Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##.43.185':139
- '72.##.76.130':139
- '72.##.130.145':139
- '72.##.56.245':139
- '72.#9.38.48':139
- '72.#9.7.151':139
- '72.##.95.249':139
- '72.##.102.166':139
- '72.##.175.243':139
- '72.##.29.150':139
- '72.##.186.66':139
- '72.##.98.144':445
- '72.##.198.155':445
- '72.##.253.64':445
- '72.##.119.111':445
- '72.##.21.156':445
- '72.##.236.25':139
- '72.##.22.165':139
- '72.##.151.25':445
- '72.##.26.199':445
- '72.##.83.126':445
- '72.##.29.150':445
- '72.##.102.166':445
- '72.##.175.243':445
- '72.##.43.185':445
- '72.##.76.130':445
- '72.##.30.182':445
- '72.##.32.146':445
- '72.##.158.180':445
- '72.#9.7.151':445
- '72.##.95.249':445
- '72.##.130.145':445
- '72.#9.7.210':139
- '72.#9.243.4':139
- '72.##.32.146':139
- '72.##.158.180':139
- '72.##.30.182':139
- '72.##.56.245':445
- '72.#9.38.48':445
- '72.##.186.66':445
- '72.##.236.25':445
- '72.##.22.165':445
- '72.##.33.112':445
- '72.##.198.155':139
- '72.##.26.199':139
- '72.##.98.144':139
- '72.##.21.156':139
- '72.##.253.64':139
- '72.##.185.126':445
- '72.##.175.74':445
- '72.##.66.244':445
- '72.##.83.126':139
- '72.##.151.25':139
- '72.##.119.111':139
- '72.#9.6.98':139
- '72.##.156.180':139
- '72.#9.41.55':139
- '72.##.202.91':139
- '72.##.145.179':139
- '72.##.30.206':139
- '72.##.33.112':139
- '72.##.218.192':139
- '72.##.60.237':139
- '72.##.16.194':139
- '72.#9.41.55':445
- '72.#9.6.98':445
- '72.##.145.179':445
- '72.#9.1.76':445
- '72.##.202.91':445
- '72.##.218.192':445
- '72.##.30.206':445
- '72.##.16.194':445
- '72.##.156.180':445
- '72.##.60.237':445
- '72.##.238.41':445
- '72.#9.19.79':445
- '72.##.214.133':445
- '72.##.25.166':445
- '72.#9.113.9':445
- '72.##.191.228':445
- '72.##.79.174':445
- '72.##.70.208':445
- '72.##.173.220':445
- '72.##.88.133':445
- '72.##.49.200':445
- '72.#9.7.210':445
- '72.#9.7.96':445
- '72.##.247.186':445
- '72.##.16.109':445
- '72.##.238.44':445
- '72.##.71.109':445
- '72.##.87.243':445
- '72.##.31.124':445
- '72.##.221.38':445
- '72.##.38.127':445
- '72.##.59.162':445
- '72.##.125.149':445
- '72.##.164.232':445
- '72.##.72.222':445
- '72.##.185.202':445
- '72.#9.59.6':445
- '72.#9.89.60':445
- '72.##.167.94':445
- '72.#9.143.5':445
- '72.##.16.197':445
- '72.##.14.171':445
- '72.##.47.175':445
- '72.#9.55.49':139
- '72.##.109.49':139
- '72.#9.37.82':139
- '72.#9.9.129':139
- '72.##.55.112':139
- '72.#9.22.90':139
- '72.##.129.203':139
- '72.#9.66.87':139
- '72.#9.214.4':139
- '72.##.135.153':139
- '72.##.120.143':139
- '72.##.177.244':139
- '72.##.180.154':139
- '72.##.233.232':445
- '72.##.120.65':445
- '72.##.189.164':445
- '72.##.17.143':139
- '72.##.117.84':139
- '72.#9.8.57':139
- '72.#9.93.59':139
- '72.#9.25.70':139
- '72.##.46.175':445
- '72.##.72.222':139
- '72.##.14.171':139
- '72.##.164.232':139
- '72.#9.89.60':139
- '72.##.185.202':139
- '72.#9.143.5':139
- '72.##.125.149':139
- '72.##.167.94':139
- '72.##.47.175':139
- '72.##.16.197':139
- '72.#9.59.6':139
- '72.##.122.50':139
- '72.##.212.68':139
- '72.##.50.152':139
- '72.#9.243.4':445
- '72.##.200.180':139
- '72.##.161.193':139
- '72.##.46.175':139
- '72.##.155.159':139
- '72.##.187.183':139
- '72.##.128.16':139
- '72.##.50.152':445
- '72.##.122.50':445
- '72.##.200.180':445
- '72.##.189.164':139
- '72.##.233.232':139
- '72.##.155.159':445
- '72.##.161.193':445
- '72.##.128.16':445
- '72.##.212.68':445
- '72.##.187.183':445
- '72.##.120.65':139
- '72.#9.7.96':139
- '72.##.247.186':139
- '72.##.16.109':139
- '72.##.238.44':139
- '72.##.71.109':139
- '72.##.87.243':139
- '72.##.31.124':139
- '72.##.221.38':139
- '72.##.38.127':139
- '72.##.59.162':139
- '72.##.34.221':445
- '72.##.205.47':445
- '72.#9.4.189':445
- '72.##.188.237':445
- '72.##.121.95':445
- '72.##.119.54':445
- '72.#9.55.70':445
- '72.#9.250.3':445
- '72.##.232.204':445
- '72.##.42.134':445
- '72.##.41.248':445
- '72.##.173.112':139
- '72.##.52.171':139
- '72.##.111.249':139
- '72.##.134.253':139
- '72.##.249.106':139
- '72.##.238.132':445
- '72.##.224.95':445
- '72.##.85.130':139
- '72.##.199.97':139
- '72.#9.68.84':139
- '72.##.73.199':445
- '72.##.244.73':445
- '72.##.178.64':445
- '72.##.77.236':445
- '72.#9.8.219':445
- '72.##.166.15':445
- '72.##.209.165':445
- '72.##.116.203':445
- '72.##.17.112':445
- '72.##.219.181':445
- '72.##.212.72':445
- '72.##.130.247':445
- '72.##.138.224':445
- '72.##.14.237':445
- '72.##.150.86':445
- '72.##.237.98':445
- '72.#9.69.93':445
- '72.##.19.251':445
- '72.##.16.124':445
- '72.#9.0.5':445
- '72.##.184.120':445
- '72.#9.33.49':139
- '72.##.237.98':139
- '72.##.14.237':139
- '72.##.150.86':139
- '72.##.119.54':139
- '72.#9.55.70':139
- '72.##.184.120':139
- '72.##.16.124':139
- '72.#9.0.5':139
- '72.##.130.247':139
- '72.##.138.224':139
- '72.#9.250.3':139
- '72.##.188.237':139
- '72.##.224.95':139
- '72.##.41.248':139
- '72.#9.4.189':139
- '72.##.238.132':139
- '72.##.232.204':139
- '72.##.42.134':139
- '72.##.205.47':139
- '72.##.121.95':139
- '72.##.34.221':139
- '72.##.131.14':139
- '72.##.40.193':139
- '72.##.59.209':139
- '72.##.166.15':139
- '72.##.209.165':139
- '72.#9.125.3':139
- '72.##.107.163':139
- '72.##.162.211':139
- '72.##.163.83':139
- '72.##.49.203':139
- '72.##.116.203':139
- '72.##.77.236':139
- '72.#9.8.219':139
- '72.##.212.72':139
- '72.#9.69.93':139
- '72.##.19.251':139
- '72.##.17.112':139
- '72.##.219.181':139
- '72.##.244.73':139
- '72.##.178.64':139
- '72.##.73.199':139
- '72.##.59.209':445
- '72.##.210.147':445
- '72.##.65.225':445
- '72.##.56.201':445
- '72.##.174.37':445
- '72.##.244.162':445
- '72.#9.20.22':445
- '72.##.223.147':445
- '72.##.218.31':445
- '72.##.180.148':445
- '72.##.21.204':445
- '72.##.196.130':445
- '72.##.187.10':139
- '72.##.220.186':139
- '72.##.223.147':139
- '72.##.218.31':139
- '72.#9.20.22':139
- '72.##.216.138':139
- '72.##.167.186':445
- '72.##.218.119':139
- '72.##.42.254':139
- '72.#9.21.47':139
- '72.##.88.133':139
- '72.##.49.200':139
- '72.##.214.133':139
- '72.##.25.166':139
- '72.#9.19.79':139
- '72.##.238.41':139
- '72.#9.1.76':139
- '72.##.70.208':139
- '72.##.173.220':139
- '72.##.79.174':139
- '72.##.191.228':139
- '72.#9.21.47':445
- '72.##.218.119':445
- '72.##.42.254':445
- '72.##.187.10':445
- '72.##.220.186':445
- '72.##.175.74':139
- '72.#9.113.9':139
- '72.##.185.126':139
- '72.##.216.138':445
- '72.##.66.244':139
- '72.##.21.204':139
- '72.#9.68.84':445
- '72.##.85.130':445
- '72.##.199.97':445
- '72.##.173.112':445
- '72.##.52.171':445
- '72.##.188.237':9988
- '72.##.205.47':9988
- '72.#9.4.189':9988
- '72.##.121.95':9988
- '72.##.238.132':9988
- '72.##.111.249':445
- '72.##.49.203':445
- '72.##.162.211':445
- '72.##.163.83':445
- '72.##.131.14':445
- '72.##.40.193':445
- '72.##.134.253':445
- '72.##.249.106':445
- '72.#9.33.49':445
- '72.#9.125.3':445
- '72.##.107.163':445
- '72.##.196.130':139
- '72.##.174.37':139
- '72.##.167.186':139
- '72.#9.4.47':139
- '72.#9.4.47':445
- '72.##.65.225':139
- '72.##.180.148':139
- '72.##.210.147':139
- '72.##.244.162':139
- '72.##.56.201':139
- '72.##.73.199':9988
- '72.#9.55.70':9988
- '72.##.16.124':9988
- '72.##.119.54':9988
- '72.##.42.134':9988
- '72.#9.250.3':9988
- '72.##.212.72':9988
- '72.##.184.120':9988
- '72.##.138.224':9988
- '72.##.14.237':9988
- '72.##.150.86':9988