Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.#6.24.59':139
- '82.##.186.192':139
- '82.##.199.67':445
- '82.##.150.60':445
- '82.#6.33.20':445
- '82.##.185.15':139
- '82.##.128.73':139
- '82.##.129.37':139
- '82.##.152.186':139
- '82.##.237.98':139
- '82.##.125.28':445
- '82.##.189.117':445
- '82.##.253.188':445
- '82.#6.95.11':445
- '82.##.125.79':445
- '82.##.133.38':445
- '82.#6.93.0':445
- '82.##.241.237':445
- '82.#6.11.8':445
- '82.##.12.253':445
- '82.##.119.136':445
- '82.#6.15.84':445
- '82.##.10.210':445
- '82.#6.84.99':445
- '82.##.128.73':445
- '82.#6.245.0':445
- '82.#6.28.60':139
- '82.##.216.160':139
- '82.##.141.245':139
- '82.##.21.132':445
- '82.##.162.242':139
- '82.##.185.15':445
- '82.##.10.210':139
- '82.##.21.132':139
- '82.#6.15.84':139
- '82.#6.245.0':139
- '82.#6.84.99':139
- '82.##.237.98':445
- '82.##.129.37':445
- '82.##.152.186':445
- '82.#6.24.59':445
- '82.##.186.192':445
- '82.#6.6.25':445
- '82.##.125.28':139
- '82.##.150.60':139
- '82.##.241.237':139
- '82.#6.11.8':139
- '82.#6.93.0':139
- '82.##.241.10':445
- '82.##.222.220':445
- '82.##.203.55':445
- '82.#6.33.20':139
- '82.##.199.67':139
- '82.##.119.136':139
- '82.#6.6.25':139
- '82.##.125.79':139
- '82.#6.16.32':139
- '82.#6.32.39':139
- '82.#6.38.38':139
- '82.##.253.188':139
- '82.##.12.253':139
- '82.##.189.117':139
- '82.##.133.38':139
- '82.#6.95.11':139
- '82.##.178.174':445
- '82.##.219.177':445
- '82.#6.42.60':445
- '82.##.149.100':445
- '82.##.104.24':445
- '82.#6.38.38':445
- '82.#6.16.32':445
- '82.#6.32.39':445
- '82.##.200.218':445
- '82.##.39.200':445
- '82.##.100.120':445
- '82.##.37.194':445
- '82.##.46.253':445
- '82.#6.16.97':445
- '82.##.100.223':445
- '82.#6.77.30':445
- '82.##.44.168':445
- '82.##.201.253':445
- '82.##.176.79':445
- '82.#6.5.76':445
- '82.##.14.144':445
- '82.##.181.210':139
- '82.##.138.90':445
- '82.##.25.165':445
- '82.##.249.100':445
- '82.##.169.195':445
- '82.#6.81.80':445
- '82.##.25.154':445
- '82.##.105.233':445
- '82.##.49.236':445
- '82.##.161.235':445
- '82.##.236.161':445
- '82.##.125.14':445
- '82.#6.4.253':445
- '82.##.11.230':445
- '82.##.51.225':445
- '82.#6.37.64':445
- '82.#6.67.71':445
- '82.##.94.209':445
- '82.#6.85.94':445
- '82.##.208.197':445
- '82.##.231.149':445
- '82.##.227.79':445
- '82.##.16.119':139
- '82.##.74.134':139
- '82.##.202.114':139
- '82.##.242.94':139
- '82.#6.94.60':139
- '82.##.111.42':139
- '82.##.231.79':139
- '82.##.106.19':139
- '82.#6.84.75':139
- '82.##.237.83':139
- '82.##.220.195':139
- '82.##.40.222':445
- '82.#6.20.84':445
- '82.##.68.163':445
- '82.##.77.111':445
- '82.##.254.90':445
- '82.##.238.229':445
- '82.#6.31.56':139
- '82.##.184.74':445
- '82.##.254.163':445
- '82.##.219.183':445
- '82.##.147.244':445
- '82.##.125.14':139
- '82.##.169.195':139
- '82.#6.85.94':139
- '82.##.208.197':139
- '82.##.94.209':139
- '82.##.25.165':139
- '82.##.161.235':139
- '82.##.138.90':139
- '82.#6.81.80':139
- '82.##.249.100':139
- '82.##.227.79':139
- '82.##.147.244':139
- '82.#6.37.64':139
- '82.#6.51.63':139
- '82.##.227.117':139
- '82.##.62.228':139
- '82.##.11.230':139
- '82.##.231.149':139
- '82.#6.4.253':139
- '82.#6.67.71':139
- '82.##.51.225':139
- '82.##.141.245':445
- '82.#6.28.60':445
- '82.##.162.242':445
- '82.##.184.74':139
- '82.##.238.229':139
- '82.##.62.228':445
- '82.#6.51.63':445
- '82.##.227.117':445
- '82.##.216.160':445
- '82.##.181.210':445
- '82.##.219.183':139
- '82.##.105.233':139
- '82.##.77.111':139
- '82.##.25.154':139
- '82.##.236.161':139
- '82.##.49.236':139
- '82.#6.20.84':139
- '82.##.254.163':139
- '82.##.40.222':139
- '82.##.254.90':139
- '82.##.68.163':139
- '82.##.47.228':445
- '82.##.134.47':445
- '82.##.130.143':445
- '82.##.87.215':445
- '82.#6.200.0':445
- '82.##.30.246':445
- '82.##.33.157':445
- '82.##.247.172':445
- '82.##.211.133':445
- '82.#6.9.18':445
- '82.##.211.177':445
- '82.#6.95.8':139
- '82.##.236.99':139
- '82.#6.77.43':139
- '82.#6.33.93':139
- '82.##.218.32':139
- '82.##.169.94':445
- '82.##.45.200':445
- '82.##.123.171':139
- '82.#6.81.25':139
- '82.##.140.234':139
- '82.##.125.10':445
- '82.##.63.107':445
- '82.#6.9.226':445
- '82.##.12.133':445
- '82.##.225.221':445
- '82.##.213.115':445
- '82.##.139.169':445
- '82.#6.99.50':445
- '82.##.154.63':445
- '82.##.50.152':445
- '82.#6.1.186':445
- '82.##.145.32':445
- '82.#6.126.0':445
- '82.##.219.139':445
- '82.##.144.219':445
- '82.##.140.50':445
- '82.#6.16.73':445
- '82.#6.43.54':445
- '82.#6.41.93':445
- '82.#6.20.52':445
- '82.##.56.146':445
- '82.##.228.128':139
- '82.##.140.50':139
- '82.##.219.139':139
- '82.##.144.219':139
- '82.##.30.246':139
- '82.##.33.157':139
- '82.##.56.146':139
- '82.#6.41.93':139
- '82.#6.20.52':139
- '82.##.145.32':139
- '82.#6.126.0':139
- '82.##.247.172':139
- '82.#6.200.0':139
- '82.##.211.177':139
- '82.##.87.215':139
- '82.##.45.200':139
- '82.##.169.94':139
- '82.##.211.133':139
- '82.#6.9.18':139
- '82.##.134.47':139
- '82.##.130.143':139
- '82.##.47.228':139
- '82.#6.17.1':139
- '82.##.195.112':139
- '82.##.49.106':139
- '82.##.213.115':139
- '82.##.139.169':139
- '82.##.19.164':139
- '82.##.177.177':139
- '82.##.216.28':139
- '82.##.242.216':139
- '82.##.206.234':139
- '82.#6.99.50':139
- '82.##.12.133':139
- '82.##.225.221':139
- '82.#6.1.186':139
- '82.#6.16.73':139
- '82.#6.43.54':139
- '82.##.154.63':139
- '82.##.50.152':139
- '82.##.63.107':139
- '82.#6.9.226':139
- '82.##.125.10':139
- '82.##.49.106':445
- '82.##.58.225':445
- '82.##.98.106':445
- '82.##.221.116':445
- '82.##.187.81':445
- '82.##.145.248':445
- '82.##.100.151':445
- '82.#6.14.86':445
- '82.##.18.247':445
- '82.#6.43.58':445
- '82.#6.57.74':445
- '82.##.136.28':445
- '82.##.98.106':139
- '82.#6.43.58':139
- '82.##.58.225':139
- '82.##.145.248':139
- '82.##.221.116':139
- '82.#6.14.86':139
- '82.##.72.230':445
- '82.##.100.151':139
- '82.#6.57.74':139
- '82.##.18.247':139
- '82.##.149.100':139
- '82.##.104.24':139
- '82.##.100.120':139
- '82.##.44.168':139
- '82.##.201.253':139
- '82.##.200.218':139
- '82.##.39.200':139
- '82.##.219.177':139
- '82.#6.42.60':139
- '82.##.178.174':139
- '82.##.176.79':139
- '82.##.100.223':139
- '82.#6.77.30':139
- '82.##.222.220':139
- '82.##.203.55':139
- '82.##.241.10':139
- '82.#6.5.76':139
- '82.##.14.144':139
- '82.##.46.253':139
- '82.#6.16.97':139
- '82.##.37.194':139
- '82.##.187.81':139
- '82.##.140.234':445
- '82.##.123.171':445
- '82.#6.81.25':445
- '82.#6.95.8':445
- '82.##.236.99':445
- '82.##.130.143':9988
- '82.#6.9.18':9988
- '82.##.87.215':9988
- '82.##.169.94':9988
- '82.#6.200.0':9988
- '82.#6.77.43':445
- '82.##.206.234':445
- '82.##.216.28':445
- '82.##.242.216':445
- '82.#6.17.1':445
- '82.##.195.112':445
- '82.#6.33.93':445
- '82.##.218.32':445
- '82.##.228.128':445
- '82.##.19.164':445
- '82.##.177.177':445
- '82.##.132.67':139
- '82.##.206.237':139
- '82.##.89.176':139
- '82.#6.9.226':9988
- '82.#6.20.52':9988
- '82.##.72.230':139
- '82.##.136.28':139
- '82.##.206.237':445
- '82.##.89.176':445
- '82.##.132.67':445
- '82.##.225.221':9988
- '82.##.144.219':9988
- '82.##.140.50':9988
- '82.##.33.157':9988
- '82.##.247.172':9988
- '82.##.30.246':9988
- '82.#6.43.54':9988
- '82.#6.16.73':9988
- '82.##.56.146':9988
- '82.##.219.139':9988
- '82.##.145.32':9988