Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '69.##.78.226':139
- '69.#2.52.18':139
- '69.##.194.103':139
- '69.##.240.220':139
- '69.##.106.246':139
- '69.##.148.53':139
- '69.##.149.103':139
- '69.##.82.219':139
- '69.##.85.243':139
- '69.#2.11.75':139
- '69.##.247.115':139
- '69.#2.4.182':139
- '69.##.26.137':139
- '69.##.65.176':139
- '69.##.214.80':139
- '69.##.249.78':139
- '69.#2.87.98':139
- '69.#2.26.88':139
- '69.##.213.60':139
- '69.##.68.231':139
- '69.##.152.19':139
- '69.#2.71.45':139
- '69.##.213.60':445
- '69.#2.87.98':445
- '69.##.152.19':445
- '69.##.26.137':445
- '69.##.68.231':445
- '69.##.106.246':445
- '69.##.194.103':445
- '69.##.240.220':445
- '69.#2.26.88':445
- '69.##.247.115':445
- '69.#2.4.182':445
- '69.##.151.158':139
- '69.##.145.86':139
- '69.#2.23.57':139
- '69.##.113.44':139
- '69.##.68.198':139
- '69.##.249.78':445
- '69.##.65.176':445
- '69.##.214.80':445
- '69.##.108.76':139
- '69.##.142.136':445
- '69.##.45.185':139
- '69.#2.136.2':139
- '69.##.210.112':139
- '69.##.175.103':139
- '69.##.86.175':139
- '69.##.79.143':139
- '69.#2.52.88':445
- '69.##.106.160':139
- '69.##.192.59':139
- '69.##.100.200':139
- '69.#2.10.97':139
- '69.##.218.122':139
- '69.##.167.90':139
- '69.##.196.145':139
- '69.##.136.177':139
- '69.##.121.99':139
- '69.##.210.164':139
- '69.##.251.201':139
- '69.##.164.124':139
- '69.##.11.227':139
- '69.##.157.53':139
- '69.#2.4.137':445
- '69.##.45.185':445
- '69.#2.136.2':445
- '69.##.210.112':445
- '69.##.175.103':445
- '69.##.86.175':445
- '69.##.79.143':445
- '69.##.142.136':139
- '69.##.106.160':445
- '69.##.192.59':445
- '69.##.100.200':445
- '69.#2.10.97':445
- '69.##.218.122':445
- '69.##.167.90':445
- '69.##.196.145':445
- '69.##.136.177':445
- '69.##.121.99':445
- '69.##.210.164':445
- '69.##.251.201':445
- '69.##.164.124':445
- '69.##.11.227':445
- '69.##.157.53':445
- '69.##.78.226':445
- '69.#2.31.3':139
- '69.##.195.120':139
- '69.##.200.42':445
- '69.#2.23.27':445
- '69.##.137.136':445
- '69.##.67.201':139
- '69.##.22.189':139
- '69.#2.18.2':139
- '69.##.136.187':139
- '69.##.242.159':139
- '69.#2.36.96':445
- '69.##.111.102':445
- '69.##.128.183':445
- '69.##.136.128':445
- '69.##.103.165':445
- '69.#2.80.1':445
- '69.##.146.163':445
- '69.##.192.24':445
- '69.##.163.95':445
- '69.##.249.45':445
- '69.#2.7.224':445
- '69.##.107.37':139
- '69.##.173.25':139
- '69.##.165.61':139
- '69.##.44.191':139
- '69.##.185.157':139
- '69.#2.2.107':139
- '69.##.254.153':139
- '69.##.119.160':139
- '69.#2.76.60':139
- '69.##.67.160':139
- '69.#2.81.65':139
- '69.##.137.55':139
- '69.#2.16.2':139
- '69.##.127.228':139
- '69.##.54.155':139
- '69.##.90.211':139
- '69.##.205.31':139
- '69.##.110.214':139
- '69.#2.28.90':139
- '69.##.200.76':139
- '69.##.117.190':139
- '69.#2.170.2':139
- '69.##.147.133':139
- '69.##.36.171':139
- '69.##.117.152':139
- '69.##.145.86':445
- '69.##.108.76':445
- '69.##.233.148':139
- '69.##.216.219':139
- '69.##.148.249':139
- '69.##.114.160':139
- '69.##.207.236':139
- '69.##.151.158':445
- '69.##.82.219':445
- '69.##.148.53':445
- '69.#2.11.75':445
- '69.#2.52.18':445
- '69.##.85.243':445
- '69.#2.71.45':445
- '69.#2.23.57':445
- '69.##.113.44':445
- '69.##.149.103':445
- '69.##.68.198':445
- '69.##.103.165':139
- '69.##.147.133':445
- '69.##.36.171':445
- '69.##.117.152':445
- '69.##.137.136':139
- '69.##.200.42':139
- '69.##.233.148':445
- '69.##.216.219':445
- '69.##.148.249':445
- '69.##.114.160':445
- '69.##.207.236':445
- '69.#2.23.27':139
- '69.##.128.183':139
- '69.##.249.45':139
- '69.##.111.102':139
- '69.#2.80.1':139
- '69.##.136.128':139
- '69.#2.36.96':139
- '69.##.192.24':139
- '69.##.146.163':139
- '69.#2.7.224':139
- '69.##.163.95':139
- '69.##.167.156':445
- '69.##.21.134':445
- '69.##.162.228':445
- '69.##.156.110':445
- '69.#2.78.2':445
- '69.#2.177.0':445
- '69.##.172.241':445
- '69.##.83.119':445
- '69.#2.144.0':445
- '69.##.41.238':445
- '69.##.100.201':445
- '69.#2.54.7':139
- '69.##.226.53':139
- '69.##.194.73':139
- '69.##.234.101':139
- '69.##.45.183':139
- '69.##.20.182':445
- '69.##.130.219':445
- '69.##.231.162':139
- '69.#2.30.91':139
- '69.##.101.98':139
- '69.##.88.107':445
- '69.##.142.212':445
- '69.#2.0.37':445
- '69.#2.72.84':445
- '69.##.151.175':445
- '69.##.240.196':445
- '69.##.231.121':445
- '69.#2.56.83':445
- '69.#2.87.58':445
- '69.#2.115.0':445
- '69.##.66.224':445
- '69.##.217.128':445
- '69.#2.132.6':445
- '69.##.163.254':445
- '69.##.52.190':445
- '69.#2.4.153':445
- '69.#2.34.5':445
- '69.##.14.208':445
- '69.##.124.174':445
- '69.##.65.243':445
- '69.#2.3.29':445
- '69.##.237.88':445
- '69.#2.4.153':139
- '69.#2.34.5':139
- '69.##.88.107':139
- '69.#2.177.0':139
- '69.##.172.241':139
- '69.#2.3.29':139
- '69.##.237.88':139
- '69.##.163.254':139
- '69.##.52.190':139
- '69.#2.132.6':139
- '69.##.83.119':139
- '69.##.130.219':139
- '69.##.100.201':139
- '69.##.20.182':139
- '69.##.162.228':139
- '69.#2.78.2':139
- '69.#2.144.0':139
- '69.##.41.238':139
- '69.##.21.134':139
- '69.##.156.110':139
- '69.##.167.156':139
- '69.##.65.243':139
- '69.##.138.219':139
- '69.##.170.53':139
- '69.##.154.147':139
- '69.##.231.121':139
- '69.#2.56.83':139
- '69.##.168.11':139
- '69.##.101.181':139
- '69.##.15.204':139
- '69.#2.46.88':139
- '69.##.250.146':139
- '69.#2.87.58':139
- '69.##.151.175':139
- '69.##.240.196':139
- '69.##.217.128':139
- '69.##.14.208':139
- '69.##.124.174':139
- '69.#2.115.0':139
- '69.##.66.224':139
- '69.#2.0.37':139
- '69.#2.72.84':139
- '69.##.142.212':139
- '69.##.154.147':445
- '69.##.69.212':445
- '69.#2.12.55':445
- '69.##.209.28':445
- '69.##.142.168':139
- '69.#2.80.85':445
- '69.#2.0.131':445
- '69.##.233.217':445
- '69.##.105.222':445
- '69.##.62.245':445
- '69.##.238.62':445
- '69.##.111.155':139
- '69.##.83.127':139
- '69.##.28.102':139
- '69.##.242.127':139
- '69.#2.37.52':139
- '69.##.225.230':139
- '69.##.54.135':139
- '69.##.180.96':139
- '69.##.60.219':139
- '69.##.249.140':139
- '69.##.219.249':139
- '69.##.93.175':445
- '69.##.60.219':445
- '69.##.180.96':445
- '69.##.249.140':445
- '69.##.28.102':445
- '69.##.219.249':445
- '69.#2.52.88':139
- '69.#2.4.137':139
- '69.##.142.168':445
- '69.##.54.135':445
- '69.##.111.155':445
- '69.##.83.127':445
- '69.#2.0.0':445
- '69.##.24.242':445
- '69.##.26.159':445
- '69.##.206.93':445
- '69.##.158.206':445
- '69.##.225.230':445
- '69.##.242.127':445
- '69.#2.37.52':445
- '69.#2.224.0':445
- '69.##.113.106':445
- '69.##.231.162':445
- '69.#2.177.0':9988
- '69.##.101.98':445
- '69.##.226.53':445
- '69.#2.30.91':445
- '69.##.52.190':9988
- '69.#2.132.6':9988
- '69.#2.34.5':9988
- '69.##.172.241':9988
- '69.##.88.107':9988
- '69.#2.54.7':445
- '69.##.250.146':445
- '69.##.15.204':445
- '69.#2.46.88':445
- '69.##.138.219':445
- '69.##.170.53':445
- '69.##.45.183':445
- '69.##.194.73':445
- '69.##.234.101':445
- '69.##.168.11':445
- '69.##.101.181':445
- '69.##.237.88':9988
- '69.##.206.93':139
- '69.##.158.206':139
- '69.##.93.175':139
- '69.##.105.222':139
- '69.#2.0.131':139
- '69.#2.224.0':139
- '69.##.113.106':139
- '69.##.24.242':139
- '69.##.26.159':139
- '69.#2.0.0':139
- '69.##.233.217':139
- '69.##.154.147':9988
- '69.#2.80.85':139
- '69.##.138.219':9988
- '69.##.163.254':9988
- '69.##.240.196':9988
- '69.##.62.245':139
- '69.##.238.62':139
- '69.#2.12.55':139
- '69.##.209.28':139
- '69.##.69.212':139