Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '63.##.131.143':139
- '63.#9.71.26':139
- '63.##.40.204':139
- '63.##.99.239':139
- '63.#9.5.221':139
- '63.##.77.162':139
- '63.##.225.63':139
- '63.##.162.48':139
- '63.#9.56.39':139
- '63.##.176.46':139
- '63.#9.62.10':139
- '63.##.220.145':139
- '63.##.132.51':139
- '63.##.225.132':139
- '63.##.224.252':139
- '63.##.206.225':139
- '63.##.125.41':139
- '63.##.209.250':139
- '63.#9.95.28':139
- '63.##.203.88':139
- '63.#9.34.13':139
- '63.#9.34.13':445
- '63.#9.95.28':445
- '63.##.203.88':445
- '63.##.220.145':445
- '63.##.132.51':445
- '63.##.99.239':445
- '63.#9.5.221':445
- '63.#9.62.10':445
- '63.##.125.41':445
- '63.##.209.250':445
- '63.##.225.132':445
- '63.##.80.221':445
- '63.##.98.237':445
- '63.#9.81.15':139
- '63.##.111.100':139
- '63.##.15.176':139
- '63.##.224.252':445
- '63.##.206.225':445
- '63.##.118.168':445
- '63.#9.8.160':445
- '63.#9.198.8':445
- '63.#9.76.87':139
- '63.##.245.145':445
- '63.##.218.202':139
- '63.#9.84.57':139
- '63.##.21.141':139
- '63.##.125.251':445
- '63.##.98.239':445
- '63.#9.60.26':445
- '63.#9.79.36':445
- '63.##.180.96':445
- '63.##.115.210':139
- '63.##.99.184':139
- '63.#9.112.9':139
- '63.##.17.230':139
- '63.##.41.139':139
- '63.#9.43.14':139
- '63.##.119.145':139
- '63.#9.94.22':139
- '63.#9.50.99':139
- '63.##.246.23':139
- '63.##.213.60':139
- '63.##.218.202':445
- '63.#9.76.87':445
- '63.##.21.141':445
- '63.##.115.210':445
- '63.#9.84.57':445
- '63.#9.198.8':139
- '63.##.118.168':139
- '63.#9.8.160':139
- '63.##.80.221':139
- '63.##.98.237':139
- '63.#9.94.22':445
- '63.##.17.230':445
- '63.##.99.184':445
- '63.#9.43.14':445
- '63.#9.87.21':445
- '63.##.41.139':445
- '63.#9.50.99':445
- '63.##.119.145':445
- '63.##.213.60':445
- '63.#9.112.9':445
- '63.##.246.23':445
- '63.##.118.66':139
- '63.##.151.142':139
- '63.##.25.174':139
- '63.##.10.253':445
- '63.##.152.231':445
- '63.##.143.166':139
- '63.##.113.138':139
- '63.##.119.28':139
- '63.##.157.60':139
- '63.#9.98.0':139
- '63.##.19.191':445
- '63.#9.36.75':445
- '63.##.95.215':445
- '63.##.134.117':445
- '63.#9.76.56':445
- '63.##.154.193':445
- '63.##.145.226':445
- '63.##.18.146':445
- '63.##.226.148':445
- '63.##.184.63':445
- '63.#9.39.61':445
- '63.##.64.168':139
- '63.##.111.204':139
- '63.##.237.161':139
- '63.##.174.18':139
- '63.##.11.160':139
- '63.##.178.91':139
- '63.##.67.215':139
- '63.##.162.140':139
- '63.##.159.200':139
- '63.#9.97.61':139
- '63.#9.19.2':139
- '63.##.187.126':139
- '63.##.157.244':139
- '63.#9.75.12':139
- '63.##.109.113':139
- '63.##.12.110':139
- '63.##.21.235':139
- '63.#9.2.21':139
- '63.##.40.194':139
- '63.#9.13.43':139
- '63.##.226.227':139
- '63.##.108.123':139
- '63.#9.75.25':139
- '63.##.123.69':139
- '63.##.16.157':139
- '63.#9.69.29':139
- '63.#9.57.10':139
- '63.#9.76.56':139
- '63.#9.9.195':139
- '63.##.124.216':139
- '63.##.143.130':139
- '63.#9.81.15':445
- '63.#9.56.39':445
- '63.##.176.46':445
- '63.#9.71.26':445
- '63.##.40.204':445
- '63.##.131.143':445
- '63.##.111.100':445
- '63.##.15.176':445
- '63.##.225.63':445
- '63.##.162.48':445
- '63.##.77.162':445
- '63.##.123.69':445
- '63.##.108.123':445
- '63.#9.69.29':445
- '63.##.152.231':139
- '63.##.16.157':445
- '63.#9.9.195':445
- '63.#9.57.10':445
- '63.##.143.130':445
- '63.#9.75.25':445
- '63.##.124.216':445
- '63.##.10.253':139
- '63.##.95.215':139
- '63.##.184.63':139
- '63.#9.36.75':139
- '63.##.154.193':139
- '63.##.134.117':139
- '63.##.18.146':139
- '63.##.19.191':139
- '63.##.145.226':139
- '63.#9.39.61':139
- '63.##.226.148':139
- '63.#9.87.21':139
- '63.##.72.119':445
- '63.#9.58.12':445
- '63.##.119.68':445
- '63.#9.4.184':445
- '63.##.104.181':445
- '63.##.10.198':445
- '63.##.181.144':445
- '63.##.255.157':445
- '63.##.100.199':445
- '63.#9.84.41':445
- '63.#9.5.140':445
- '63.##.115.201':139
- '63.##.109.126':139
- '63.##.201.64':139
- '63.##.72.137':139
- '63.##.217.58':139
- '63.##.115.42':139
- '63.#9.1.44':445
- '63.#9.46.20':139
- '63.#9.210.9':139
- '63.##.229.50':139
- '63.##.171.64':445
- '63.##.111.171':445
- '63.#9.65.34':445
- '63.##.249.174':445
- '63.#9.29.24':445
- '63.##.198.233':445
- '63.##.64.120':445
- '63.##.115.39':445
- '63.#9.47.55':445
- '63.#9.52.30':445
- '63.#9.14.96':445
- '63.##.52.245':445
- '63.#9.70.93':445
- '63.##.234.27':445
- '63.#9.4.40':445
- '63.##.27.178':445
- '63.##.20.200':445
- '63.##.136.166':445
- '63.#9.18.29':445
- '63.##.166.46':445
- '63.##.51.121':445
- '63.##.234.27':139
- '63.##.52.245':139
- '63.##.27.178':139
- '63.##.181.144':139
- '63.#9.4.40':139
- '63.#9.18.29':139
- '63.##.20.200':139
- '63.##.51.121':139
- '63.#9.70.93':139
- '63.##.166.46':139
- '63.##.10.198':139
- '63.##.104.181':139
- '63.##.119.68':139
- '63.#9.1.44':139
- '63.#9.4.184':139
- '63.#9.5.140':139
- '63.#9.84.41':139
- '63.##.255.157':139
- '63.##.100.199':139
- '63.##.72.119':139
- '63.#9.58.12':139
- '63.##.186.134':139
- '63.##.140.11':139
- '63.##.56.243':139
- '63.##.64.120':139
- '63.##.213.75':139
- '63.##.129.11':139
- '63.##.137.47':139
- '63.##.181.13':139
- '63.##.111.170':139
- '63.##.123.254':139
- '63.##.198.233':139
- '63.#9.29.24':139
- '63.#9.65.34':139
- '63.##.249.174':139
- '63.##.136.166':139
- '63.#9.14.96':139
- '63.#9.52.30':139
- '63.##.115.39':139
- '63.#9.47.55':139
- '63.##.171.64':139
- '63.##.111.171':139
- '63.##.62.154':445
- '63.##.57.107':445
- '63.##.18.135':445
- '63.##.168.70':139
- '63.#9.6.177':139
- '63.##.103.230':445
- '63.#9.7.104':445
- '63.##.142.131':445
- '63.##.142.232':445
- '63.##.45.214':445
- '63.##.104.214':139
- '63.##.101.73':139
- '63.##.140.15':139
- '63.##.118.63':139
- '63.##.22.188':139
- '63.#9.20.71':139
- '63.#9.74.21':139
- '63.#9.3.156':139
- '63.##.17.223':139
- '63.##.18.120':139
- '63.#9.26.16':139
- '63.#9.6.177':445
- '63.##.245.145':139
- '63.##.168.70':445
- '63.#9.3.156':445
- '63.##.104.214':445
- '63.##.125.251':139
- '63.##.98.239':139
- '63.#9.60.26':139
- '63.#9.79.36':139
- '63.##.180.96':139
- '63.#9.74.21':445
- '63.#9.20.71':445
- '63.##.118.63':445
- '63.##.22.188':445
- '63.#9.131.7':445
- '63.##.201.22':445
- '63.#9.26.16':445
- '63.##.17.223':445
- '63.##.18.120':445
- '63.##.101.73':445
- '63.##.140.15':445
- '63.#9.210.9':445
- '63.##.229.50':445
- '63.##.109.126':445
- '63.##.201.64':445
- '63.##.115.201':445
- '63.#9.5.140':9988
- '63.#9.58.12':9988
- '63.#9.1.44':9988
- '63.#9.46.20':445
- '63.##.115.42':445
- '63.##.217.58':445
- '63.##.140.11':445
- '63.##.111.170':445
- '63.##.186.134':445
- '63.##.213.75':445
- '63.##.56.243':445
- '63.##.137.47':445
- '63.##.72.137':445
- '63.##.129.11':445
- '63.##.123.254':445
- '63.##.181.13':445
- '63.##.142.232':139
- '63.##.45.214':139
- '63.##.57.107':139
- '63.##.18.135':139
- '63.##.62.154':139
- '63.#9.131.7':139
- '63.##.201.22':139
- '63.#9.7.104':139
- '63.##.142.131':139
- '63.##.103.230':139
- '63.##.115.42':9988
- '63.##.181.144':9988
- '63.##.51.121':9988
- '63.##.10.198':9988
- '63.##.100.199':9988
- '63.#9.84.41':9988
- '63.##.213.75':9988
- '63.##.56.243':9988
- '63.#9.14.96':9988
- '63.#9.18.29':9988
- '63.##.20.200':9988