Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '62.##.83.202':139
- '62.##.192.98':139
- '62.##.21.135':139
- '62.##.164.52':139
- '62.##.195.70':139
- '62.##.60.172':139
- '62.##.166.127':445
- '62.#8.176.5':139
- '62.##.211.33':139
- '62.##.153.16':139
- '62.##.208.17':139
- '62.##.51.113':139
- '62.#8.46.88':139
- '62.##.237.58':139
- '62.#8.0.237':139
- '62.##.223.131':139
- '62.##.190.223':139
- '62.##.54.184':139
- '62.##.204.249':139
- '62.##.18.205':139
- '62.##.15.105':445
- '62.##.169.116':445
- '62.##.196.10':445
- '62.##.95.164':445
- '62.#8.10.95':445
- '62.#8.33.68':445
- '62.#8.24.23':445
- '62.##.109.232':445
- '62.##.110.252':445
- '62.##.148.237':445
- '62.##.133.199':445
- '62.##.16.157':445
- '62.#8.28.89':445
- '62.#8.38.15':445
- '62.##.33.121':445
- '62.##.98.217':445
- '62.##.163.106':445
- '62.##.230.44':445
- '62.#8.92.46':445
- '62.#8.59.6':445
- '62.##.121.193':139
- '62.##.191.220':445
- '62.##.36.192':445
- '62.##.63.221':445
- '62.##.163.229':445
- '62.##.142.80':445
- '62.##.178.248':445
- '62.##.166.127':139
- '62.##.248.165':445
- '62.#8.36.50':445
- '62.##.165.242':445
- '62.##.191.220':139
- '62.##.36.192':139
- '62.##.63.221':139
- '62.##.163.229':139
- '62.##.142.80':139
- '62.##.178.248':139
- '62.##.198.76':445
- '62.##.248.165':139
- '62.#8.36.50':139
- '62.##.165.242':139
- '62.##.15.105':139
- '62.##.169.116':139
- '62.##.196.10':139
- '62.##.95.164':139
- '62.#8.10.95':139
- '62.#8.33.68':139
- '62.#8.24.23':139
- '62.##.109.232':139
- '62.##.110.252':139
- '62.##.148.237':139
- '62.##.133.199':139
- '62.##.16.157':139
- '62.#8.28.89':139
- '62.#8.38.15':139
- '62.##.33.121':139
- '62.##.98.217':139
- '62.##.163.106':139
- '62.##.230.44':139
- '62.#8.92.46':139
- '62.#8.59.6':139
- '62.##.115.222':139
- '62.##.191.115':139
- '62.##.133.35':139
- '62.##.71.175':139
- '62.##.217.34':139
- '62.##.38.186':139
- '62.##.126.114':139
- '62.##.70.231':139
- '62.##.57.153':139
- '62.##.139.89':139
- '62.#8.19.43':139
- '62.##.226.39':139
- '62.##.38.110':139
- '62.##.88.238':139
- '62.##.137.204':139
- '62.##.185.68':139
- '62.##.250.252':139
- '62.##.92.151':139
- '62.##.78.117':139
- '62.##.115.72':139
- '62.##.50.174':139
- '62.##.234.79':139
- '62.##.121.51':139
- '62.##.21.130':139
- '62.##.131.188':139
- '62.##.135.213':139
- '62.##.195.162':139
- '62.##.34.242':139
- '62.#8.44.14':139
- '62.##.48.129':139
- '62.#8.97.91':139
- '62.##.165.96':139
- '62.#8.91.10':139
- '62.##.43.117':139
- '62.##.246.111':139
- '62.#8.54.91':139
- '62.#8.71.48':139
- '62.##.21.104':139
- '62.#8.87.61':139
- '62.#8.2.201':139
- '62.##.202.165':139
- '62.##.21.135':445
- '62.##.83.202':445
- '62.##.195.70':445
- '62.##.190.223':445
- '62.##.164.52':445
- '62.#8.176.5':445
- '62.##.60.172':445
- '62.##.153.16':445
- '62.##.192.98':445
- '62.##.211.33':445
- '62.#8.46.88':445
- '62.##.208.17':445
- '62.#8.0.237':445
- '62.##.121.193':445
- '62.##.237.58':445
- '62.##.54.184':445
- '62.##.223.131':445
- '62.##.18.205':445
- '62.##.51.113':445
- '62.##.204.249':445
- '62.##.164.61':445
- '62.#8.55.24':445
- '62.##.162.173':445
- '62.##.30.102':445
- '62.##.57.111':445
- '62.##.132.81':445
- '62.##.165.160':445
- '62.##.165.132':445
- '62.##.109.16':445
- '62.##.230.211':445
- '62.##.164.61':139
- '62.#8.55.24':139
- '62.##.162.173':139
- '62.##.30.102':139
- '62.##.57.111':139
- '62.##.132.81':139
- '62.##.165.160':139
- '62.##.165.132':139
- '62.##.109.16':139
- '62.##.230.211':139
- '62.##.198.76':139
- '62.##.85.142':445
- '62.##.109.98':445
- '62.##.157.94':445
- '62.##.106.157':445
- '62.#8.20.23':445
- '62.#8.4.77':445
- '62.##.213.81':445
- '62.##.64.240':445
- '62.##.53.213':445
- '62.##.80.223':445
- '62.##.235.68':139
- '62.##.126.68':139
- '62.##.255.174':139
- '62.##.115.88':139
- '62.##.98.229':139
- '62.#8.36.64':139
- '62.##.107.159':139
- '62.##.147.73':139
- '62.##.247.43':139
- '62.#8.11.13':139
- '62.##.203.142':445
- '62.##.13.234':445
- '62.##.35.124':445
- '62.##.124.186':445
- '62.##.55.253':445
- '62.##.145.130':445
- '62.##.103.36':445
- '62.##.160.247':445
- '62.##.91.127':445
- '62.#8.7.83':445
- '62.#8.66.91':445
- '62.##.139.66':445
- '62.##.249.197':445
- '62.##.63.222':445
- '62.##.109.211':445
- '62.##.186.173':445
- '62.##.96.157':445
- '62.##.251.38':445
- '62.##.228.177':445
- '62.##.236.132':445
- '62.#8.88.70':139
- '62.#8.66.91':139
- '62.##.139.66':139
- '62.##.249.197':139
- '62.##.63.222':139
- '62.##.109.211':139
- '62.##.186.173':139
- '62.##.96.157':139
- '62.##.251.38':139
- '62.##.228.177':139
- '62.##.236.132':139
- '62.##.85.142':139
- '62.##.109.98':139
- '62.##.157.94':139
- '62.#8.20.23':139
- '62.##.106.157':139
- '62.#8.4.77':139
- '62.##.213.81':139
- '62.##.64.240':139
- '62.##.53.213':139
- '62.##.80.223':139
- '62.##.109.188':139
- '62.##.116.136':139
- '62.##.75.221':139
- '62.##.57.123':139
- '62.##.78.127':139
- '62.#8.88.10':139
- '62.##.51.217':139
- '62.#8.10.11':139
- '62.##.183.86':139
- '62.##.11.184':139
- '62.##.203.142':139
- '62.##.13.234':139
- '62.##.35.124':139
- '62.##.124.186':139
- '62.##.55.253':139
- '62.##.145.130':139
- '62.##.103.36':139
- '62.##.160.247':139
- '62.##.91.127':139
- '62.#8.7.83':139
- '62.##.114.181':139
- '62.##.107.40':139
- '62.##.52.105':139
- '62.##.119.119':139
- '62.##.128.112':139
- '62.##.88.217':445
- '62.##.206.106':445
- '62.##.200.134':445
- '62.##.174.107':139
- '62.##.76.175':139
- '62.##.143.221':139
- '62.##.179.202':139
- '62.#8.10.26':139
- '62.##.97.243':139
- '62.#8.40.46':139
- '62.##.111.145':139
- '62.##.39.168':139
- '62.##.237.19':139
- '62.##.156.191':139
- '62.##.76.232':139
- '62.##.119.119':445
- '62.##.128.112':445
- '62.##.39.168':445
- '62.##.237.19':445
- '62.##.111.145':445
- '62.##.174.107':445
- '62.##.76.175':445
- '62.##.107.40':445
- '62.##.52.105':445
- '62.##.114.181':445
- '62.##.97.243':445
- '62.#8.40.46':445
- '62.##.216.151':445
- '62.##.112.251':445
- '62.##.172.113':445
- '62.##.156.191':445
- '62.##.76.232':445
- '62.##.179.202':445
- '62.#8.10.26':445
- '62.##.143.221':445
- '62.##.216.151':139
- '62.##.255.174':445
- '62.##.235.68':445
- '62.##.98.229':445
- '62.#8.88.70':445
- '62.##.115.88':445
- '62.##.147.73':445
- '62.#8.36.64':445
- '62.#8.11.13':445
- '62.##.126.68':445
- '62.##.247.43':445
- '62.##.109.188':445
- '62.##.116.136':445
- '62.##.75.221':445
- '62.##.57.123':445
- '62.##.78.127':445
- '62.#8.88.10':445
- '62.##.51.217':445
- '62.#8.10.11':445
- '62.##.183.86':445
- '62.##.11.184':445
- '62.#8.88.10':9988
- '62.##.75.221':9988
- '62.##.116.136':9988
- '62.##.13.234':9988
- '62.##.57.123':9988
- '62.##.112.251':139
- '62.##.172.113':139
- '62.##.206.106':139
- '62.##.200.134':139
- '62.##.88.217':139
- '62.##.80.223':9988
- '62.##.63.222':9988
- '62.##.53.213':9988
- '62.##.107.159':445
- '62.##.157.94':9988
- '62.##.35.124':9988
- '62.##.203.142':9988
- '62.##.124.186':9988
- '62.##.249.197':9988
- '62.##.55.253':9988