.##9.114.208':445
- '58.##9.54.40':445
- '58.##9.175.224':445
- '58.##9.252.26':139
- '58.##9.79.89':445
- '58.##9.32.212':445
- '58.##9.69.20':445
- '58.##9.185.174':445
- '58.##9.100.234':445
- '58.##9.126.46':445
- '58.##9.85.53':445
- '58.##9.97.249':445
- '58.##9.2.109':445
- '58.##9.124.254':445
- '58.##9.82.199':445
- '58.##9.252.26':445
- '58.##9.22.211':445
- '58.##9.27.214':445
- '58.##9.184.195':445
- '58.##9.187.219':445
- '58.##9.165.81':445
- '58.##9.231.164':445
- '58.##9.68.213':445
- '58.##9.46.111':445
- '58.##9.72.145':445
- '58.##9.173.61':445
- '58.##9.145.224':445
- '58.##9.116.145':445
- '58.##9.109.210':445
- '58.##9.237.214':445
- '58.##9.48.237':445
- '58.##9.155.157':139
- '58.##9.106.208':139
- '58.##9.161.19':139
- '58.##9.129.117':445
- '58.##9.174.92':139
- '58.##9.201.228':445
- '58.##9.7.216':445
- '58.##9.0.158':445
- '58.##9.31.27':445
- '58.##9.153.148':445
- '58.##9.76.13':445
- '58.##9.214.132':445
- '58.##9.80.214':445
- '58.##9.39.66':445
- '58.##9.205.60':445
- '58.##9.108.14':445
- '58.##9.97.249':139
- '58.##9.126.46':139
- '58.##9.124.254':139
- '58.##9.32.212':139
- '58.##9.2.109':139
- '58.##9.76.13':139
- '58.##9.31.27':139
- '58.##9.153.148':139
- '58.##9.85.53':139
- '58.##9.173.61':139
- '58.##9.79.89':139
- '58.##9.68.213':139
- '58.##9.165.81':139
- '58.##9.72.145':139
- '58.##9.22.211':139
- '58.##9.46.111':139
- '58.##9.100.234':139
- '58.##9.69.20':139
- '58.##9.185.174':139
- '58.##9.231.164':139
- '58.##9.82.199':139
- '58.##9.7.216':139
- '58.##9.18.244':445
- '58.##9.240.242':445
- '58.##9.58.26':445
- '58.##9.116.145':139
- '58.##9.129.117':139
- '58.##9.4.142':445
- '58.##9.170.181':445
- '58.##9.90.140':445
- '58.##9.2.189':445
- '58.##9.150.226':445
- '58.##9.145.224':139
- '58.##9.39.66':139
- '58.##9.214.132':139
- '58.##9.108.14':139
- '58.##9.0.158':139
- '58.##9.205.60':139
- '58.##9.48.237':139
- '58.##9.109.210':139
- '58.##9.237.214':139
- '58.##9.80.214':139
- '58.##9.201.228':139
- '58.##9.10.203':139
- '58.##9.77.60':445
- '58.##9.17.84':445
- '58.##9.65.99':445
- '58.##9.60.82':445
- '58.##9.103.157':445
- '58.##9.115.130':445
- '58.##9.90.129':445
- '58.##9.75.223':445
- '58.##9.124.10':445
- '58.##9.11.242':445
- '58.#19.27.5':445
- '58.##9.52.195':139
- '58.##9.102.236':139
- '58.##9.189.142':139
- '58.##9.251.149':139
- '58.##9.247.34':139
- '58.#19.17.6':445
- '58.##9.236.41':445
- '58.##9.96.155':139
- '58.##9.99.104':139
- '58.##9.20.35':139
- '58.##9.19.37':445
- '58.##9.15.182':445
- '58.##9.107.73':445
- '58.##9.145.246':445
- '58.##9.122.137':445
- '58.##9.246.23':445
- '58.##9.112.98':445
- '58.##9.142.203':445
- '58.##9.95.219':445
- '58.##9.70.40':445
- '58.##9.110.114':445
- '58.##9.144.247':445
- '58.##9.121.61':445
- '58.##9.68.47':445
- '58.##9.35.95':445
- '58.##9.58.166':445
- '58.##9.5.253':445
- '58.##9.138.183':445
- '58.##9.247.137':445
- '58.##9.211.141':445
- '58.##9.226.19':445
- '58.##9.24.226':445
- '58.##9.58.166':139
- '58.##9.5.253':139
- '58.##9.19.37':139
- '58.##9.115.130':139
- '58.##9.90.129':139
- '58.##9.226.19':139
- '58.##9.24.226':139
- '58.##9.68.47':139
- '58.##9.35.95':139
- '58.##9.121.61':139
- '58.##9.75.223':139
- '58.##9.60.82':139
- '58.##9.103.157':139
- '58.#19.27.5':139
- '58.##9.236.41':139
- '58.#19.17.6':139
- '58.##9.124.10':139
- '58.##9.11.242':139
- '58.##9.17.84':139
- '58.##9.65.99':139
- '58.##9.77.60':139
- '58.##9.211.141':139
- '58.##9.178.173':139
- '58.##9.25.11':139
- '58.##9.44.214':139
- '58.##9.112.98':139
- '58.##9.142.203':139
- '58.##9.174.63':139
- '58.##9.149.188':139
- '58.##9.145.218':139
- '58.##9.198.146':139
- '58.##9.29.43':139
- '58.##9.95.219':139
- '58.##9.122.137':139
- '58.##9.246.23':139
- '58.##9.144.247':139
- '58.##9.138.183':139
- '58.##9.247.137':139
- '58.##9.70.40':139
- '58.##9.110.114':139
- '58.##9.107.73':139
- '58.##9.145.246':139
- '58.##9.15.182':139
- '58.##9.44.214':445
- '58.##9.30.44':445
- '58.##9.121.150':445
- '58.#19.7.48':445
- '58.##9.121.150':139
- '58.##9.7.253':139
- '58.##9.122.3':139
- '58.##9.92.128':139
- '58.##9.167.150':139
- '58.##9.7.253':445
- '58.##9.86.222':139
- '58.##9.30.44':139
- '58.##9.252.170':445
- '58.#19.62.5':445
- '58.##9.242.232':445
- '58.##9.33.229':445
- '58.##9.213.10':445
- '58.##9.255.79':445
- '58.#19.7.48':139
- '58.##9.41.16':445
- '58.##9.144.216':445
- '58.##9.80.71':445
- '58.##9.186.67':139
- '58.##9.25.154':139
- '58.##9.8.216':139
- '58.##9.255.226':139
- '58.##9.250.208':139
- '58.##9.178.73':139
- '58.#19.61.4':139
- '58.##9.143.43':139
- '58.##9.72.51':139
- '58.#19.28.9':139
- '58.##9.237.27':139
- '58.##9.208.195':139
- '58.##9.175.224':139
- '58.##9.114.208':139
- '58.##9.54.40':139
- '58.##9.121.96':139
- '58.##9.76.247':139
- '58.##9.29.81':139
- '58.##9.157.20':139
- '58.##9.43.79':139
- '58.##9.183.15':139
- '58.##9.61.61':139
- '58.##9.96.155':445
- '58.##9.236.41':9988
- '58.##9.20.35':445
- '58.##9.102.236':445
- '58.##9.99.104':445
- '58.##9.90.129':9988
- '58.##9.107.73':9988
- '58.##9.121.61':9988
- '58.##9.247.137':9988
- '58.#19.27.5':9988
- '58.##9.52.195':445
- '58.##9.29.43':445
- '58.##9.145.218':445
- '58.##9.198.146':445
- '58.##9.178.173':445
- '58.##9.25.11':445
- '58.##9.247.34':445
- '58.##9.189.142':445
- '58.##9.251.149':445
- '58.##9.174.63':445
- '58.##9.149.188':445
- '58.##9.103.157':9988
- '58.##9.242.232':139
- '58.##9.252.170':139
- '58.##9.213.10':139
- '58.##9.17.84':9988
- '58.##9.33.229':139
- '58.##9.41.16':139
- '58.##9.255.79':139
- '58.##9.80.71':139
- '58.#19.62.5':139
- '58.##9.144.216':139
- '58.##9.211.141':9988
- '58.##9.60.82':9988
- '58.##9.75.223':9988
- '58.##9.35.95':9988
- '58.##9.68.47':9988
- '58.##9.144.247':9988
- '58.##9.112.98':9988
- '58.##9.77.60':9988
- '58.##9.115.130':9988
- '58.##9.5.253':9988
- '58.##9.19.37':9988