Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '24.#2.3.207':139
- '24.#2.215.2':139
- '24.##.206.225':139
- '24.#2.67.13':139
- '24.##.203.205':139
- '24.#2.63.68':139
- '24.##.157.77':139
- '24.##.87.185':139
- '24.##.126.109':139
- '24.##.185.171':139
- '24.##.209.166':139
- '24.##.234.208':139
- '24.#2.47.69':139
- '24.#2.14.18':445
- '24.##.180.14':139
- '24.#2.156.6':139
- '24.##.120.156':139
- '24.#2.31.97':139
- '24.##.131.161':139
- '24.##.220.24':139
- '24.#2.215.2':445
- '24.##.126.109':445
- '24.#2.3.207':445
- '24.##.203.205':445
- '24.##.206.225':445
- '24.##.157.77':445
- '24.##.57.123':139
- '24.#2.63.68':445
- '24.##.185.171':445
- '24.##.87.185':445
- '24.##.234.208':445
- '24.##.131.161':445
- '24.##.209.166':445
- '24.##.180.14':445
- '24.#2.47.69':445
- '24.##.120.156':445
- '24.#2.67.13':445
- '24.#2.156.6':445
- '24.##.220.24':445
- '24.#2.31.97':445
- '24.#2.36.40':445
- '24.##.103.51':445
- '24.##.141.20':445
- '24.##.43.113':445
- '24.#2.46.93':445
- '24.#2.28.49':445
- '24.##.102.49':445
- '24.##.11.176':445
- '24.##.97.177':445
- '24.##.60.173':445
- '24.#2.96.72':445
- '24.##.85.142':139
- '24.#2.44.23':139
- '24.#2.1.26':139
- '24.##.177.247':139
- '24.##.94.118':139
- '24.#2.36.40':139
- '24.#2.14.18':139
- '24.##.122.65':139
- '24.##.156.245':139
- '24.##.65.157':139
- '24.##.94.118':445
- '24.#2.1.26':445
- '24.##.177.247':445
- '24.##.165.45':445
- '24.##.247.164':445
- '24.##.65.157':445
- '24.##.122.65':445
- '24.##.156.245':445
- '24.##.85.142':445
- '24.#2.44.23':445
- '24.#2.62.9':445
- '24.##.170.18':445
- '24.##.20.152':445
- '24.#2.14.40':445
- '24.##.196.87':445
- '24.#2.20.81':445
- '24.##.213.80':445
- '24.##.186.234':445
- '24.#2.6.96':445
- '24.##.169.243':445
- '24.##.143.88':139
- '24.##.160.122':445
- '24.#2.91.88':445
- '24.##.186.181':445
- '24.##.157.75':445
- '24.##.167.166':445
- '24.#2.92.69':445
- '24.##.80.215':445
- '24.##.169.179':445
- '24.#2.8.177':445
- '24.##.68.118':445
- '24.##.121.75':445
- '24.##.131.114':445
- '24.#2.41.34':445
- '24.##.131.27':445
- '24.##.29.130':445
- '24.##.79.138':445
- '24.##.75.203':445
- '24.#2.91.74':445
- '24.#2.8.13':445
- '24.##.91.115':445
- '24.##.191.220':139
- '24.##.234.215':139
- '24.##.136.76':139
- '24.##.210.50':139
- '24.#2.77.57':139
- '24.##.174.174':139
- '24.##.210.32':139
- '24.##.248.209':139
- '24.##.124.234':139
- '24.##.209.152':139
- '24.##.233.77':139
- '24.##.28.152':139
- '24.##.214.163':139
- '24.##.61.121':445
- '24.#2.30.1':139
- '24.#2.32.42':139
- '24.#2.37.64':139
- '24.##.234.102':139
- '24.#2.59.76':139
- '24.##.13.151':139
- '24.##.108.228':445
- '24.##.131.114':139
- '24.#2.8.13':139
- '24.##.121.75':139
- '24.##.29.130':139
- '24.#2.41.34':139
- '24.##.75.203':139
- '24.##.157.75':139
- '24.##.79.138':139
- '24.##.91.115':139
- '24.#2.91.74':139
- '24.##.101.250':139
- '24.#2.16.41':139
- '24.##.217.162':139
- '24.##.231.171':139
- '24.##.212.157':139
- '24.##.108.228':139
- '24.##.131.27':139
- '24.##.165.227':139
- '24.#2.2.236':139
- '24.##.252.198':139
- '24.##.212.157':445
- '24.##.217.162':445
- '24.##.231.171':445
- '24.##.57.123':445
- '24.##.143.88':445
- '24.##.252.198':445
- '24.##.165.227':445
- '24.#2.2.236':445
- '24.##.101.250':445
- '24.#2.16.41':445
- '24.#2.91.88':139
- '24.#2.8.177':139
- '24.##.160.122':139
- '24.##.167.166':139
- '24.##.186.181':139
- '24.##.80.215':139
- '24.##.61.121':139
- '24.#2.92.69':139
- '24.##.68.118':139
- '24.##.169.179':139
- '24.##.118.114':445
- '24.##.30.175':445
- '24.##.82.125':445
- '24.##.137.101':445
- '24.##.120.137':445
- '24.##.25.164':445
- '24.#2.70.26':445
- '24.#2.84.8':445
- '24.##.206.202':445
- '24.#2.75.23':445
- '24.##.147.233':139
- '24.##.196.199':139
- '24.#2.39.98':139
- '24.##.230.33':139
- '24.##.240.165':139
- '24.##.220.198':139
- '24.##.70.252':139
- '24.##.86.113':139
- '24.##.137.208':139
- '24.#2.35.90':139
- '24.##.200.187':445
- '24.##.163.23':445
- '24.##.62.228':445
- '24.##.242.99':445
- '24.##.108.177':445
- '24.##.56.185':445
- '24.#2.59.63':445
- '24.##.16.187':445
- '24.##.24.251':445
- '24.##.252.107':445
- '24.#2.5.112':445
- '24.##.218.246':445
- '24.#2.39.95':445
- '24.##.159.53':445
- '24.##.17.124':445
- '24.##.182.121':445
- '24.##.249.69':445
- '24.##.62.233':445
- '24.##.123.56':445
- '24.#2.50.63':445
- '24.##.32.127':139
- '24.#2.5.112':139
- '24.##.218.246':139
- '24.#2.39.95':139
- '24.##.159.53':139
- '24.##.17.124':139
- '24.##.182.121':139
- '24.##.249.69':139
- '24.##.62.233':139
- '24.##.123.56':139
- '24.#2.50.63':139
- '24.##.118.114':139
- '24.##.30.175':139
- '24.##.82.125':139
- '24.##.120.137':139
- '24.##.137.101':139
- '24.##.25.164':139
- '24.#2.70.26':139
- '24.#2.84.8':139
- '24.##.206.202':139
- '24.#2.75.23':139
- '24.##.135.47':139
- '24.#2.22.51':139
- '24.##.126.44':139
- '24.##.103.62':139
- '24.#2.27.41':139
- '24.##.201.74':139
- '24.##.158.18':139
- '24.#2.31.57':139
- '24.#2.145.6':139
- '24.##.171.171':139
- '24.##.200.187':139
- '24.##.163.23':139
- '24.##.62.228':139
- '24.##.242.99':139
- '24.##.108.177':139
- '24.##.56.185':139
- '24.#2.59.63':139
- '24.##.16.187':139
- '24.##.24.251':139
- '24.##.252.107':139
- '24.##.103.62':445
- '24.##.16.141':445
- '24.##.115.55':445
- '24.##.188.253':445
- '24.#2.245.2':445
- '24.##.165.244':445
- '24.#2.46.93':139
- '24.#2.28.49':139
- '24.##.97.253':445
- '24.##.120.115':445
- '24.##.150.110':445
- '24.##.188.253':139
- '24.##.16.141':139
- '24.##.165.244':139
- '24.##.223.81':139
- '24.#2.245.2':139
- '24.##.97.253':139
- '24.##.223.81':445
- '24.##.150.110':139
- '24.##.115.55':139
- '24.##.120.115':139
- '24.#2.6.96':139
- '24.##.169.243':139
- '24.##.170.18':139
- '24.##.20.152':139
- '24.#2.62.9':139
- '24.##.165.45':139
- '24.##.247.164':139
- '24.##.213.80':139
- '24.##.186.234':139
- '24.#2.20.81':139
- '24.##.60.173':139
- '24.#2.96.72':139
- '24.##.141.20':139
- '24.##.43.113':139
- '24.##.103.51':139
- '24.#2.14.40':139
- '24.##.196.87':139
- '24.##.11.176':139
- '24.##.97.177':139
- '24.##.102.49':139
- '24.##.196.199':9988
- '24.##.147.233':445
- '24.##.196.199':445
- '24.#2.39.98':445
- '24.##.230.33':445
- '24.##.240.165':445
- '24.##.220.198':445
- '24.##.70.252':445
- '24.##.86.113':445
- '24.#2.35.90':445
- '24.##.137.208':445
- '24.#2.22.51':445
- '24.#2.145.6':445
- '24.##.135.47':445
- '24.#2.27.41':445
- '24.##.126.44':445
- '24.##.158.18':445
- '24.##.32.127':445
- '24.##.201.74':445
- '24.##.171.171':445
- '24.#2.31.57':445
- '24.##.200.187':9988
- '24.##.24.251':9988
- '24.##.62.228':9988
- '24.##.249.69':9988
- '24.##.242.99':9988
- '24.#2.22.51':9988
- '24.#2.145.6':9988
- '24.##.135.47':9988
- '24.##.252.107':9988
- '24.#2.59.63':9988
- '24.#2.75.23':9988
- '24.#2.84.8':9988
- '24.##.206.202':9988
- '24.##.137.101':9988
- '24.##.30.175':9988
- '24.##.218.246':9988
- '24.##.123.56':9988
- '24.#2.5.112':9988
- '24.##.25.164':9988
- '24.##.159.53':9988