Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '13#.#08.214.72':445
- '13#.#08.74.45':445
- '13#.#08.240.218':445
- '13#.#08.78.91':445
- '13#.#08.60.68':445
- '13#.#08.233.168':445
- '13#.#08.179.233':445
- '13#.#08.88.246':445
- '13#.#08.168.89':445
- '13#.#08.89.172':139
- '13#.#08.72.39':139
- '13#.#08.69.236':139
- '13#.#08.34.168':139
- '13#.#08.191.71':139
- '13#.#08.170.14':139
- '13#.#08.195.169':139
- '13#.#08.83.191':139
- '13#.#08.14.84':139
- '13#.#08.108.180':445
- '13#.#08.202.245':445
- '13#.#08.142.67':445
- '13#.#08.78.217':445
- '13#.#08.242.101':445
- '13#.#08.219.76':445
- '13#.#08.129.108':445
- '13#.#08.89.170':445
- '13#.#08.36.103':445
- '13#.#08.165.105':445
- '13#.#08.1.41':445
- '13#.#08.10.5':445
- '13#.#08.239.101':445
- '13#.#08.159.103':445
- '13#.#08.11.163':445
- '13#.#08.224.199':445
- '13#.#08.187.224':445
- '13#.#08.177.85':445
- '13#.#08.199.176':445
- '13#.#08.199.176':139
- '13#.#08.224.199':139
- '13#.#08.11.163':139
- '13#.#08.177.85':139
- '13#.#08.187.224':139
- '13#.#08.202.245':139
- '13#.#08.142.67':139
- '13#.#08.78.217':139
- '13#.#08.242.101':139
- '13#.#08.233.168':139
- '13#.#08.179.233':139
- '13#.#08.88.246':139
- '13#.#08.168.89':139
- '13#.#08.108.180':139
- '13#.#08.1.41':139
- '13#.#08.10.5':139
- '13#.#08.239.101':139
- '13#.#08.159.103':139
- '13#.#08.219.76':139
- '13#.#08.48.18':139
- '13#.#08.213.33':139
- '13#.#08.32.61':139
- '13#.#08.242.31':139
- '13#.#08.4.88':139
- '13#.#08.125.252':139
- '13#.#08.0.233':139
- '13#.#08.46.228':139
- '13#.#08.18.133':139
- '13#.#08.129.108':139
- '13#.#08.89.170':139
- '13#.#08.36.103':139
- '13#.#08.165.105':139
- '13#.#08.1.34':139
- '13#.#08.65.89':139
- '13#.#08.86.107':139
- '13#.#08.113.228':139
- '13#.#08.69.76':139
- '13#.#08.172.46':139
- '13#.#08.108.171':139
- '13#.#08.98.29':139
- '13#.#08.185.213':139
- '13#.#08.183.208':139
- '13#.#08.51.106':139
- '13#.#08.184.224':139
- '13#.#08.89.203':139
- '13#.#08.133.128':139
- '13#.#08.181.204':139
- '13#.#08.149.182':139
- '13#.#08.71.195':139
- '13#.#08.228.122':139
- '13#.#08.102.149':139
- '13#.#08.51.237':139
- '13#.#08.29.44':139
- '13#.#08.0.75':139
- '13#.#08.115.27':139
- '13#.#08.209.212':139
- '13#.#08.228.50':139
- '13#.#08.37.109':139
- '13#.#08.152.239':139
- '13#.#08.110.62':139
- '13#.#08.188.131':139
- '13#.#08.132.102':139
- '13#.#08.226.24':139
- '13#.#08.81.166':139
- '13#.#08.26.81':139
- '13#.#08.26.69':139
- '13#.#08.76.132':139
- '13#.#08.43.42':139
- '13#.#08.41.179':139
- '13#.#08.234.45':139
- '13#.#08.230.253':139
- '13#.#08.54.29':139
- '13#.#08.0.16':139
- '13#.#08.87.167':139
- '13#.#08.18.133':445
- '13#.#08.125.252':445
- '13#.#08.4.88':445
- '13#.#08.46.228':445
- '13#.#08.0.233':445
- '13#.#08.89.172':445
- '13#.#08.72.39':445
- '13#.#08.69.236':445
- '13#.#08.34.168':445
- '13#.#08.69.76':445
- '13#.#08.65.89':445
- '13#.#08.1.34':445
- '13#.#08.113.228':445
- '13#.#08.86.107':445
- '13#.#08.48.18':445
- '13#.#08.213.33':445
- '13#.#08.32.61':445
- '13#.#08.242.31':445
- '13#.#08.191.71':445
- '13#.#08.13.5':139
- '13#.#08.252.225':139
- '13#.#08.109.60':139
- '13#.#08.170.63':139
- '13#.#08.227.180':139
- '13#.#08.198.97':139
- '13#.#08.194.207':139
- '13#.#08.114.186':139
- '13#.#08.178.223':139
- '13#.#08.170.14':445
- '13#.#08.195.169':445
- '13#.#08.83.191':445
- '13#.#08.14.84':445
- '13#.#08.154.195':139
- '13#.#08.21.54':139
- '13#.#08.177.96':139
- '13#.#08.212.162':139
- '13#.#08.178.141':139
- '13#.#08.60.68':139
- '13#.#08.188.247':139
- '13#.#08.225.165':139
- '13#.#08.125.141':139
- '13#.#08.130.46':139
- '13#.#08.65.98':139
- '13#.#08.165.123':445
- '13#.#08.205.173':445
- '13#.#08.164.227':445
- '13#.#08.123.236':445
- '13#.#08.6.201':139
- '13#.108.4.7':139
- '13#.#08.201.24':139
- '13#.#08.200.218':139
- '13#.#08.24.148':139
- '13#.#08.167.2':139
- '13#.#08.60.161':139
- '13#.#08.232.82':139
- '13#.#08.179.65':139
- '13#.#08.28.156':445
- '13#.#08.181.253':445
- '13#.#08.14.58':445
- '13#.#08.75.178':445
- '13#.#08.80.111':445
- '13#.#08.41.66':445
- '13#.#08.55.142':445
- '13#.#08.69.211':445
- '13#.#08.123.76':445
- '13#.#08.42.68':445
- '13#.#08.0.60':445
- '13#.#08.119.82':445
- '13#.#08.18.165':445
- '13#.#08.124.250':445
- '13#.#08.67.87':445
- '13#.#08.194.51':445
- '13#.#08.51.139':445
- '13#.#08.194.224':445
- '13#.#08.186.195':445
- '13#.#08.186.195':139
- '13#.#08.194.51':139
- '13#.#08.67.87':139
- '13#.#08.194.224':139
- '13#.#08.51.139':139
- '13#.#08.181.253':139
- '13#.#08.14.58':139
- '13#.#08.75.178':139
- '13#.#08.80.111':139
- '13#.#08.205.173':139
- '13#.#08.164.227':139
- '13#.#08.165.123':139
- '13#.#08.123.236':139
- '13#.#08.28.156':139
- '13#.#08.0.60':139
- '13#.#08.119.82':139
- '13#.#08.18.165':139
- '13#.#08.124.250':139
- '13#.#08.41.66':139
- '13#.#08.11.188':139
- '13#.#08.52.42':139
- '13#.#08.207.215':139
- '13#.#08.146.12':139
- '13#.#08.42.19':139
- '13#.#08.55.242':139
- '13#.#08.51.150':139
- '13#.#08.39.138':139
- '13#.#08.179.161':139
- '13#.#08.55.142':139
- '13#.#08.69.211':139
- '13#.#08.123.76':139
- '13#.#08.42.68':139
- '13#.#08.18.149':139
- '13#.#08.92.128':139
- '13#.#08.100.237':139
- '13#.#08.71.161':139
- '13#.#08.153.23':139
- '13#.#08.168.65':139
- '13#.#08.243.141':139
- '13#.#08.125.141':9988
- '13#.#08.65.98':9988
- '13#.#08.75.103':139
- '13#.#08.26.7':139
- '13#.#08.199.70':139
- '13#.#08.150.100':139
- '13#.#08.121.117':139
- '13#.#08.11.188':9988
- '13#.#08.42.19':9988
- '13#.#08.80.111':9988
- '13#.#08.69.211':9988
- '13#.#08.39.138':9988
- '13#.#08.201.24':9988
- '13#.#08.179.65':9988
- '13#.#08.179.161':9988
- '13#.#08.51.150':9988
- '13#.#08.33.90':139
- '13#.#08.31.10':445
- '13#.#08.84.2':445
- '13#.#08.199.70':445
- '13#.#08.33.90':445
- '13#.#08.28.165':445
- '13#.#08.214.72':139
- '13#.#08.74.45':139
- '13#.#08.240.218':139
- '13#.#08.78.91':139
- '13#.#08.28.165':139
- '13#.#08.168.65':445
- '13#.#08.31.10':139
- '13#.#08.84.2':139
- '13#.#08.243.141':445
- '13#.#08.121.117':445
- '13#.#08.26.7':445
- '13#.#08.75.103':445
- '13#.#08.150.100':445
- '13#.#08.179.161':445
- '13#.#08.55.242':445
- '13#.#08.42.19':445
- '13#.#08.39.138':445
- '13#.#08.51.150':445
- '13#.#08.6.201':445
- '13#.108.4.7':445
- '13#.#08.201.24':445
- '13#.#08.200.218':445
- '13#.#08.153.23':445
- '13#.#08.92.128':445
- '13#.#08.18.149':445
- '13#.#08.71.161':445
- '13#.#08.100.237':445
- '13#.#08.11.188':445
- '13#.#08.52.42':445
- '13#.#08.207.215':445
- '13#.#08.146.12':445
- '13#.#08.24.148':445
- '13#.#08.0.60':9988
- '13#.#08.119.82':9988
- '13#.#08.165.123':9988
- '13#.#08.28.156':9988
- '13#.#08.67.87':9988
- '13#.#08.194.51':9988
- '13#.#08.75.178':9988
- '13#.#08.194.224':9988
- '13#.#08.186.195':9988
- '13#.#08.167.2':445
- '13#.#08.60.161':445
- '13#.#08.232.82':445
- '13#.#08.179.65':445
- '13#.#08.125.141':445
- '13#.#08.225.165':445
- '13#.#08.65.98':445
- '13#.#08.130.46':445
- '13#.#08.188.247':445