Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '13#.#8.234.163':445
- '13#.#8.125.226':445
- '13#.#8.161.152':445
- '13#.#8.86.45':445
- '13#.#8.152.201':445
- '13#.#8.245.125':445
- '13#.#8.42.48':445
- '13#.#8.55.223':445
- '13#.#8.169.137':445
- '13#.#8.13.177':445
- '13#.#8.234.235':445
- '13#.#8.239.30':445
- '13#.#8.185.106':445
- '13#.#8.117.251':445
- '13#.#8.64.41':445
- '13#.#8.66.249':445
- '13#.#8.89.219':445
- '13#.68.13.8':445
- '13#.#8.11.12':445
- '13#.#8.137.15':445
- '13#.#8.24.196':445
- '13#.#8.29.128':445
- '13#.#8.109.233':139
- '13#.#8.122.221':139
- '13#.#8.233.201':139
- '13#.#8.15.56':445
- '13#.#8.248.254':445
- '13#.#8.66.130':139
- '13#.#8.197.184':139
- '13#.#8.4.103':139
- '13#.#8.38.60':139
- '13#.#8.13.110':139
- '13#.#8.44.25':139
- '13#.#8.119.248':445
- '13#.#8.141.237':445
- '13#.#8.183.111':445
- '13#.#8.206.84':445
- '13#.#8.76.248':445
- '13#.#8.229.229':139
- '13#.#8.229.229':445
- '13#.#8.135.122':445
- '13#.#8.248.254':139
- '13#.#8.135.122':139
- '13#.#8.15.56':139
- '13#.#8.161.131':445
- '13#.#8.245.125':139
- '13#.#8.13.177':139
- '13#.#8.125.226':139
- '13#.#8.161.152':139
- '13#.#8.234.163':139
- '13#.#8.234.235':139
- '13#.#8.206.84':139
- '13#.#8.76.248':139
- '13#.#8.55.223':139
- '13#.#8.169.137':139
- '13#.#8.42.48':139
- '13#.#8.89.219':139
- '13#.#8.24.196':139
- '13#.#8.185.106':139
- '13#.#8.117.251':139
- '13#.#8.239.30':139
- '13#.#8.29.128':139
- '13#.#8.86.45':139
- '13#.#8.152.201':139
- '13#.#8.11.12':139
- '13#.#8.137.15':139
- '13#.68.13.8':139
- '13#.#8.7.174':445
- '13#.#8.16.193':445
- '13#.#8.161.156':445
- '13#.#8.68.76':445
- '13#.#8.174.103':445
- '13#.#8.20.90':445
- '13#.#8.21.107':445
- '13#.#8.131.21':445
- '13#.#8.107.19':445
- '13#.#8.176.124':445
- '13#.#8.114.138':445
- '13#.#8.149.51':445
- '13#.68.2.46':445
- '13#.#8.141.237':139
- '13#.#8.183.111':139
- '13#.#8.119.248':139
- '13#.#8.170.229':445
- '13#.#8.21.106':445
- '13#.#8.238.170':445
- '13#.#8.245.71':445
- '13#.#8.96.11':445
- '13#.#8.229.69':445
- '13#.#8.235.12':445
- '13#.#8.42.121':445
- '13#.#8.215.165':445
- '13#.#8.245.72':445
- '13#.#8.92.244':445
- '13#.#8.205.61':445
- '13#.#8.254.40':445
- '13#.#8.229.1':445
- '13#.#8.68.239':445
- '13#.#8.212.205':445
- '13#.#8.106.76':445
- '13#.#8.176.237':445
- '13#.#8.183.176':445
- '13#.#8.45.199':445
- '13#.#8.197.184':445
- '13#.#8.4.103':445
- '13#.#8.108.44':445
- '13#.#8.105.13':445
- '13#.#8.146.241':445
- '13#.#8.31.50':445
- '13#.#8.48.17':445
- '13#.#8.139.74':445
- '13#.#8.45.246':445
- '13#.#8.100.42':445
- '13#.#8.246.64':445
- '13#.#8.19.147':445
- '13#.#8.127.163':445
- '13#.#8.218.154':445
- '13#.#8.65.236':139
- '13#.#8.63.106':139
- '13#.#8.60.217':139
- '13#.#8.76.170':445
- '13#.#8.23.29':139
- '13#.#8.168.227':445
- '13#.#8.30.90':445
- '13#.#8.54.199':445
- '13#.#8.23.142':445
- '13#.#8.182.227':445
- '13#.#8.254.172':445
- '13#.#8.105.157':445
- '13#.#8.163.142':445
- '13#.68.7.0':445
- '13#.#8.170.31':445
- '13#.#8.90.17':445
- '13#.#8.38.60':445
- '13#.#8.205.61':139
- '13#.#8.212.205':139
- '13#.#8.42.121':139
- '13#.#8.215.165':139
- '13#.#8.235.12':139
- '13#.#8.106.76':139
- '13#.#8.23.142':139
- '13#.#8.182.227':139
- '13#.#8.229.1':139
- '13#.#8.68.239':139
- '13#.#8.254.40':139
- '13#.#8.108.44':139
- '13#.#8.48.17':139
- '13#.#8.183.176':139
- '13#.#8.45.199':139
- '13#.#8.176.237':139
- '13#.#8.139.74':139
- '13#.#8.245.72':139
- '13#.#8.92.244':139
- '13#.#8.146.241':139
- '13#.#8.31.50':139
- '13#.#8.105.13':139
- '13#.#8.218.154':139
- '13#.#8.76.170':139
- '13#.#8.100.42':139
- '13#.#8.246.64':139
- '13#.#8.45.246':139
- '13#.#8.233.201':445
- '13#.#8.13.110':445
- '13#.#8.44.25':445
- '13#.#8.66.130':445
- '13#.#8.109.233':445
- '13#.#8.122.221':445
- '13#.#8.254.172':139
- '13#.#8.170.31':139
- '13#.#8.30.90':139
- '13#.#8.54.199':139
- '13#.#8.168.227':139
- '13#.#8.90.17':139
- '13#.#8.19.147':139
- '13#.#8.127.163':139
- '13#.#8.163.142':139
- '13#.68.7.0':139
- '13#.#8.105.157':139
- '13#.#8.194.74':445
- '13#.#8.192.215':445
- '13#.#8.166.109':445
- '13#.#8.190.168':445
- '13#.#8.155.92':445
- '13#.#8.195.64':445
- '13#.#8.190.209':445
- '13#.#8.149.191':445
- '13#.#8.31.209':445
- '13#.#8.162.186':445
- '13#.#8.132.205':445
- '13#.#8.8.173':139
- '13#.#8.41.24':139
- '13#.#8.174.234':139
- '13#.#8.170.150':139
- '13#.#8.20.173':139
- '13#.#8.160.228':139
- '13#.#8.109.23':445
- '13#.#8.38.78':445
- '13#.#8.130.202':445
- '13#.#8.78.29':445
- '13#.#8.250.130':445
- '13#.#8.37.100':445
- '13#.#8.23.218':445
- '13#.#8.242.205':445
- '13#.#8.214.207':445
- '13#.#8.2.215':445
- '13#.#8.79.72':445
- '13#.#8.78.133':445
- '13#.#8.49.76':445
- '13#.#8.205.203':445
- '13#.#8.18.197':445
- '13#.#8.190.11':445
- '13#.#8.175.32':445
- '13#.#8.189.149':445
- '13#.#8.28.96':445
- '13#.#8.32.42':445
- '13#.#8.122.97':445
- '13#.#8.198.189':445
- '13#.#8.171.227':445
- '13#.#8.143.148':445
- '13#.#8.53.254':445
- '13#.#8.50.50':445
- '13#.#8.92.162':445
- '13#.#8.218.248':139
- '13#.#8.190.209':139
- '13#.#8.149.191':139
- '13#.#8.31.209':139
- '13#.#8.162.186':139
- '13#.#8.132.205':139
- '13#.#8.32.42':139
- '13#.#8.189.149':139
- '13#.#8.198.189':139
- '13#.#8.175.32':139
- '13#.#8.122.97':139
- '13#.#8.28.96':139
- '13#.#8.130.202':139
- '13#.#8.250.130':139
- '13#.#8.38.78':139
- '13#.#8.109.23':139
- '13#.#8.78.29':139
- '13#.#8.190.168':139
- '13#.#8.194.74':139
- '13#.#8.195.64':139
- '13#.#8.192.215':139
- '13#.#8.155.92':139
- '13#.#8.166.109':139
- '13#.#8.78.133':139
- '13#.#8.49.76':139
- '13#.#8.205.203':139
- '13#.#8.18.197':139
- '13#.#8.190.11':139
- '13#.68.9.15':139
- '13#.#8.115.36':139
- '13#.#8.143.114':139
- '13#.#8.226.137':139
- '13#.#8.0.240':139
- '13#.#8.77.222':139
- '13#.#8.171.227':139
- '13#.#8.143.148':139
- '13#.#8.53.254':139
- '13#.#8.50.50':139
- '13#.#8.92.162':139
- '13#.#8.214.207':139
- '13#.#8.23.218':139
- '13#.#8.79.72':139
- '13#.#8.37.100':139
- '13#.#8.2.215':139
- '13#.#8.242.205':139
- '13#.#8.14.78':139
- '13#.#8.194.243':139
- '13#.#8.176.253':445
- '13#.#8.134.29':445
- '13#.#8.77.134':445
- '13#.#8.118.248':139
- '13#.#8.118.248':445
- '13#.#8.154.211':445
- '13#.#8.194.243':445
- '13#.#8.154.211':139
- '13#.#8.14.78':445
- '13#.#8.94.126':445
- '13#.#8.14.81':445
- '13#.#8.92.171':445
- '13#.#8.81.81':445
- '13#.#8.120.161':445
- '13#.#8.242.212':445
- '13#.#8.91.141':445
- '13#.#8.29.69':445
- '13#.#8.86.76':445
- '13#.#8.68.30':445
- '13#.#8.76.13':445
- '13#.#8.176.124':139
- '13#.#8.114.138':139
- '13#.#8.20.90':139
- '13#.#8.7.174':139
- '13#.#8.16.193':139
- '13#.#8.107.19':139
- '13#.#8.64.41':139
- '13#.#8.66.249':139
- '13#.#8.161.131':139
- '13#.#8.21.107':139
- '13#.#8.131.21':139
- '13#.#8.96.11':139
- '13#.#8.229.69':139
- '13#.#8.170.229':139
- '13#.#8.149.51':139
- '13#.68.2.46':139
- '13#.#8.245.71':139
- '13#.#8.174.103':139
- '13#.#8.161.156':139
- '13#.#8.68.76':139
- '13#.#8.21.106':139
- '13#.#8.238.170':139
- '13#.#8.143.249':445
- '13#.#8.190.209':9988
- '13#.#8.149.191':9988
- '13#.#8.31.209':9988
- '13#.#8.41.24':445
- '13#.#8.160.228':445
- '13#.#8.162.186':9988
- '13#.#8.132.205':9988
- '13#.#8.78.29':9988
- '13#.#8.175.32':9988
- '13#.#8.28.96':9988
- '13#.#8.130.202':9988
- '13#.#8.226.137':445
- '13#.#8.115.36':445
- '13#.#8.77.222':445
- '13#.68.9.15':445
- '13#.#8.0.240':445
- '13#.#8.143.114':445
- '13#.#8.174.234':445
- '13#.#8.8.173':445
- '13#.#8.20.173':445
- '13#.#8.218.248':445
- '13#.#8.170.150':445
- '13#.#8.68.30':139
- '13#.#8.76.13':139
- '13#.#8.242.212':139
- '13#.#8.94.126':139
- '13#.#8.14.81':139
- '13#.#8.86.76':139
- '13#.#8.77.134':139
- '13#.#8.176.253':139
- '13#.#8.134.29':139
- '13#.#8.91.141':139
- '13#.#8.29.69':139
- '13#.#8.122.97':9988
- '13#.#8.194.74':9988
- '13#.#8.109.23':9988
- '13#.#8.195.64':9988
- '13#.#8.32.42':9988
- '13#.#8.192.215':9988
- '13#.#8.120.161':139
- '13#.#8.92.171':139
- '13#.#8.81.81':139
- '13#.#8.155.92':9988
- '13#.#8.143.249':139