Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '84.##.202.72':139
- '84.#1.9.38':139
- '84.##.226.85':139
- '84.##.215.58':139
- '84.##.153.106':139
- '84.##.40.200':445
- '84.##.224.40':445
- '84.##.96.102':139
- '84.#1.35.24':445
- '84.##.145.182':139
- '84.##.210.95':139
- '84.##.71.210':139
- '84.##.13.180':139
- '84.#1.6.244':139
- '84.#1.54.11':139
- '84.##.189.183':139
- '84.##.42.190':139
- '84.##.138.29':139
- '84.##.183.137':139
- '84.##.248.222':445
- '84.##.252.95':445
- '84.##.120.225':445
- '84.#1.23.79':445
- '84.##.221.214':445
- '84.##.104.76':445
- '84.##.56.100':445
- '84.##.101.209':445
- '84.#1.1.124':445
- '84.#1.94.65':445
- '84.##.124.152':445
- '84.##.86.149':445
- '84.##.90.218':445
- '84.#1.98.41':445
- '84.##.120.113':445
- '84.##.70.138':445
- '84.#1.33.34':445
- '84.##.143.50':445
- '84.##.90.252':445
- '84.##.10.157':445
- '84.##.86.149':139
- '84.##.90.218':139
- '84.#1.98.41':139
- '84.##.120.113':139
- '84.##.70.138':139
- '84.#1.33.34':139
- '84.##.143.50':139
- '84.##.90.252':139
- '84.##.10.157':139
- '84.##.248.222':139
- '84.#1.66.85':139
- '84.##.112.55':139
- '84.##.223.204':445
- '84.##.156.223':445
- '84.#1.66.85':445
- '84.##.40.200':139
- '84.##.224.40':139
- '84.##.112.55':445
- '84.#1.35.24':139
- '84.##.124.152':139
- '84.##.129.27':139
- '84.#1.76.99':139
- '84.##.164.90':139
- '84.#1.94.6':139
- '84.#1.48.76':139
- '84.#1.69.50':139
- '84.##.237.209':139
- '84.##.101.75':139
- '84.##.172.38':139
- '84.##.115.164':139
- '84.##.252.95':139
- '84.##.120.225':139
- '84.#1.23.79':139
- '84.##.221.214':139
- '84.##.104.76':139
- '84.##.56.100':139
- '84.##.101.209':139
- '84.#1.1.124':139
- '84.#1.94.65':139
- '84.##.115.164':445
- '84.##.119.86':139
- '84.##.240.119':139
- '84.#1.71.59':139
- '84.#1.86.38':139
- '84.##.27.241':139
- '84.#1.7.4':139
- '84.#1.34.20':139
- '84.#1.58.88':139
- '84.#1.96.26':139
- '84.##.237.139':139
- '84.##.72.229':139
- '84.##.15.157':139
- '84.##.135.140':139
- '84.##.168.174':139
- '84.##.120.128':139
- '84.##.174.40':139
- '84.#1.9.29':139
- '84.##.221.77':139
- '84.##.39.203':139
- '84.##.223.215':139
- '84.##.195.90':139
- '84.##.75.210':139
- '84.##.18.158':139
- '84.#1.6.59':139
- '84.##.247.75':139
- '84.##.205.124':139
- '84.##.181.67':139
- '84.##.215.211':139
- '84.##.165.245':139
- '84.##.99.188':139
- '84.##.218.162':139
- '84.##.15.125':139
- '84.##.247.223':139
- '84.##.71.147':139
- '84.##.67.120':139
- '84.#1.25.95':139
- '84.#1.9.31':139
- '84.#1.5.67':139
- '84.##.65.173':139
- '84.##.71.210':445
- '84.#1.54.11':445
- '84.#1.6.244':445
- '84.##.210.95':445
- '84.##.138.29':445
- '84.##.42.190':445
- '84.##.145.182':445
- '84.##.183.137':445
- '84.##.189.183':445
- '84.##.13.180':445
- '84.##.129.27':445
- '84.#1.76.99':445
- '84.##.164.90':445
- '84.#1.94.6':445
- '84.#1.48.76':445
- '84.#1.69.50':445
- '84.##.237.209':445
- '84.##.101.75':445
- '84.##.172.38':445
- '84.##.226.85':445
- '84.#1.8.9':139
- '84.#1.215.4':139
- '84.##.105.151':139
- '84.##.233.45':139
- '84.#1.85.68':139
- '84.##.184.187':139
- '84.##.172.247':139
- '84.#1.9.162':139
- '84.##.251.178':139
- '84.#1.14.34':139
- '84.#1.9.38':445
- '84.##.153.106':445
- '84.##.215.58':445
- '84.##.202.72':445
- '84.##.96.102':445
- '84.#1.8.106':445
- '84.##.100.186':445
- '84.#1.8.106':139
- '84.##.100.186':139
- '84.##.186.154':445
- '84.##.22.205':445
- '84.##.203.18':139
- '84.##.171.29':139
- '84.#1.88.1':445
- '84.#1.14.53':445
- '84.##.136.172':445
- '84.##.181.186':445
- '84.##.155.22':445
- '84.##.18.186':139
- '84.##.144.223':139
- '84.#1.35.27':139
- '84.##.175.25':139
- '84.#1.158.7':139
- '84.##.223.191':139
- '84.#1.91.77':139
- '84.##.186.158':139
- '84.##.33.225':139
- '84.##.227.129':139
- '84.##.250.148':445
- '84.##.181.225':445
- '84.#1.13.62':445
- '84.#1.52.11':445
- '84.##.190.51':445
- '84.##.150.13':445
- '84.##.232.205':445
- '84.##.129.10':445
- '84.##.145.250':445
- '84.##.254.162':445
- '84.##.222.70':445
- '84.#1.60.18':445
- '84.##.133.142':445
- '84.##.49.224':445
- '84.#1.48.7':445
- '84.##.210.53':445
- '84.##.179.148':445
- '84.##.219.13':445
- '84.#1.0.68':445
- '84.##.49.149':445
- '84.##.210.53':139
- '84.#1.0.68':139
- '84.#1.60.18':139
- '84.##.133.142':139
- '84.##.49.149':139
- '84.##.222.70':139
- '84.#1.52.11':139
- '84.##.179.148':139
- '84.##.219.13':139
- '84.#1.48.7':139
- '84.##.186.154':139
- '84.##.181.186':139
- '84.##.155.22':139
- '84.##.22.205':139
- '84.#1.88.1':139
- '84.##.250.148':139
- '84.##.49.224':139
- '84.#1.14.53':139
- '84.##.136.172':139
- '84.##.190.51':139
- '84.##.74.141':139
- '84.##.102.238':139
- '84.#1.8.103':139
- '84.##.147.132':139
- '84.#1.1.241':139
- '84.##.18.227':139
- '84.#1.31.18':139
- '84.##.205.92':139
- '84.##.183.252':139
- '84.#1.71.62':139
- '84.##.150.13':139
- '84.##.145.250':139
- '84.##.181.225':139
- '84.#1.13.62':139
- '84.##.254.162':139
- '84.#1.57.35':139
- '84.##.223.176':139
- '84.##.232.205':139
- '84.##.129.10':139
- '84.#1.57.35':445
- '84.##.97.231':139
- '84.##.155.224':139
- '84.##.198.95':139
- '84.##.102.198':139
- '84.##.44.224':139
- '84.##.240.179':139
- '84.##.223.204':139
- '84.#1.67.70':139
- '84.##.168.148':139
- '84.##.222.12':139
- '84.##.181.99':139
- '84.##.232.181':139
- '84.##.37.199':139
- '84.##.82.121':139
- '84.##.216.232':139
- '84.##.204.175':139
- '84.##.226.230':139
- '84.##.147.17':139
- '84.##.232.33':139
- '84.##.156.223':139
- '84.##.102.198':445
- '84.##.97.231':445
- '84.##.222.12':445
- '84.##.198.95':445
- '84.##.155.224':445
- '84.##.168.148':445
- '84.##.240.179':445
- '84.##.44.224':445
- '84.#1.67.70':445
- '84.##.226.230':445
- '84.##.82.121':445
- '84.##.181.99':445
- '84.##.193.213':445
- '84.##.37.199':445
- '84.##.232.181':445
- '84.##.232.33':445
- '84.##.204.175':445
- '84.##.216.232':445
- '84.##.147.17':445
- '84.#1.158.7':445
- '84.##.144.223':445
- '84.#1.31.18':445
- '84.##.175.25':445
- '84.#1.35.27':445
- '84.##.227.129':445
- '84.#1.91.77':445
- '84.##.223.191':445
- '84.##.33.225':445
- '84.##.18.227':445
- '84.#1.8.103':445
- '84.##.147.132':445
- '84.##.223.176':445
- '84.#1.71.62':445
- '84.##.74.141':445
- '84.##.205.92':445
- '84.##.183.252':445
- '84.##.102.238':445
- '84.#1.1.241':445
- '84.##.186.158':445
- '84.##.254.162':9988
- '84.##.223.176':9988
- '84.#1.52.11':9988
- '84.##.145.250':9988
- '84.##.74.141':9988
- '84.#1.71.62':9988
- '84.##.193.213':139
- '84.##.186.158':9988
- '84.##.183.252':9988
- '84.##.219.13':9988
- '84.##.171.29':445
- '84.##.22.205':9988
- '84.##.18.186':445
- '84.##.203.18':445
- '84.#1.48.7':9988
- '84.##.210.53':9988
- '84.#1.0.68':9988
- '84.#1.60.18':9988
- '84.##.133.142':9988