Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '22#.#3.172.147':139
- '22#.#3.254.163':445
- '22#.#3.14.73':139
- '22#.#3.200.0':139
- '22#.#3.202.253':445
- '22#.#3.154.147':445
- '22#.#3.151.16':445
- '22#.#3.2.203':445
- '22#.#3.169.230':445
- '22#.#3.27.61':139
- '22#.#3.120.202':139
- '22#.#3.22.138':139
- '22#.#3.75.243':139
- '22#.#3.180.134':139
- '22#.#3.168.139':139
- '22#.#3.184.55':139
- '22#.#3.153.69':139
- '22#.#3.137.156':139
- '22#.#3.55.95':139
- '22#.#3.181.119':445
- '22#.#3.9.246':445
- '22#.#3.130.66':445
- '22#.#3.9.220':445
- '22#.#3.149.226':445
- '22#.#3.148.54':445
- '22#.#3.89.138':445
- '22#.#3.138.43':445
- '22#.#3.251.72':445
- '22#.#3.0.183':445
- '22#.#3.59.37':445
- '22#.#3.57.38':445
- '22#.#3.22.159':445
- '22#.#3.186.176':445
- '22#.#3.48.230':445
- '22#.#3.140.254':445
- '22#.#3.11.141':445
- '22#.#3.161.225':445
- '22#.#3.15.34':445
- '22#.#3.106.38':139
- '22#.#3.161.225':139
- '22#.#3.15.34':139
- '22#.#3.57.38':139
- '22#.#3.48.230':139
- '22#.#3.140.254':139
- '22#.#3.130.66':139
- '22#.#3.9.220':139
- '22#.#3.11.141':139
- '22#.#3.0.183':139
- '22#.#3.59.37':139
- '22#.#3.202.253':139
- '22#.#3.2.203':139
- '22#.#3.22.240':445
- '22#.#3.254.163':139
- '22#.#3.169.230':139
- '22#.#3.22.159':139
- '22#.#3.186.176':139
- '22#.#3.154.147':139
- '22#.#3.151.16':139
- '22#.#3.49.167':139
- '22#.#3.61.193':139
- '22#.#3.160.150':139
- '22#.#3.180.4':139
- '22#.#3.53.253':139
- '22#.#3.32.145':139
- '22#.#3.243.158':139
- '22#.#3.49.241':139
- '22#.#3.240.65':139
- '22#.#3.58.89':139
- '22#.#3.149.226':139
- '22#.#3.138.43':139
- '22#.#3.181.119':139
- '22#.#3.9.246':139
- '22#.#3.251.72':139
- '22#.#3.130.214':139
- '22#.#3.172.113':139
- '22#.#3.148.54':139
- '22#.#3.89.138':139
- '22#.#3.160.234':139
- '22#.#3.71.115':139
- '22#.#3.144.146':139
- '22#.#3.12.68':139
- '22#.#3.110.117':139
- '22#.#3.178.253':139
- '22#.#3.105.136':139
- '22#.#3.150.220':139
- '22#.#3.154.223':139
- '22#.#3.146.15':139
- '22#.#3.136.36':139
- '22#.#3.27.126':139
- '22#.#3.235.89':139
- '22#.#3.74.110':139
- '22#.#3.101.21':139
- '22#.#3.61.232':139
- '22#.#3.10.160':139
- '22#.#3.55.201':139
- '22#.#3.82.55':139
- '22#.#3.205.104':139
- '22#.#3.38.254':139
- '22#.#3.13.55':139
- '22#.#3.56.217':139
- '22#.#3.198.166':139
- '22#.#3.97.147':139
- '22#.#3.139.104':139
- '22#.#3.130.98':139
- '22#.43.33.6':139
- '22#.#3.56.99':139
- '22#.#3.248.125':139
- '22#.#3.2.101':139
- '22#.#3.110.64':139
- '22#.#3.90.115':139
- '22#.#3.39.213':139
- '22#.#3.10.80':139
- '22#.#3.225.55':139
- '22#.#3.64.47':139
- '22#.#3.169.64':139
- '22#.#3.81.32':139
- '22#.#3.106.38':445
- '22#.#3.75.243':445
- '22#.#3.32.145':445
- '22#.#3.243.158':445
- '22#.#3.180.134':445
- '22#.#3.168.139':445
- '22#.#3.137.156':445
- '22#.#3.120.202':445
- '22#.#3.22.138':445
- '22#.#3.240.65':445
- '22#.#3.58.89':445
- '22#.#3.160.150':445
- '22#.#3.130.214':445
- '22#.#3.172.113':445
- '22#.#3.180.4':445
- '22#.#3.53.253':445
- '22#.#3.49.241':445
- '22#.#3.49.167':445
- '22#.#3.61.193':445
- '22#.#3.216.67':139
- '22#.#3.120.251':139
- '22#.#3.182.133':139
- '22#.#3.12.63':139
- '22#.#3.178.120':139
- '22#.#3.158.221':139
- '22#.#3.32.212':139
- '22#.#3.58.179':139
- '22#.#3.182.58':139
- '22#.#3.53.103':139
- '22#.#3.153.69':445
- '22#.#3.27.61':445
- '22#.#3.55.95':445
- '22#.#3.184.55':445
- '22#.#3.14.73':445
- '22#.#3.115.202':139
- '22#.#3.193.115':139
- '22#.#3.200.0':445
- '22#.#3.172.147':445
- '22#.#3.60.70':445
- '22#.#3.15.136':445
- '22#.#3.30.220':445
- '22#.#3.41.117':139
- '22#.#3.169.149':139
- '22#.#3.87.32':445
- '22#.#3.233.124':445
- '22#.#3.178.29':445
- '22#.#3.82.62':445
- '22#.#3.30.146':445
- '22#.#3.219.11':139
- '22#.#3.36.127':139
- '22#.#3.29.195':139
- '22#.#3.127.126':139
- '22#.#3.127.127':139
- '22#.#3.46.12':139
- '22#.#3.167.124':139
- '22#.#3.29.79':139
- '22#.#3.70.22':139
- '22#.#3.69.30':139
- '22#.#3.212.46':445
- '22#.#3.190.191':445
- '22#.#3.56.136':445
- '22#.#3.56.146':445
- '22#.#3.107.207':445
- '22#.#3.231.198':445
- '22#.#3.198.66':445
- '22#.43.56.4':445
- '22#.#3.217.230':445
- '22#.#3.53.131':445
- '22#.#3.103.89':445
- '22#.#3.108.205':445
- '22#.#3.74.130':445
- '22#.#3.240.246':445
- '22#.#3.131.32':445
- '22#.#3.28.167':445
- '22#.#3.230.49':445
- '22#.#3.19.219':445
- '22#.#3.90.43':445
- '22#.#3.55.207':139
- '22#.#3.19.219':139
- '22#.#3.90.43':139
- '22#.#3.108.205':139
- '22#.#3.131.32':139
- '22#.#3.28.167':139
- '22#.#3.56.136':139
- '22#.#3.56.146':139
- '22#.#3.230.49':139
- '22#.#3.53.131':139
- '22#.#3.103.89':139
- '22#.#3.30.220':139
- '22#.#3.82.62':139
- '22#.#3.15.136':139
- '22#.#3.30.146':139
- '22#.#3.87.32':139
- '22#.#3.74.130':139
- '22#.#3.240.246':139
- '22#.#3.233.124':139
- '22#.#3.178.29':139
- '22#.#3.170.174':139
- '22#.#3.16.109':139
- '22#.#3.4.140':139
- '22#.#3.175.3':139
- '22#.#3.0.214':139
- '22#.43.76.9':139
- '22#.#3.67.193':139
- '22#.43.55.9':139
- '22#.43.15.7':139
- '22#.#3.140.102':139
- '22#.#3.107.207':139
- '22#.43.56.4':139
- '22#.#3.212.46':139
- '22#.#3.190.191':139
- '22#.#3.217.230':139
- '22#.#3.243.227':139
- '22#.#3.109.3':139
- '22#.#3.231.198':139
- '22#.#3.198.66':139
- '22#.#3.245.209':139
- '22#.#3.168.234':139
- '22#.#3.216.218':139
- '22#.#3.90.47':139
- '22#.#3.75.196':139
- '22#.#3.81.53':139
- '22#.#3.168.142':139
- '22#.#3.140.75':139
- '22#.#3.174.140':139
- '22#.#3.4.176':139
- '22#.#3.195.220':139
- '22#.#3.251.179':139
- '22#.#3.231.198':9988
- '22#.43.15.7':9988
- '22#.#3.177.22':139
- '22#.#3.35.173':139
- '22#.#3.32.35':139
- '22#.#3.43.92':139
- '22#.#3.64.83':139
- '22#.#3.245.209':445
- '22#.#3.168.234':445
- '22#.#3.216.218':445
- '22#.#3.90.47':445
- '22#.#3.75.196':445
- '22#.#3.81.53':445
- '22#.#3.168.142':445
- '22#.#3.140.75':445
- '22#.#3.174.140':445
- '22#.#3.4.176':445
- '22#.#3.195.220':445
- '22#.#3.251.179':445
- '22#.#3.60.70':139
- '22#.#3.22.240':139
- '22#.#3.177.22':445
- '22#.#3.35.173':445
- '22#.#3.32.35':445
- '22#.#3.43.92':445
- '22#.#3.64.83':445
- '22#.43.56.4':9988
- '22#.#3.55.207':445
- '22#.#3.127.126':445
- '22#.43.76.9':445
- '22#.#3.67.193':445
- '22#.#3.127.127':445
- '22#.#3.46.12':445
- '22#.#3.70.22':445
- '22#.#3.36.127':445
- '22#.#3.29.195':445
- '22#.43.15.7':445
- '22#.#3.140.102':445
- '22#.#3.4.140':445
- '22#.#3.243.227':445
- '22#.#3.109.3':445
- '22#.#3.175.3':445
- '22#.#3.0.214':445
- '22#.43.55.9':445
- '22#.#3.170.174':445
- '22#.#3.16.109':445
- '22#.#3.90.43':9988
- '22#.#3.28.167':9988
- '22#.#3.108.205':9988
- '22#.#3.131.32':9988
- '22#.#3.230.49':9988
- '22#.#3.190.191':9988
- '22#.#3.107.207':9988
- '22#.#3.53.131':9988
- '22#.#3.212.46':9988
- '22#.#3.103.89':9988
- '22#.#3.29.79':445
- '22#.#3.219.11':445
- '22#.#3.69.30':445
- '22#.#3.167.124':445
- '22#.#3.41.117':445
- '22#.#3.178.29':9988
- '22#.#3.240.246':9988
- '22#.#3.169.149':445
- '22#.#3.87.32':9988