Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '83.##.200.137':139
- '83.##.200.212':139
- '83.#1.13.84':139
- '83.#1.45.59':139
- '83.##.83.164':139
- '83.##.234.200':139
- '83.#1.198.0':139
- '83.#1.63.53':139
- '83.##.137.107':139
- '83.##.41.143':139
- '83.##.106.85':139
- '83.#1.68.31':139
- '83.#1.46.68':139
- '83.##.55.214':139
- '83.##.158.235':139
- '83.#1.67.48':139
- '83.##.116.175':139
- '83.##.123.86':139
- '83.#1.86.25':139
- '83.##.152.111':139
- '83.#1.4.195':139
- '83.#1.50.45':139
- '83.##.69.207':139
- '83.##.204.190':445
- '83.##.144.229':445
- '83.#1.6.147':445
- '83.##.228.104':445
- '83.##.21.251':445
- '83.##.177.68':445
- '83.##.37.124':445
- '83.#1.45.79':445
- '83.#1.2.54':445
- '83.##.76.184':445
- '83.##.153.76':445
- '83.##.192.122':139
- '83.##.73.186':139
- '83.##.22.241':139
- '83.##.237.251':139
- '83.#1.54.6':139
- '83.##.119.105':139
- '83.##.107.82':139
- '83.##.211.29':139
- '83.#1.27.53':139
- '83.##.131.79':139
- '83.##.101.26':139
- '83.##.68.127':139
- '83.##.138.27':445
- '83.##.197.226':445
- '83.##.63.204':445
- '83.##.75.221':445
- '83.##.254.74':445
- '83.##.39.198':445
- '83.##.15.252':445
- '83.#1.59.84':445
- '83.##.97.174':445
- '83.#1.209.2':445
- '83.#1.39.80':445
- '83.##.74.177':445
- '83.##.163.173':445
- '83.##.91.127':445
- '83.##.63.227':445
- '83.#1.63.62':445
- '83.##.114.119':445
- '83.##.45.194':445
- '83.##.132.203':445
- '83.##.51.136':445
- '83.##.59.240':445
- '83.##.227.225':445
- '83.##.116.71':445
- '83.#1.2.54':139
- '83.##.37.124':139
- '83.##.153.76':139
- '83.##.177.68':139
- '83.##.76.184':139
- '83.#1.45.79':139
- '83.##.249.57':139
- '83.##.127.108':139
- '83.##.116.233':139
- '83.##.114.174':139
- '83.##.83.145':139
- '83.#1.6.200':445
- '83.#1.4.158':445
- '83.##.61.194':445
- '83.##.161.183':445
- '83.#1.80.37':445
- '83.#1.99.5':445
- '83.##.204.190':139
- '83.##.144.229':139
- '83.#1.6.147':139
- '83.##.228.104':139
- '83.##.21.251':139
- '83.##.102.89':139
- '83.##.106.217':139
- '83.#1.47.4':139
- '83.##.21.197':139
- '83.#1.3.244':139
- '83.##.182.195':139
- '83.##.84.221':139
- '83.#1.76.79':139
- '83.##.155.218':139
- '83.#1.5.153':139
- '83.##.225.69':139
- '83.##.198.206':139
- '83.##.161.61':139
- '83.##.207.22':139
- '83.#1.36.89':139
- '83.#1.22.36':139
- '83.#1.92.15':139
- '83.#1.12.44':139
- '83.#1.8.37':139
- '83.##.43.201':139
- '83.#1.2.210':139
- '83.##.200.142':139
- '83.##.199.47':139
- '83.##.93.168':139
- '83.##.122.40':139
- '83.##.168.90':139
- '83.#1.15.82':139
- '83.#1.6.202':139
- '83.#1.9.205':139
- '83.#1.129.8':139
- '83.##.214.128':139
- '83.##.167.180':139
- '83.#1.253.9':139
- '83.##.222.177':139
- '83.##.154.163':139
- '83.##.210.234':139
- '83.##.223.63':139
- '83.#1.196.6':139
- '83.##.142.10':139
- '83.##.199.211':139
- '83.#1.64.51':139
- '83.##.175.35':139
- '83.##.51.124':139
- '83.##.30.117':139
- '83.##.123.106':139
- '83.#1.4.148':139
- '83.##.152.111':445
- '83.##.123.86':445
- '83.#1.50.45':445
- '83.##.116.175':445
- '83.#1.4.195':445
- '83.#1.86.25':445
- '83.##.200.137':445
- '83.##.200.212':445
- '83.#1.13.84':445
- '83.#1.45.59':445
- '83.##.83.164':445
- '83.##.249.57':445
- '83.##.127.108':445
- '83.##.116.233':445
- '83.##.114.174':445
- '83.##.83.145':445
- '83.##.68.127':445
- '83.#1.68.31':445
- '83.#1.46.68':445
- '83.##.55.214':445
- '83.##.158.235':445
- '83.#1.67.48':445
- '83.##.234.200':445
- '83.#1.27.53':445
- '83.##.107.82':445
- '83.##.101.26':445
- '83.##.119.105':445
- '83.##.131.79':445
- '83.##.211.29':445
- '83.##.225.120':139
- '83.##.47.109':139
- '83.##.156.125':139
- '83.#1.48.73':139
- '83.##.86.166':139
- '83.#1.198.0':445
- '83.#1.63.53':445
- '83.##.137.107':445
- '83.##.41.143':445
- '83.##.106.85':445
- '83.##.69.207':445
- '83.##.192.122':445
- '83.##.73.186':445
- '83.##.22.241':445
- '83.##.237.251':445
- '83.#1.54.6':445
- '83.#1.73.24':445
- '83.##.175.105':445
- '83.##.177.89':445
- '83.##.38.121':445
- '83.##.139.13':445
- '83.#1.7.139':445
- '83.##.115.15':445
- '83.##.166.12':445
- '83.##.121.51':445
- '83.##.12.218':445
- '83.#1.8.22':445
- '83.#1.88.45':445
- '83.##.112.127':139
- '83.##.183.112':139
- '83.##.126.252':139
- '83.##.94.145':139
- '83.##.252.94':139
- '83.##.198.32':445
- '83.##.145.175':445
- '83.#1.42.27':445
- '83.##.156.113':445
- '83.#1.3.150':445
- '83.##.76.125':445
- '83.##.219.116':445
- '83.##.111.87':445
- '83.##.111.64':445
- '83.#1.4.99':445
- '83.##.38.129':445
- '83.#1.11.14':445
- '83.##.185.252':445
- '83.#1.57.51':445
- '83.##.185.28':445
- '83.##.12.213':445
- '83.##.241.139':445
- '83.#1.36.24':445
- '83.##.26.139':445
- '83.##.181.132':445
- '83.#1.1.235':445
- '83.#1.2.9':445
- '83.##.232.131':445
- '83.#1.101.6':445
- '83.##.174.47':445
- '83.##.198.61':445
- '83.##.43.182':445
- '83.##.218.123':445
- '83.#1.25.54':445
- '83.##.219.170':139
- '83.##.12.218':139
- '83.##.166.12':139
- '83.#1.88.45':139
- '83.##.115.15':139
- '83.#1.8.22':139
- '83.##.121.51':139
- '83.#1.1.235':139
- '83.##.26.139':139
- '83.##.232.131':139
- '83.##.219.116':139
- '83.#1.2.9':139
- '83.#1.3.150':139
- '83.##.156.113':139
- '83.##.198.32':139
- '83.#1.42.27':139
- '83.##.76.125':139
- '83.##.145.175':139
- '83.##.175.105':139
- '83.##.177.89':139
- '83.##.38.121':139
- '83.##.139.13':139
- '83.#1.7.139':139
- '83.##.181.132':139
- '83.##.12.213':139
- '83.#1.57.51':139
- '83.#1.36.24':139
- '83.##.185.252':139
- '83.##.241.139':139
- '83.##.185.28':139
- '83.##.98.151':139
- '83.##.191.149':139
- '83.#1.1.140':139
- '83.##.164.19':139
- '83.##.252.213':139
- '83.##.43.182':139
- '83.##.174.47':139
- '83.#1.25.54':139
- '83.#1.101.6':139
- '83.##.218.123':139
- '83.##.198.61':139
- '83.##.111.87':139
- '83.##.111.64':139
- '83.#1.4.99':139
- '83.##.38.129':139
- '83.#1.11.14':139
- '83.##.97.174':139
- '83.##.15.252':139
- '83.#1.39.80':139
- '83.##.39.198':139
- '83.#1.209.2':139
- '83.#1.59.84':139
- '83.##.61.194':139
- '83.#1.6.200':139
- '83.#1.80.37':139
- '83.##.116.71':139
- '83.##.161.183':139
- '83.##.51.136':139
- '83.##.45.194':139
- '83.##.227.225':139
- '83.##.114.119':139
- '83.##.59.240':139
- '83.##.132.203':139
- '83.##.138.27':139
- '83.##.197.226':139
- '83.##.63.204':139
- '83.##.75.221':139
- '83.##.254.74':139
- '83.#1.4.158':139
- '83.#1.34.42':445
- '83.##.113.35':445
- '83.##.62.209':445
- '83.##.79.190':445
- '83.##.19.254':445
- '83.##.164.224':445
- '83.##.143.33':445
- '83.##.11.133':445
- '83.##.179.180':445
- '83.##.108.70':445
- '83.##.207.155':445
- '83.##.26.244':445
- '83.#1.75.32':445
- '83.#1.8.89':445
- '83.#1.99.5':139
- '83.##.160.126':445
- '83.##.158.209':445
- '83.##.174.95':445
- '83.#1.2.110':445
- '83.##.199.110':445
- '83.##.217.158':445
- '83.##.164.217':445
- '83.##.163.173':139
- '83.##.115.15':9988
- '83.#1.88.45':9988
- '83.##.145.175':9988
- '83.##.38.121':9988
- '83.##.156.113':9988
- '83.#1.101.6':9988
- '83.#1.8.89':139
- '83.##.26.244':139
- '83.##.160.126':139
- '83.##.218.123':9988
- '83.##.183.112':9988
- '83.##.98.151':445
- '83.##.191.149':445
- '83.#1.1.140':445
- '83.##.164.19':445
- '83.##.252.213':445
- '83.##.219.170':445
- '83.##.112.127':445
- '83.##.183.112':445
- '83.##.126.252':445
- '83.##.94.145':445
- '83.##.252.94':445
- '83.#1.75.32':139
- '83.##.179.180':139
- '83.##.143.33':139
- '83.##.207.155':139
- '83.##.164.224':139
- '83.##.108.70':139
- '83.##.11.133':139
- '83.##.91.127':139
- '83.##.74.177':139
- '83.#1.63.62':139
- '83.#1.73.24':139
- '83.##.63.227':139
- '83.##.199.110':139
- '83.##.174.95':139
- '83.##.164.217':139
- '83.##.158.209':139
- '83.##.217.158':139
- '83.#1.2.110':139
- '83.#1.34.42':139
- '83.##.113.35':139
- '83.##.62.209':139
- '83.##.79.190':139
- '83.##.19.254':139