Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '20#.#36.137.32':445
- '20#.#36.93.58':445
- '20#.#36.180.247':445
- '20#.#36.39.68':445
- '20#.#36.89.202':445
- '20#.#36.106.207':445
- '20#.#36.159.212':445
- '20#.#36.147.100':445
- '20#.#36.233.52':445
- '20#.#36.52.4':445
- '20#.#36.133.207':139
- '20#.#36.107.141':139
- '20#.#36.120.83':139
- '20#.#36.207.164':139
- '20#.#36.174.189':139
- '20#.#36.59.156':139
- '20#.#36.22.179':139
- '20#.#36.218.189':139
- '20#.#36.44.219':139
- '20#.#36.145.157':445
- '20#.#36.30.91':445
- '20#.#36.89.198':445
- '20#.#36.115.89':445
- '20#.#36.82.30':445
- '20#.#36.104.42':445
- '20#.#36.30.95':445
- '20#.#36.21.121':445
- '20#.#36.123.223':445
- '20#.#36.198.5':445
- '20#.#36.112.139':445
- '20#.#36.106.136':445
- '20#.#36.1.77':445
- '20#.#36.10.167':445
- '20#.#36.161.198':445
- '20#.#36.140.25':445
- '20#.#36.236.36':445
- '20#.#36.34.162':445
- '20#.#36.107.34':445
- '20#.#36.0.36':139
- '20#.#36.34.162':139
- '20#.#36.107.34':139
- '20#.#36.106.136':139
- '20#.#36.161.198':139
- '20#.#36.140.25':139
- '20#.#36.89.198':139
- '20#.#36.115.89':139
- '20#.#36.236.36':139
- '20#.#36.198.5':139
- '20#.#36.112.139':139
- '20#.#36.89.202':139
- '20#.#36.147.100':139
- '20#.#36.137.32':139
- '20#.#36.93.58':139
- '20#.#36.233.52':139
- '20#.#36.1.77':139
- '20#.#36.10.167':139
- '20#.#36.106.207':139
- '20#.#36.159.212':139
- '20#.#36.51.185':139
- '20#.#36.217.227':139
- '20#.#36.56.153':139
- '20#.#36.190.170':139
- '20#.#36.148.72':139
- '20#.#36.82.44':139
- '20#.#36.146.226':139
- '20#.#36.211.88':139
- '20#.#36.175.121':139
- '20#.#36.225.43':139
- '20#.#36.82.30':139
- '20#.#36.21.121':139
- '20#.#36.145.157':139
- '20#.#36.30.91':139
- '20#.#36.123.223':139
- '20#.#36.111.45':139
- '20#.#36.161.91':139
- '20#.#36.104.42':139
- '20#.#36.30.95':139
- '20#.#36.111.45':445
- '20#.#36.128.140':139
- '20#.#36.177.128':139
- '20#.#36.117.232':139
- '20#.#36.143.115':139
- '20#.#36.24.29':139
- '20#.#36.193.197':139
- '20#.#36.5.58':139
- '20#.#36.55.167':139
- '20#.#36.118.56':139
- '20#.#36.195.79':139
- '20#.#36.132.50':139
- '20#.#36.191.132':139
- '20#.#36.96.209':139
- '20#.#36.49.234':139
- '20#.#36.20.191':139
- '20#.#36.245.88':139
- '20#.#36.74.122':139
- '20#.#36.46.3':139
- '20#.#36.0.88':139
- '20#.#36.40.148':139
- '20#.#36.225.226':139
- '20#.#36.159.204':139
- '20#.#36.38.240':139
- '20#.#36.23.16':445
- '20#.#36.32.155':445
- '20#.#36.53.143':445
- '20#.#36.37.151':445
- '20#.#36.12.37':445
- '20#.#36.227.216':139
- '20#.#36.209.250':139
- '20#.#36.232.209':139
- '20#.#36.127.163':139
- '20#.#36.251.56':139
- '20#.#36.149.39':139
- '20#.#36.119.186':139
- '20#.#36.142.218':139
- '20#.#36.194.206':139
- '20#.#36.186.187':139
- '20#.#36.132.214':139
- '20#.#36.120.83':445
- '20#.#36.207.164':445
- '20#.#36.146.226':445
- '20#.#36.0.36':445
- '20#.#36.133.207':445
- '20#.#36.218.189':445
- '20#.#36.44.219':445
- '20#.#36.107.141':445
- '20#.#36.174.189':445
- '20#.#36.82.44':445
- '20#.#36.56.153':445
- '20#.#36.190.170':445
- '20#.#36.161.91':445
- '20#.#36.225.43':445
- '20#.#36.51.185':445
- '20#.#36.211.88':445
- '20#.#36.175.121':445
- '20#.#36.217.227':445
- '20#.#36.148.72':445
- '20#.#36.27.232':139
- '20#.#36.0.199':139
- '20#.#36.245.227':139
- '20#.#36.232.41':139
- '20#.#36.176.228':139
- '20#.#36.134.183':139
- '20#.#36.36.186':139
- '20#.#36.33.243':139
- '20#.#36.183.63':139
- '20#.#36.184.68':139
- '20#.#36.23.16':139
- '20#.#36.37.151':139
- '20#.#36.59.156':445
- '20#.#36.22.179':445
- '20#.#36.12.37':139
- '20#.#36.71.56':139
- '20#.#36.170.223':139
- '20#.#36.32.155':139
- '20#.#36.53.143':139
- '20#.#36.39.68':139
- '20#.#36.4.38':445
- '20#.#36.149.156':445
- '20#.#36.93.22':139
- '20#.#36.216.92':139
- '20#.#36.174.187':445
- '20#.#36.46.181':445
- '20#.#36.196.81':445
- '20#.#36.12.143':445
- '20#.#36.44.102':445
- '20#.#36.22.120':139
- '20#.#36.7.192':139
- '20#.#36.59.38':139
- '20#.#36.194.30':139
- '20#.#36.85.196':139
- '20#.#36.206.147':139
- '20#.#36.121.2':139
- '20#.#36.119.179':139
- '20#.#36.100.4':139
- '20#.#36.115.99':139
- '20#.#36.1.38':445
- '20#.#36.62.139':445
- '20#.#36.214.128':445
- '20#.#36.12.50':445
- '20#.#36.93.62':445
- '20#.#36.1.32':445
- '20#.#36.21.16':445
- '20#.#36.124.176':445
- '20#.#36.191.210':445
- '20#.#36.220.254':445
- '20#.#36.0.186':445
- '20#.#36.238.214':445
- '20#.#36.179.241':445
- '20#.#36.129.204':445
- '20#.#36.18.49':445
- '20#.#36.175.231':445
- '20#.#36.231.20':445
- '20#.#36.142.200':445
- '20#.#36.65.29':445
- '20#.#36.234.201':139
- '20#.#36.142.200':139
- '20#.#36.65.29':139
- '20#.#36.238.214':139
- '20#.#36.18.49':139
- '20#.#36.175.231':139
- '20#.#36.214.128':139
- '20#.#36.12.50':139
- '20#.#36.231.20':139
- '20#.#36.220.254':139
- '20#.#36.0.186':139
- '20#.#36.174.187':139
- '20#.#36.12.143':139
- '20#.#36.4.38':139
- '20#.#36.149.156':139
- '20#.#36.44.102':139
- '20#.#36.179.241':139
- '20#.#36.129.204':139
- '20#.#36.46.181':139
- '20#.#36.196.81':139
- '20#.#36.40.13':139
- '20#.#36.43.17':139
- '20#.#36.60.27':139
- '20#.#36.66.201':139
- '20#.#36.50.234':139
- '20#.#36.230.174':139
- '20#.#36.141.48':139
- '20#.#36.177.182':139
- '20#.#36.241.118':139
- '20#.#36.107.250':139
- '20#.#36.93.62':139
- '20#.#36.124.176':139
- '20#.#36.1.38':139
- '20#.#36.62.139':139
- '20#.#36.191.210':139
- '20#.#36.167.97':139
- '20#.#36.242.97':139
- '20#.#36.1.32':139
- '20#.#36.21.16':139
- '20#.#36.167.97':445
- '20#.#36.187.190':139
- '20#.#36.82.46':139
- '20#.#36.103.253':139
- '20#.#36.201.160':139
- '20#.#36.55.53':139
- '20#.#36.55.70':139
- '20#.#36.77.165':139
- '20#.#36.76.175':139
- '20#.#36.139.177':139
- '20#.#36.225.82':139
- '20#.#36.130.167':139
- '20#.#36.102.108':139
- '20#.#36.241.118':9988
- '20#.#36.59.38':9988
- '20#.#36.241.162':139
- '20#.#36.116.57':139
- '20#.#36.106.89':139
- '20#.#36.150.171':139
- '20#.#36.134.69':139
- '20#.#36.55.53':445
- '20#.#36.76.175':445
- '20#.#36.187.190':445
- '20#.#36.82.46':445
- '20#.#36.139.177':445
- '20#.#36.52.4':139
- '20#.#36.180.247':139
- '20#.#36.55.70':445
- '20#.#36.77.165':445
- '20#.#36.201.160':445
- '20#.#36.241.162':445
- '20#.#36.150.171':445
- '20#.#36.130.167':445
- '20#.#36.102.108':445
- '20#.#36.134.69':445
- '20#.#36.225.82':445
- '20#.#36.103.253':445
- '20#.#36.116.57':445
- '20#.#36.106.89':445
- '20#.#36.40.13':9988
- '20#.#36.194.30':445
- '20#.#36.85.196':445
- '20#.#36.141.48':445
- '20#.#36.234.201':445
- '20#.#36.7.192':445
- '20#.#36.100.4':445
- '20#.#36.115.99':445
- '20#.#36.59.38':445
- '20#.#36.206.147':445
- '20#.#36.230.174':445
- '20#.#36.60.27':445
- '20#.#36.66.201':445
- '20#.#36.242.97':445
- '20#.#36.107.250':445
- '20#.#36.40.13':445
- '20#.#36.177.182':445
- '20#.#36.241.118':445
- '20#.#36.43.17':445
- '20#.#36.50.234':445
- '20#.#36.214.128':9988
- '20#.#36.12.50':9988
- '20#.#36.18.49':9988
- '20#.#36.231.20':9988
- '20#.#36.1.38':9988
- '20#.#36.191.210':9988
- '20#.#36.1.32':9988
- '20#.#36.93.62':9988
- '20#.#36.124.176':9988
- '20#.#36.238.214':9988
- '20#.#36.22.120':445
- '20#.#36.93.22':445
- '20#.#36.121.2':445
- '20#.#36.119.179':445
- '20#.#36.216.92':445
- '20#.#36.46.181':9988
- '20#.#36.196.81':9988
- '20#.#36.12.143':9988
- '20#.#36.44.102':9988