Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '67.##.81.213':445
- '67.##.166.128':445
- '67.#3.9.135':445
- '67.#3.14.90':445
- '67.##.210.209':445
- '67.#3.83.65':445
- '67.##.144.191':445
- '67.##.48.234':445
- '67.##.44.207':445
- '67.#3.95.83':445
- '67.##.119.214':445
- '67.##.130.253':445
- '67.#3.55.84':445
- '67.##.253.73':445
- '67.##.141.228':445
- '67.##.175.168':445
- '67.##.147.162':445
- '67.##.80.172':445
- '67.##.98.155':445
- '67.##.235.55':445
- '67.##.239.147':445
- '67.##.149.189':445
- '67.#3.7.60':139
- '67.##.87.237':139
- '67.##.199.114':139
- '67.##.202.91':445
- '67.##.71.161':139
- '67.#3.31.74':139
- '67.#3.98.18':139
- '67.##.98.230':139
- '67.##.171.14':139
- '67.##.178.76':139
- '67.##.234.177':139
- '67.##.109.141':445
- '67.##.126.212':139
- '67.#3.63.27':445
- '67.##.141.150':445
- '67.##.235.238':445
- '67.#3.7.104':139
- '67.#3.7.104':445
- '67.##.91.199':445
- '67.##.126.212':445
- '67.##.91.199':139
- '67.##.202.91':139
- '67.#3.95.83':139
- '67.##.119.214':139
- '67.#3.83.65':139
- '67.##.81.213':139
- '67.##.166.128':139
- '67.##.44.207':139
- '67.##.235.238':139
- '67.#3.63.27':139
- '67.##.141.150':139
- '67.##.144.191':139
- '67.##.48.234':139
- '67.##.239.147':139
- '67.##.149.189':139
- '67.##.147.162':139
- '67.##.130.253':139
- '67.#3.55.84':139
- '67.##.235.55':139
- '67.##.210.209':139
- '67.#3.9.135':139
- '67.#3.14.90':139
- '67.##.80.172':139
- '67.##.98.155':139
- '67.#3.133.4':445
- '67.##.238.251':445
- '67.#3.46.71':445
- '67.##.60.191':445
- '67.##.127.60':445
- '67.##.159.248':445
- '67.##.18.223':445
- '67.#3.35.51':445
- '67.##.228.139':445
- '67.##.253.98':445
- '67.##.139.253':445
- '67.##.183.164':445
- '67.##.130.183':445
- '67.#3.89.11':445
- '67.##.109.141':139
- '67.#3.71.8':445
- '67.##.61.234':445
- '67.#3.70.66':445
- '67.##.64.189':445
- '67.##.166.87':445
- '67.##.239.236':445
- '67.##.71.239':445
- '67.##.210.119':445
- '67.##.142.65':445
- '67.##.95.134':445
- '67.##.182.161':445
- '67.#3.1.183':445
- '67.##.11.231':445
- '67.##.11.247':445
- '67.##.140.147':445
- '67.##.253.21':445
- '67.#3.25.22':445
- '67.##.43.135':445
- '67.##.16.154':445
- '67.##.20.107':445
- '67.##.98.230':445
- '67.##.171.14':445
- '67.#3.98.18':445
- '67.##.153.243':445
- '67.##.253.253':445
- '67.##.248.109':445
- '67.##.105.67':445
- '67.##.35.104':445
- '67.##.99.207':445
- '67.##.19.213':445
- '67.##.243.198':445
- '67.##.32.127':445
- '67.##.85.188':445
- '67.##.126.85':445
- '67.##.202.95':445
- '67.##.153.249':139
- '67.#3.4.167':139
- '67.##.17.161':139
- '67.##.196.119':445
- '67.##.229.219':139
- '67.##.145.28':445
- '67.##.119.114':445
- '67.#3.31.71':445
- '67.##.55.135':445
- '67.##.72.124':445
- '67.##.40.140':445
- '67.#3.6.115':445
- '67.##.219.219':445
- '67.##.154.113':445
- '67.##.131.223':445
- '67.#3.39.5':445
- '67.#3.25.22':139
- '67.##.43.135':139
- '67.##.11.231':139
- '67.##.210.119':139
- '67.##.142.65':139
- '67.##.253.21':139
- '67.##.72.124':139
- '67.#3.31.71':139
- '67.##.55.135':139
- '67.##.11.247':139
- '67.##.140.147':139
- '67.##.35.104':139
- '67.##.99.207':139
- '67.##.153.243':139
- '67.##.16.154':139
- '67.##.20.107':139
- '67.##.105.67':139
- '67.#3.1.183':139
- '67.##.95.134':139
- '67.##.182.161':139
- '67.##.253.253':139
- '67.##.248.109':139
- '67.##.196.119':139
- '67.##.71.161':445
- '67.##.202.95':139
- '67.##.19.213':139
- '67.##.243.198':139
- '67.##.199.114':445
- '67.##.178.76':445
- '67.##.234.177':445
- '67.#3.31.74':445
- '67.#3.7.60':445
- '67.##.87.237':445
- '67.##.131.223':139
- '67.#3.39.5':139
- '67.##.40.140':139
- '67.##.145.28':139
- '67.##.119.114':139
- '67.##.154.113':139
- '67.##.126.85':139
- '67.##.32.127':139
- '67.##.85.188':139
- '67.#3.6.115':139
- '67.##.219.219':139
- '67.##.253.73':139
- '67.#3.2.166':445
- '67.#3.48.47':445
- '67.##.187.96':445
- '67.##.163.75':445
- '67.##.42.137':445
- '67.##.207.42':445
- '67.##.41.238':445
- '67.#3.99.42':445
- '67.##.238.51':445
- '67.##.157.18':445
- '67.#3.56.35':445
- '67.##.126.170':139
- '67.##.201.158':139
- '67.##.171.220':139
- '67.##.156.23':139
- '67.##.165.156':139
- '67.##.229.196':139
- '67.##.42.170':445
- '67.##.30.150':445
- '67.##.126.59':445
- '67.##.174.147':139
- '67.##.219.46':445
- '67.##.218.152':445
- '67.##.179.29':445
- '67.#3.15.38':445
- '67.##.237.203':445
- '67.#3.90.35':445
- '67.#3.94.98':445
- '67.#3.43.81':445
- '67.##.122.22':445
- '67.##.226.190':445
- '67.##.227.88':445
- '67.#3.44.13':445
- '67.##.197.181':445
- '67.#3.31.76':445
- '67.##.175.253':445
- '67.##.114.99':445
- '67.##.92.114':445
- '67.##.163.32':445
- '67.##.209.187':445
- '67.##.174.101':445
- '67.##.187.81':445
- '67.#3.51.23':445
- '67.##.47.131':445
- '67.#3.99.42':139
- '67.##.114.99':139
- '67.##.41.238':139
- '67.#3.56.35':139
- '67.##.238.51':139
- '67.##.92.114':139
- '67.##.163.32':139
- '67.#3.51.23':139
- '67.#3.31.76':139
- '67.##.175.253':139
- '67.##.197.181':139
- '67.##.30.150':139
- '67.##.163.75':139
- '67.##.42.170':139
- '67.##.126.59':139
- '67.##.219.46':139
- '67.##.42.137':139
- '67.##.207.42':139
- '67.##.157.18':139
- '67.#3.48.47':139
- '67.##.187.96':139
- '67.#3.2.166':139
- '67.##.122.22':139
- '67.##.214.229':139
- '67.#3.43.81':139
- '67.#3.44.13':139
- '67.##.226.190':139
- '67.##.172.197':139
- '67.##.137.80':139
- '67.##.111.97':139
- '67.##.40.146':139
- '67.##.200.147':139
- '67.#3.89.37':139
- '67.##.174.101':139
- '67.##.237.203':139
- '67.##.209.187':139
- '67.##.47.131':139
- '67.##.187.81':139
- '67.#3.90.35':139
- '67.#3.94.98':139
- '67.##.227.88':139
- '67.##.179.29':139
- '67.#3.15.38':139
- '67.##.218.152':139
- '67.#3.50.82':139
- '67.##.171.42':139
- '67.##.171.46':139
- '67.##.39.204':445
- '67.##.39.249':445
- '67.##.149.15':139
- '67.##.149.15':445
- '67.#3.71.8':139
- '67.##.171.42':445
- '67.##.171.46':445
- '67.#3.50.82':445
- '67.##.41.129':445
- '67.##.134.183':445
- '67.##.133.62':445
- '67.##.215.116':445
- '67.##.97.151':445
- '67.##.22.201':445
- '67.#3.51.26':445
- '67.##.203.192':445
- '67.#3.4.92':445
- '67.##.146.43':445
- '67.#3.92.48':445
- '67.##.159.248':139
- '67.##.253.98':139
- '67.##.238.251':139
- '67.#3.46.71':139
- '67.#3.133.4':139
- '67.##.139.253':139
- '67.##.141.228':139
- '67.##.175.168':139
- '67.#3.35.51':139
- '67.##.228.139':139
- '67.##.18.223':139
- '67.##.61.234':139
- '67.##.239.236':139
- '67.##.130.183':139
- '67.#3.89.11':139
- '67.##.183.164':139
- '67.##.71.239':139
- '67.##.60.191':139
- '67.##.127.60':139
- '67.##.64.189':139
- '67.##.166.87':139
- '67.#3.70.66':139
- '67.##.187.81':9988
- '67.#3.51.23':9988
- '67.##.174.147':445
- '67.##.201.158':445
- '67.##.229.196':445
- '67.#3.31.76':9988
- '67.##.126.59':9988
- '67.#3.99.42':9988
- '67.##.42.170':9988
- '67.##.175.253':9988
- '67.##.157.18':9988
- '67.#3.89.37':445
- '67.##.40.146':445
- '67.##.200.147':445
- '67.##.214.229':445
- '67.##.172.197':445
- '67.##.137.80':445
- '67.##.171.220':445
- '67.##.126.170':445
- '67.##.165.156':445
- '67.##.111.97':445
- '67.##.156.23':445
- '67.##.22.201':139
- '67.##.146.43':139
- '67.##.134.183':139
- '67.##.133.62':139
- '67.##.41.129':139
- '67.#3.92.48':139
- '67.##.39.204':139
- '67.##.39.249':139
- '67.##.203.192':139
- '67.#3.4.92':139
- '67.#3.51.26':139
- '67.##.197.181':9988
- '67.##.163.75':9988
- '67.##.187.96':9988
- '67.##.47.131':9988
- '67.##.42.137':9988
- '67.##.41.238':9988
- '67.##.215.116':139
- '67.##.97.151':139
- '67.##.30.150':9988
- '67.##.207.42':9988
- '67.#3.48.47':9988