Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '21#.#8.91.180':139
- '21#.#8.23.184':139
- '21#.#8.199.70':139
- '21#.#8.204.75':139
- '21#.#8.68.204':139
- '21#.#8.136.102':139
- '21#.#8.230.54':445
- '21#.#8.127.219':139
- '21#.#8.9.171':139
- '21#.#8.243.102':139
- '21#.#8.190.228':139
- '21#.#8.203.231':139
- '21#.#8.220.220':139
- '21#.#8.111.61':139
- '21#.#8.108.139':139
- '21#.28.76.7':139
- '21#.#8.75.102':139
- '21#.#8.1.161':139
- '21#.#8.111.126':139
- '21#.#8.141.17':139
- '21#.#8.11.196':445
- '21#.#8.50.88':445
- '21#.#8.56.101':445
- '21#.#8.58.169':445
- '21#.#8.59.134':445
- '21#.#8.38.140':445
- '21#.#8.239.220':445
- '21#.#8.75.51':445
- '21#.#8.134.93':445
- '21#.#8.179.109':445
- '21#.#8.129.87':445
- '21#.#8.113.85':445
- '21#.#8.159.253':445
- '21#.#8.247.212':445
- '21#.#8.238.83':445
- '21#.#8.203.230':445
- '21#.#8.76.190':445
- '21#.#8.183.83':445
- '21#.#8.67.103':445
- '21#.#8.207.17':445
- '21#.#8.247.212':139
- '21#.#8.238.83':139
- '21#.#8.230.54':139
- '21#.#8.18.147':445
- '21#.#8.181.128':445
- '21#.#8.67.103':139
- '21#.#8.207.17':139
- '21#.#8.113.85':139
- '21#.#8.159.253':139
- '21#.#8.129.87':139
- '21#.#8.39.142':445
- '21#.#8.103.153':139
- '21#.#8.178.48':445
- '21#.#8.113.107':445
- '21#.#8.6.219':445
- '21#.#8.103.153':445
- '21#.#8.22.103':445
- '21#.#8.181.128':139
- '21#.#8.22.103':139
- '21#.#8.18.147':139
- '21#.#8.37.214':139
- '21#.#8.140.145':139
- '21#.#8.239.220':139
- '21#.#8.75.51':139
- '21#.#8.38.140':139
- '21#.#8.10.221':139
- '21#.#8.118.80':139
- '21#.#8.124.92':139
- '21#.#8.46.44':139
- '21#.#8.193.29':139
- '21#.#8.58.169':139
- '21#.#8.59.134':139
- '21#.#8.76.190':139
- '21#.#8.183.83':139
- '21#.#8.203.230':139
- '21#.#8.134.93':139
- '21#.#8.179.109':139
- '21#.#8.50.88':139
- '21#.#8.56.101':139
- '21#.#8.11.196':139
- '21#.#8.37.214':445
- '21#.#8.226.76':139
- '21#.#8.41.226':139
- '21#.#8.100.99':139
- '21#.#8.51.155':139
- '21#.#8.64.241':139
- '21#.28.44.5':139
- '21#.28.6.42':139
- '21#.#8.23.53':139
- '21#.#8.123.177':139
- '21#.#8.191.17':139
- '21#.#8.179.177':139
- '21#.#8.71.244':139
- '21#.#8.177.77':139
- '21#.#8.19.231':139
- '21#.#8.225.84':139
- '21#.#8.143.254':139
- '21#.#8.166.223':139
- '21#.28.0.7':139
- '21#.#8.207.245':139
- '21#.#8.22.207':139
- '21#.#8.34.101':139
- '21#.#8.95.46':139
- '21#.#8.101.78':139
- '21#.#8.111.99':139
- '21#.#8.78.111':139
- '21#.#8.128.227':139
- '21#.#8.37.130':139
- '21#.#8.52.162':139
- '21#.#8.108.187':139
- '21#.#8.197.215':139
- '21#.#8.50.136':139
- '21#.#8.10.121':139
- '21#.#8.141.144':139
- '21#.#8.5.245':139
- '21#.#8.82.130':139
- '21#.#8.196.187':139
- '21#.#8.67.176':139
- '21#.#8.187.76':139
- '21#.#8.100.209':139
- '21#.#8.87.62':139
- '21#.#8.1.161':445
- '21#.28.76.7':445
- '21#.#8.141.17':445
- '21#.#8.203.231':445
- '21#.#8.111.126':445
- '21#.#8.199.70':445
- '21#.#8.91.180':445
- '21#.#8.68.204':445
- '21#.#8.75.102':445
- '21#.#8.204.75':445
- '21#.#8.124.92':445
- '21#.#8.10.221':445
- '21#.#8.193.29':445
- '21#.#8.140.145':445
- '21#.#8.46.44':445
- '21#.#8.190.228':445
- '21#.#8.220.220':445
- '21#.#8.108.139':445
- '21#.#8.118.80':445
- '21#.#8.111.61':445
- '21#.#8.153.238':139
- '21#.#8.225.202':139
- '21#.#8.253.206':445
- '21#.#8.139.168':445
- '21#.#8.173.132':445
- '21#.#8.155.227':139
- '21#.#8.167.55':139
- '21#.#8.115.159':139
- '21#.#8.203.225':139
- '21#.#8.106.203':139
- '21#.#8.127.219':445
- '21#.#8.136.102':445
- '21#.#8.243.102':445
- '21#.#8.23.184':445
- '21#.#8.9.171':445
- '21#.#8.253.206':139
- '21#.#8.205.49':445
- '21#.#8.173.132':139
- '21#.#8.205.49':139
- '21#.#8.139.168':139
- '21#.#8.41.118':445
- '21#.#8.80.135':445
- '21#.#8.220.75':445
- '21#.#8.155.195':139
- '21#.#8.202.169':445
- '21#.#8.24.187':445
- '21#.#8.38.40':445
- '21#.#8.118.61':445
- '21#.#8.223.103':445
- '21#.#8.186.132':445
- '21#.#8.231.47':139
- '21#.#8.252.82':139
- '21#.#8.4.177':139
- '21#.#8.234.105':139
- '21#.#8.26.234':139
- '21#.#8.141.123':139
- '21#.#8.195.14':139
- '21#.#8.35.154':139
- '21#.#8.41.33':139
- '21#.#8.151.110':139
- '21#.#8.25.116':445
- '21#.#8.46.101':445
- '21#.#8.61.186':445
- '21#.#8.50.31':445
- '21#.#8.186.115':445
- '21#.#8.108.112':445
- '21#.#8.87.186':445
- '21#.#8.100.191':445
- '21#.#8.82.183':445
- '21#.#8.74.192':445
- '21#.#8.109.0':445
- '21#.#8.41.240':445
- '21#.#8.123.20':445
- '21#.#8.42.118':445
- '21#.#8.253.141':445
- '21#.#8.255.232':445
- '21#.#8.32.104':445
- '21#.#8.20.226':445
- '21#.#8.81.32':445
- '21#.#8.150.28':445
- '21#.#8.123.20':139
- '21#.#8.41.240':139
- '21#.#8.20.226':139
- '21#.#8.253.141':139
- '21#.#8.150.28':139
- '21#.#8.32.104':139
- '21#.#8.50.31':139
- '21#.#8.81.32':139
- '21#.#8.255.232':139
- '21#.#8.109.0':139
- '21#.#8.80.135':139
- '21#.#8.186.132':139
- '21#.#8.220.75':139
- '21#.#8.223.103':139
- '21#.#8.41.118':139
- '21#.#8.38.40':139
- '21#.#8.42.118':139
- '21#.#8.118.61':139
- '21#.#8.202.169':139
- '21#.#8.24.187':139
- '21#.#8.28.158':139
- '21#.#8.90.21':139
- '21#.#8.255.59':139
- '21#.#8.35.46':139
- '21#.#8.172.130':139
- '21#.#8.44.10':139
- '21#.#8.245.93':139
- '21#.#8.145.174':139
- '21#.#8.235.200':139
- '21#.#8.31.236':139
- '21#.#8.46.101':139
- '21#.#8.82.183':139
- '21#.#8.25.116':139
- '21#.#8.186.115':139
- '21#.#8.61.186':139
- '21#.#8.87.186':139
- '21#.#8.184.218':139
- '21#.#8.108.112':139
- '21#.#8.74.192':139
- '21#.#8.100.191':139
- '21#.#8.184.218':445
- '21#.#8.21.176':139
- '21#.#8.193.219':139
- '21#.#8.227.82':139
- '21#.#8.92.15':139
- '21#.#8.60.56':139
- '21#.#8.39.142':139
- '21#.#8.95.155':445
- '21#.#8.178.48':139
- '21#.#8.113.107':139
- '21#.#8.6.219':139
- '21#.#8.105.234':139
- '21#.#8.171.105':139
- '21#.#8.32.97':139
- '21#.28.6.33':139
- '21#.#8.114.170':139
- '21#.#8.23.191':139
- '21#.#8.51.48':139
- '21#.#8.186.89':139
- '21#.#8.247.11':139
- '21#.#8.156.247':139
- '21#.#8.23.191':445
- '21#.#8.51.48':445
- '21#.#8.186.89':445
- '21#.#8.247.11':445
- '21#.#8.156.247':445
- '21#.#8.21.176':445
- '21#.#8.193.219':445
- '21#.#8.227.82':445
- '21#.#8.92.15':445
- '21#.#8.60.56':445
- '21#.#8.67.58':445
- '21#.#8.94.179':445
- '21#.#8.38.218':445
- '21#.#8.193.191':445
- '21#.#8.102.140':445
- '21#.#8.105.234':445
- '21#.#8.171.105':445
- '21#.#8.32.97':445
- '21#.28.6.33':445
- '21#.#8.114.170':445
- '21#.#8.231.47':445
- '21#.#8.252.82':445
- '21#.#8.4.177':445
- '21#.#8.234.105':445
- '21#.#8.26.234':445
- '21#.#8.141.123':445
- '21#.#8.195.14':445
- '21#.#8.35.154':445
- '21#.#8.41.33':445
- '21#.#8.151.110':445
- '21#.#8.28.158':445
- '21#.#8.90.21':445
- '21#.#8.255.59':445
- '21#.#8.35.46':445
- '21#.#8.172.130':445
- '21#.#8.44.10':445
- '21#.#8.245.93':445
- '21#.#8.145.174':445
- '21#.#8.235.200':445
- '21#.#8.31.236':445
- '21#.#8.245.93':9988
- '21#.#8.95.155':139
- '21#.#8.255.59':9988
- '21#.#8.184.218':9988
- '21#.#8.172.130':9988
- '21#.#8.67.58':139
- '21#.#8.94.179':139
- '21#.#8.38.218':139
- '21#.#8.193.191':139
- '21#.#8.102.140':139
- '21#.#8.109.0':9988
- '21#.#8.81.32':9988
- '21#.#8.186.132':9988
- '21#.#8.155.195':445
- '21#.#8.202.169':9988
- '21#.#8.100.191':9988
- '21#.#8.87.186':9988
- '21#.#8.82.183':9988
- '21#.#8.32.104':9988
- '21#.#8.61.186':9988