Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '84.##.244.186':445
- '84.##.123.50':445
- '84.##.186.216':445
- '84.##.172.161':445
- '84.##.178.230':445
- '84.#9.22.86':445
- '84.##.189.73':139
- '84.##.117.114':139
- '84.##.104.105':445
- '84.##.56.230':445
- '84.##.64.203':445
- '84.##.219.80':445
- '84.##.149.192':445
- '84.##.110.175':445
- '84.#9.45.89':445
- '84.##.11.210':445
- '84.##.153.31':445
- '84.##.53.148':445
- '84.##.173.73':445
- '84.##.59.142':445
- '84.##.191.13':445
- '84.##.125.191':445
- '84.##.100.29':445
- '84.##.167.100':445
- '84.#9.74.51':445
- '84.##.69.163':445
- '84.##.218.164':445
- '84.#9.63.3':445
- '84.##.138.20':139
- '84.##.35.120':139
- '84.##.117.38':139
- '84.##.49.108':445
- '84.##.111.129':139
- '84.#9.74.51':139
- '84.##.100.29':139
- '84.##.218.164':139
- '84.##.76.117':139
- '84.##.69.163':139
- '84.##.167.100':139
- '84.##.117.114':445
- '84.##.76.117':445
- '84.##.189.73':445
- '84.#9.63.3':139
- '84.##.49.108':139
- '84.##.172.161':139
- '84.##.178.230':139
- '84.##.173.73':139
- '84.##.59.142':139
- '84.##.53.148':139
- '84.##.186.216':139
- '84.##.56.230':139
- '84.##.64.203':139
- '84.#9.22.86':139
- '84.##.244.186':139
- '84.##.123.50':139
- '84.#9.45.89':139
- '84.##.11.210':139
- '84.##.26.127':139
- '84.##.136.36':139
- '84.##.206.152':139
- '84.##.110.175':139
- '84.##.191.13':139
- '84.##.125.191':139
- '84.##.153.31':139
- '84.##.219.80':139
- '84.##.149.192':139
- '84.##.118.220':445
- '84.#9.6.167':445
- '84.##.140.86':445
- '84.#9.2.85':445
- '84.##.79.170':445
- '84.#9.89.7':445
- '84.##.206.152':445
- '84.##.26.127':445
- '84.##.136.36':445
- '84.##.46.151':445
- '84.##.61.182':445
- '84.##.229.165':445
- '84.##.178.238':445
- '84.##.149.189':445
- '84.##.104.105':139
- '84.##.207.137':445
- '84.##.205.87':445
- '84.##.229.131':445
- '84.#9.77.0':445
- '84.##.198.34':445
- '84.##.85.162':445
- '84.##.155.85':445
- '84.##.112.89':445
- '84.##.201.47':445
- '84.##.36.153':445
- '84.##.70.250':445
- '84.##.172.122':445
- '84.##.199.198':445
- '84.#9.62.4':445
- '84.#9.84.61':445
- '84.##.101.189':445
- '84.##.194.147':445
- '84.##.53.175':445
- '84.##.118.87':445
- '84.##.239.16':445
- '84.##.59.199':445
- '84.##.177.129':445
- '84.##.227.30':445
- '84.##.122.239':445
- '84.##.27.113':445
- '84.##.156.102':445
- '84.##.147.246':445
- '84.##.93.123':445
- '84.##.33.186':445
- '84.#9.125.3':139
- '84.##.95.250':139
- '84.##.131.92':139
- '84.##.156.127':445
- '84.##.21.136':139
- '84.##.193.178':139
- '84.##.168.217':139
- '84.#9.15.61':139
- '84.##.217.142':139
- '84.#9.37.81':139
- '84.##.145.53':139
- '84.##.58.179':445
- '84.##.236.58':445
- '84.##.179.29':445
- '84.##.252.83':445
- '84.#9.145.7':445
- '84.#9.2.80':445
- '84.##.130.64':445
- '84.##.200.136':445
- '84.#9.51.16':445
- '84.##.194.174':445
- '84.#9.82.27':445
- '84.##.70.250':139
- '84.##.172.122':139
- '84.##.156.102':139
- '84.##.147.246':139
- '84.##.27.113':139
- '84.##.36.153':139
- '84.##.194.147':139
- '84.##.53.175':139
- '84.##.199.198':139
- '84.##.112.89':139
- '84.##.201.47':139
- '84.##.177.129':139
- '84.##.227.30':139
- '84.##.245.137':139
- '84.##.10.149':139
- '84.#9.196.9':139
- '84.##.59.199':139
- '84.##.93.123':139
- '84.##.33.186':139
- '84.##.122.239':139
- '84.##.118.87':139
- '84.##.239.16':139
- '84.##.156.127':139
- '84.##.111.129':445
- '84.##.200.136':139
- '84.#9.51.16':139
- '84.##.130.64':139
- '84.##.117.38':445
- '84.#9.196.9':445
- '84.##.245.137':445
- '84.##.10.149':445
- '84.##.138.20':445
- '84.##.35.120':445
- '84.##.252.83':139
- '84.#9.145.7':139
- '84.#9.84.61':139
- '84.##.101.189':139
- '84.#9.62.4':139
- '84.##.179.29':139
- '84.##.194.174':139
- '84.#9.82.27':139
- '84.#9.2.80':139
- '84.##.58.179':139
- '84.##.236.58':139
- '84.##.61.182':139
- '84.##.111.190':445
- '84.##.252.13':445
- '84.##.110.86':445
- '84.#9.15.9':445
- '84.##.250.223':445
- '84.##.252.148':445
- '84.##.167.165':445
- '84.##.158.231':445
- '84.##.226.212':445
- '84.##.35.200':445
- '84.##.64.164':445
- '84.##.117.170':139
- '84.##.50.219':139
- '84.##.170.77':139
- '84.##.164.16':139
- '84.#9.77.40':139
- '84.##.117.31':139
- '84.##.111.254':445
- '84.##.149.179':445
- '84.##.154.113':445
- '84.##.231.159':139
- '84.#9.84.90':445
- '84.##.70.154':445
- '84.#9.74.70':445
- '84.##.31.185':445
- '84.#9.8.76':445
- '84.##.151.123':445
- '84.#9.52.74':445
- '84.##.205.15':445
- '84.##.126.204':445
- '84.##.206.58':445
- '84.##.126.52':445
- '84.##.93.172':445
- '84.##.63.179':445
- '84.##.44.130':445
- '84.##.106.65':445
- '84.#9.51.86':445
- '84.#9.66.51':445
- '84.#9.37.18':445
- '84.##.241.152':445
- '84.##.29.238':445
- '84.##.33.128':445
- '84.#9.77.34':445
- '84.##.108.88':445
- '84.##.158.231':139
- '84.#9.51.86':139
- '84.##.167.165':139
- '84.##.64.164':139
- '84.##.226.212':139
- '84.#9.66.51':139
- '84.#9.37.18':139
- '84.#9.77.34':139
- '84.##.44.130':139
- '84.##.106.65':139
- '84.##.63.179':139
- '84.##.111.254':139
- '84.##.149.179':139
- '84.##.154.113':139
- '84.##.250.223':139
- '84.#9.15.9':139
- '84.#9.84.90':139
- '84.##.252.148':139
- '84.##.35.200':139
- '84.##.111.190':139
- '84.##.110.86':139
- '84.##.252.13':139
- '84.##.126.204':139
- '84.##.107.126':139
- '84.##.205.15':139
- '84.##.93.172':139
- '84.##.206.58':139
- '84.##.155.95':139
- '84.##.167.193':139
- '84.##.54.247':139
- '84.##.20.156':139
- '84.#9.7.20':139
- '84.#9.68.11':139
- '84.##.29.238':139
- '84.#9.8.76':139
- '84.##.241.152':139
- '84.##.108.88':139
- '84.##.33.128':139
- '84.##.151.123':139
- '84.#9.52.74':139
- '84.##.126.52':139
- '84.#9.74.70':139
- '84.##.31.185':139
- '84.##.70.154':139
- '84.##.172.119':139
- '84.#9.35.96':139
- '84.##.116.206':139
- '84.#9.72.29':139
- '84.##.250.249':139
- '84.#9.8.35':139
- '84.##.191.99':445
- '84.#9.72.29':445
- '84.#9.37.35':445
- '84.##.124.124':445
- '84.##.84.228':445
- '84.#9.1.151':445
- '84.##.232.21':445
- '84.##.109.155':445
- '84.#9.34.40':445
- '84.#9.18.7':445
- '84.##.255.226':445
- '84.#9.37.35':139
- '84.##.191.99':139
- '84.##.84.228':139
- '84.##.210.40':445
- '84.##.124.124':139
- '84.#9.77.0':139
- '84.#9.2.85':139
- '84.##.229.131':139
- '84.##.155.85':139
- '84.##.198.34':139
- '84.##.79.170':139
- '84.#9.89.7':139
- '84.##.46.151':139
- '84.#9.6.167':139
- '84.##.140.86':139
- '84.##.118.220':139
- '84.#9.35.96':445
- '84.#9.8.35':445
- '84.##.172.119':445
- '84.##.250.249':445
- '84.##.116.206':445
- '84.##.207.137':139
- '84.##.205.87':139
- '84.##.85.162':139
- '84.##.178.238':139
- '84.##.149.189':139
- '84.##.229.165':139
- '84.##.154.113':9988
- '84.##.226.212':9988
- '84.##.231.159':445
- '84.##.50.219':445
- '84.##.117.31':445
- '84.##.44.130':9988
- '84.##.35.200':9988
- '84.##.70.154':9988
- '84.##.167.165':9988
- '84.##.106.65':9988
- '84.##.151.123':9988
- '84.#9.68.11':445
- '84.##.20.156':445
- '84.#9.7.20':445
- '84.##.107.126':445
- '84.##.155.95':445
- '84.##.167.193':445
- '84.##.170.77':445
- '84.##.117.170':445
- '84.#9.77.40':445
- '84.##.54.247':445
- '84.##.164.16':445
- '84.#9.1.151':139
- '84.##.232.21':139
- '84.##.109.155':139
- '84.#9.34.40':139
- '84.#9.18.7':139
- '84.##.255.226':139
- '84.##.121.53':445
- '84.##.156.252':445
- '84.#9.80.79':445
- '84.##.210.40':139
- '84.##.86.175':445
- '84.##.108.88':9988
- '84.##.31.185':9988
- '84.##.252.148':9988
- '84.##.110.86':9988
- '84.##.33.128':9988
- '84.##.252.13':9988
- '84.##.121.53':139
- '84.##.156.252':139
- '84.#9.80.79':139
- '84.#9.51.86':9988
- '84.##.86.175':139