Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '81.##.203.233':445
- '81.#5.94.8':445
- '81.##.223.59':445
- '81.##.91.204':445
- '81.##.140.34':445
- '81.##.113.186':445
- '81.##.229.123':445
- '81.##.161.47':445
- '81.##.18.161':445
- '81.##.234.149':445
- '81.##.152.80':445
- '81.##.48.208':445
- '81.##.55.235':445
- '81.##.168.163':445
- '81.##.41.119':445
- '81.#5.2.153':445
- '81.#5.8.238':445
- '81.##.163.164':445
- '81.#5.61.55':445
- '81.##.170.61':445
- '81.##.112.229':445
- '81.#5.99.2':445
- '81.##.54.143':445
- '81.##.29.179':139
- '81.#5.4.109':139
- '81.##.233.219':139
- '81.##.120.133':445
- '81.##.219.233':139
- '81.##.104.39':139
- '81.##.209.162':139
- '81.##.179.209':139
- '81.##.102.226':139
- '81.##.118.104':139
- '81.##.24.121':139
- '81.##.157.179':445
- '81.##.99.203':445
- '81.##.83.204':445
- '81.##.105.97':445
- '81.##.250.104':445
- '81.##.223.169':445
- '81.##.120.133':139
- '81.##.231.19':445
- '81.##.231.19':139
- '81.#5.8.84':445
- '81.##.19.158':445
- '81.##.152.80':139
- '81.##.18.161':139
- '81.##.234.149':139
- '81.#5.94.8':139
- '81.##.113.186':139
- '81.##.229.123':139
- '81.##.250.104':139
- '81.##.83.204':139
- '81.##.105.97':139
- '81.##.161.47':139
- '81.##.54.143':139
- '81.#5.99.2':139
- '81.##.170.61':139
- '81.##.112.229':139
- '81.##.55.235':139
- '81.#5.8.238':139
- '81.##.163.164':139
- '81.##.223.59':139
- '81.##.203.233':139
- '81.##.140.34':139
- '81.#5.61.55':139
- '81.##.91.204':139
- '81.##.157.179':139
- '81.##.125.157':445
- '81.##.162.137':445
- '81.##.132.233':445
- '81.##.52.146':445
- '81.#5.0.50':445
- '81.#5.5.149':445
- '81.##.135.184':445
- '81.##.118.135':445
- '81.#5.39.93':445
- '81.#5.4.163':445
- '81.##.212.206':445
- '81.##.19.158':139
- '81.##.172.219':445
- '81.#5.8.84':139
- '81.##.99.203':139
- '81.##.223.169':139
- '81.##.161.174':445
- '81.##.173.223':445
- '81.##.87.103':445
- '81.##.234.215':445
- '81.##.189.161':445
- '81.##.215.189':445
- '81.##.171.232':445
- '81.##.58.142':445
- '81.##.232.193':445
- '81.##.211.124':445
- '81.##.49.112':445
- '81.#5.71.42':445
- '81.#5.45.20':445
- '81.#5.94.65':445
- '81.##.215.32':445
- '81.##.137.183':445
- '81.##.129.113':445
- '81.##.179.209':445
- '81.##.146.180':445
- '81.##.209.162':445
- '81.##.24.121':445
- '81.##.102.226':445
- '81.##.88.220':445
- '81.##.151.65':445
- '81.##.161.15':445
- '81.##.54.127':445
- '81.#5.77.79':445
- '81.##.135.130':445
- '81.##.21.199':445
- '81.##.181.173':445
- '81.##.255.222':445
- '81.#5.4.127':445
- '81.#5.47.40':445
- '81.#5.16.98':445
- '81.##.246.46':445
- '81.##.154.174':139
- '81.#5.93.59':139
- '81.##.99.195':445
- '81.#5.57.38':445
- '81.#5.71.66':445
- '81.##.169.170':445
- '81.##.115.157':445
- '81.##.94.252':445
- '81.##.164.21':445
- '81.##.73.164':445
- '81.##.50.126':445
- '81.#5.8.191':445
- '81.##.21.176':445
- '81.#5.92.69':445
- '81.##.20.145':445
- '81.##.160.20':445
- '81.##.129.113':139
- '81.##.215.32':139
- '81.##.137.183':139
- '81.##.58.142':139
- '81.#5.71.42':139
- '81.#5.45.20':139
- '81.##.73.164':139
- '81.##.94.252':139
- '81.##.164.21':139
- '81.#5.94.65':139
- '81.##.21.199':139
- '81.##.135.130':139
- '81.##.54.127':139
- '81.#5.77.79':139
- '81.##.146.180':139
- '81.##.88.220':139
- '81.##.151.65':139
- '81.##.232.193':139
- '81.##.171.232':139
- '81.##.49.112':139
- '81.##.161.15':139
- '81.##.211.124':139
- '81.##.169.170':139
- '81.#5.71.66':139
- '81.##.99.195':139
- '81.#5.57.38':139
- '81.##.255.222':139
- '81.##.246.46':139
- '81.##.219.233':445
- '81.##.104.39':445
- '81.##.118.104':445
- '81.#5.4.109':445
- '81.##.233.219':445
- '81.##.29.179':445
- '81.##.160.20':139
- '81.#5.92.69':139
- '81.##.20.145':139
- '81.##.115.157':139
- '81.##.50.126':139
- '81.#5.8.191':139
- '81.#5.4.127':139
- '81.##.181.173':139
- '81.#5.16.98':139
- '81.##.21.176':139
- '81.#5.47.40':139
- '81.##.48.208':139
- '81.#5.22.38':445
- '81.##.217.20':445
- '81.##.158.59':445
- '81.##.149.221':445
- '81.##.13.219':445
- '81.#5.6.91':445
- '81.##.245.189':445
- '81.##.171.169':445
- '81.#5.190.7':445
- '81.##.100.54':445
- '81.#5.7.160':445
- '81.##.30.186':139
- '81.##.204.30':139
- '81.##.186.65':139
- '81.##.199.91':139
- '81.##.13.130':139
- '81.##.74.216':139
- '81.##.138.67':445
- '81.##.67.152':445
- '81.##.165.230':445
- '81.#5.226.4':445
- '81.##.39.223':445
- '81.##.38.169':445
- '81.##.146.254':445
- '81.##.149.59':445
- '81.##.226.105':445
- '81.##.45.164':445
- '81.##.105.185':445
- '81.#5.98.21':445
- '81.##.249.219':445
- '81.#5.6.7':445
- '81.#5.4.69':445
- '81.##.195.218':445
- '81.#5.78.74':445
- '81.#5.7.243':445
- '81.##.200.168':445
- '81.##.142.38':445
- '81.##.64.183':445
- '81.##.235.191':445
- '81.##.72.212':445
- '81.#5.1.108':445
- '81.##.72.228':445
- '81.##.63.153':445
- '81.##.201.140':445
- '81.#5.8.16':445
- '81.##.245.189':139
- '81.##.171.169':139
- '81.#5.190.7':139
- '81.##.100.54':139
- '81.#5.7.160':139
- '81.##.38.169':139
- '81.#5.7.243':139
- '81.##.200.168':139
- '81.##.142.38':139
- '81.##.64.183':139
- '81.##.235.191':139
- '81.##.39.223':139
- '81.##.138.67':139
- '81.##.67.152':139
- '81.##.165.230':139
- '81.#5.226.4':139
- '81.##.149.221':139
- '81.##.217.20':139
- '81.#5.6.91':139
- '81.#5.22.38':139
- '81.##.13.219':139
- '81.##.158.59':139
- '81.##.72.212':139
- '81.##.249.219':139
- '81.#5.6.7':139
- '81.#5.4.69':139
- '81.##.195.218':139
- '81.#5.78.74':139
- '81.#5.97.65':139
- '81.##.219.65':139
- '81.##.77.137':139
- '81.##.121.63':139
- '81.##.170.136':139
- '81.##.249.103':139
- '81.#5.1.108':139
- '81.##.72.228':139
- '81.##.63.153':139
- '81.##.201.140':139
- '81.#5.8.16':139
- '81.##.45.164':139
- '81.##.149.59':139
- '81.#5.98.21':139
- '81.##.146.254':139
- '81.##.105.185':139
- '81.##.226.105':139
- '81.##.210.219':445
- '81.##.217.210':445
- '81.##.183.184':445
- '81.##.180.187':445
- '81.##.155.154':445
- '81.##.87.218':445
- '81.#5.2.197':139
- '81.##.66.249':139
- '81.##.147.92':445
- '81.##.247.87':445
- '81.##.137.111':445
- '81.##.27.145':445
- '81.##.64.136':445
- '81.##.182.236':445
- '81.##.147.92':139
- '81.#5.90.1':445
- '81.##.204.166':445
- '81.##.178.205':445
- '81.##.150.119':445
- '81.##.188.92':445
- '81.##.170.127':445
- '81.##.123.230':445
- '81.#5.2.197':445
- '81.#5.4.163':139
- '81.##.212.206':139
- '81.#5.5.149':139
- '81.##.125.157':139
- '81.##.162.137':139
- '81.#5.39.93':139
- '81.#5.2.153':139
- '81.##.168.163':139
- '81.##.41.119':139
- '81.##.135.184':139
- '81.##.118.135':139
- '81.##.189.161':139
- '81.##.215.189':139
- '81.##.161.174':139
- '81.##.66.249':445
- '81.##.172.219':139
- '81.##.234.215':139
- '81.#5.0.50':139
- '81.##.132.233':139
- '81.##.52.146':139
- '81.##.173.223':139
- '81.##.87.103':139
- '81.#5.7.160':9988
- '81.##.67.152':9988
- '81.##.38.169':9988
- '81.##.74.216':445
- '81.##.142.38':9988
- '81.##.138.67':9988
- '81.##.158.59':9988
- '81.##.171.169':9988
- '81.##.13.219':9988
- '81.##.165.230':9988
- '81.#5.190.7':9988
- '81.##.121.63':445
- '81.##.219.65':445
- '81.##.249.103':445
- '81.#5.97.65':445
- '81.##.170.136':445
- '81.##.77.137':445
- '81.##.30.186':445
- '81.##.204.30':445
- '81.##.186.65':445
- '81.##.199.91':445
- '81.##.13.130':445
- '81.#5.22.38':9988
- '81.##.180.187':139
- '81.##.155.154':139
- '81.##.150.119':139
- '81.##.188.92':139
- '81.##.178.205':139
- '81.##.183.184':139
- '81.##.247.87':139
- '81.##.137.111':139
- '81.##.87.218':139
- '81.##.210.219':139
- '81.##.217.210':139
- '81.##.200.168':9988
- '81.#5.90.1':139
- '81.#5.6.91':9988
- '81.##.64.183':9988
- '81.##.39.223':9988
- '81.##.182.236':139
- '81.##.170.127':139
- '81.##.123.230':139
- '81.##.204.166':139
- '81.##.27.145':139
- '81.##.64.136':139