Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '13#.5.34.31':139
- '13#.#.138.33':139
- '13#.5.31.88':139
- '13#.#.23.134':139
- '13#.#.88.150':139
- '13#.5.24.36':139
- '13#.5.66.30':139
- '13#.#.197.68':139
- '13#.#.215.137':139
- '13#.#.68.216':139
- '13#.5.164.4':139
- '13#.#.162.71':139
- '13#.5.2.189':139
- '13#.#.43.121':139
- '13#.#.125.28':139
- '13#.#.83.121':139
- '13#.#.118.198':139
- '13#.#.125.90':139
- '13#.#.121.250':139
- '13#.5.226.2':139
- '13#.#.84.215':139
- '13#.5.164.4':445
- '13#.#.23.134':445
- '13#.#.125.90':445
- '13#.#.121.250':445
- '13#.#.118.198':445
- '13#.#.138.33':445
- '13#.#.215.137':445
- '13#.5.34.31':445
- '13#.#.88.150':445
- '13#.5.31.88':445
- '13#.#.84.215':445
- '13#.#.97.172':139
- '13#.#.125.28':445
- '13#.#.113.220':139
- '13#.#.45.135':139
- '13#.#.220.21':139
- '13#.5.2.189':445
- '13#.5.226.2':445
- '13#.#.162.71':445
- '13#.#.83.121':445
- '13#.#.43.121':445
- '13#.#.28.154':445
- '13#.#.77.132':139
- '13#.#.153.221':139
- '13#.#.94.159':139
- '13#.#.123.196':139
- '13#.5.18.10':139
- '13#.5.6.236':445
- '13#.#.118.177':445
- '13#.#.30.147':445
- '13#.#.28.154':139
- '13#.#.110.203':445
- '13#.5.3.246':139
- '13#.#.170.178':139
- '13#.#.238.170':139
- '13#.#.255.106':139
- '13#.#.213.51':139
- '13#.#.106.65':139
- '13#.#.154.129':139
- '13#.5.46.34':139
- '13#.#.36.212':139
- '13#.5.38.8':139
- '13#.#.172.159':139
- '13#.5.46.34':445
- '13#.5.3.246':445
- '13#.#.154.129':445
- '13#.#.172.159':445
- '13#.#.36.212':445
- '13#.#.77.132':445
- '13#.#.153.221':445
- '13#.#.94.159':445
- '13#.#.123.196':445
- '13#.5.18.10':445
- '13#.5.38.8':445
- '13#.#.240.10':445
- '13#.#.247.53':445
- '13#.5.72.38':445
- '13#.#.156.126':445
- '13#.#.146.230':445
- '13#.#.170.178':445
- '13#.#.238.170':445
- '13#.#.255.106':445
- '13#.#.213.51':445
- '13#.#.106.65':445
- '13#.#.127.202':445
- '13#.#.249.127':445
- '13#.5.31.90':445
- '13#.#.234.129':445
- '13#.#.169.49':445
- '13#.5.172.6':139
- '13#.#.149.167':139
- '13#.#.93.149':139
- '13#.#.230.180':445
- '13#.#.253.45':139
- '13#.5.5.65':445
- '13#.#.137.85':445
- '13#.#.65.130':445
- '13#.#.113.135':445
- '13#.#.162.150':445
- '13#.#.174.186':445
- '13#.#.239.148':445
- '13#.5.41.44':445
- '13#.#.148.152':445
- '13#.5.21.80':445
- '13#.#.122.28':445
- '13#.#.62.233':139
- '13#.5.7.59':139
- '13#.#.232.138':139
- '13#.#.152.249':139
- '13#.#.139.152':139
- '13#.5.6.148':139
- '13#.#.157.133':139
- '13#.5.131.0':139
- '13#.5.46.97':139
- '13#.5.9.67':139
- '13#.#.26.100':139
- '13#.#.195.233':139
- '13#.5.5.26':139
- '13#.#.15.164':139
- '13#.#.242.184':139
- '13#.#.226.193':139
- '13#.5.66.82':139
- '13#.#.175.212':139
- '13#.#.124.32':139
- '13#.#.41.142':139
- '13#.#.13.216':139
- '13#.#.92.116':445
- '13#.#.209.13':139
- '13#.#.116.99':139
- '13#.5.20.84':139
- '13#.5.50.36':139
- '13#.#.136.84':139
- '13#.#.113.135':139
- '13#.#.137.85':139
- '13#.#.174.186':139
- '13#.#.92.116':139
- '13#.#.162.150':139
- '13#.#.35.208':139
- '13#.5.66.30':445
- '13#.#.45.135':445
- '13#.5.24.36':445
- '13#.#.68.216':445
- '13#.#.197.68':445
- '13#.#.148.206':139
- '13#.#.208.148':139
- '13#.#.97.172':445
- '13#.#.220.21':445
- '13#.#.113.220':445
- '13#.#.208.148':445
- '13#.#.35.208':445
- '13#.#.148.206':445
- '13#.#.249.127':139
- '13#.#.230.180':139
- '13#.#.209.13':445
- '13#.#.116.99':445
- '13#.5.20.84':445
- '13#.5.50.36':445
- '13#.#.136.84':445
- '13#.#.127.202':139
- '13#.#.148.152':139
- '13#.#.239.148':139
- '13#.#.122.28':139
- '13#.#.65.130':139
- '13#.5.21.80':139
- '13#.#.169.49':139
- '13#.5.31.90':139
- '13#.#.234.129':139
- '13#.5.41.44':139
- '13#.5.5.65':139
- '13#.#.247.53':139
- '13#.#.163.197':445
- '13#.#.247.108':445
- '13#.#.234.160':445
- '13#.#.26.233':445
- '13#.#.241.139':445
- '13#.#.142.134':445
- '13#.5.24.75':445
- '13#.#.134.22':445
- '13#.5.60.91':445
- '13#.5.6.216':445
- '13#.5.12.43':445
- '13#.#.40.251':139
- '13#.#.92.135':139
- '13#.#.202.206':139
- '13#.#.173.219':139
- '13#.#.122.84':139
- '13#.#.213.163':445
- '13#.#.13.214':445
- '13#.#.153.110':139
- '13#.5.4.121':139
- '13#.5.47.4':139
- '13#.5.35.33':445
- '13#.#.135.35':445
- '13#.#.119.76':445
- '13#.5.69.89':445
- '13#.#.188.227':445
- '13#.#.72.191':445
- '13#.5.36.73':445
- '13#.#.191.143':445
- '13#.#.160.250':445
- '13#.5.76.23':445
- '13#.#.115.38':445
- '13#.#.118.57':445
- '13#.5.74.55':445
- '13#.#.248.21':445
- '13#.5.42.88':445
- '13#.#.35.232':445
- '13#.#.184.247':445
- '13#.5.218.1':445
- '13#.#.61.102':445
- '13#.5.53.54':445
- '13#.5.79.53':445
- '13#.#.97.175':139
- '13#.#.35.232':139
- '13#.#.248.21':139
- '13#.5.42.88':139
- '13#.#.142.134':139
- '13#.5.24.75':139
- '13#.5.79.53':139
- '13#.#.61.102':139
- '13#.5.53.54':139
- '13#.#.118.57':139
- '13#.5.74.55':139
- '13#.#.134.22':139
- '13#.#.26.233':139
- '13#.#.241.139':139
- '13#.5.12.43':139
- '13#.#.213.163':139
- '13#.#.13.214':139
- '13#.5.60.91':139
- '13#.5.6.216':139
- '13#.#.247.108':139
- '13#.#.234.160':139
- '13#.#.163.197':139
- '13#.#.214.133':139
- '13#.#.222.242':139
- '13#.#.220.35':139
- '13#.#.72.191':139
- '13#.5.36.73':139
- '13#.#.175.153':139
- '13#.#.134.153':139
- '13#.5.62.24':139
- '13#.#.34.141':139
- '13#.#.127.196':139
- '13#.#.191.143':139
- '13#.5.69.89':139
- '13#.#.188.227':139
- '13#.#.115.38':139
- '13#.#.184.247':139
- '13#.5.218.1':139
- '13#.#.160.250':139
- '13#.5.76.23':139
- '13#.#.135.35':139
- '13#.#.119.76':139
- '13#.5.35.33':139
- '13#.#.150.173':445
- '13#.#.140.202':445
- '13#.#.206.110':445
- '13#.5.63.19':445
- '13#.#.134.21':445
- '13#.#.66.186':445
- '13#.#.50.252':445
- '13#.#.116.28':445
- '13#.5.5.141':445
- '13#.#.129.39':445
- '13#.#.190.61':139
- '13#.#.182.23':139
- '13#.#.22.104':139
- '13#.5.47.8':139
- '13#.#.116.65':139
- '13#.#.54.114':139
- '13#.#.237.212':139
- '13#.#.59.238':139
- '13#.5.73.0':139
- '13#.#.223.203':139
- '13#.#.255.93':139
- '13#.#.30.147':139
- '13#.5.6.236':139
- '13#.#.110.203':139
- '13#.#.59.238':445
- '13#.#.190.61':445
- '13#.5.72.38':139
- '13#.#.240.10':139
- '13#.#.146.230':139
- '13#.#.118.177':139
- '13#.#.156.126':139
- '13#.#.237.212':445
- '13#.#.54.114':445
- '13#.5.47.8':445
- '13#.#.116.65':445
- '13#.#.158.166':445
- '13#.#.24.129':445
- '13#.#.255.93':445
- '13#.5.73.0':445
- '13#.#.223.203':445
- '13#.#.182.23':445
- '13#.#.22.104':445
- '13#.#.24.129':139
- '13#.5.4.121':445
- '13#.5.47.4':445
- '13#.#.92.135':445
- '13#.#.202.206':445
- '13#.#.40.251':445
- '13#.#.13.214':9988
- '13#.#.26.233':9988
- '13#.#.213.163':9988
- '13#.#.153.110':445
- '13#.5.12.43':9988
- '13#.#.122.84':445
- '13#.#.34.141':445
- '13#.#.127.196':445
- '13#.#.222.242':445
- '13#.#.220.35':445
- '13#.#.214.133':445
- '13#.#.97.175':445
- '13#.#.173.219':445
- '13#.#.134.153':445
- '13#.5.62.24':445
- '13#.#.175.153':445
- '13#.#.140.202':139
- '13#.5.5.141':139
- '13#.#.150.173':139
- '13#.#.134.21':139
- '13#.#.206.110':139
- '13#.#.50.252':139
- '13#.#.158.166':139
- '13#.#.66.186':139
- '13#.#.129.39':139
- '13#.#.116.28':139
- '13#.5.63.19':139
- '13#.#.184.247':9988
- '13#.5.218.1':9988
- '13#.5.24.75':9988
- '13#.#.163.197':9988
- '13#.#.142.134':9988
- '13#.#.135.35':9988
- '13#.#.214.133':9988
- '13#.#.188.227':9988
- '13#.#.115.38':9988
- '13#.5.69.89':9988