Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.##.88.195':445
- '82.##.80.114':445
- '82.##.167.231':445
- '82.##.171.25':445
- '82.##.237.170':445
- '82.##.168.141':445
- '82.##.182.241':445
- '82.#0.78.45':445
- '82.#0.53.74':445
- '82.##.218.238':445
- '82.##.38.177':445
- '82.##.74.180':445
- '82.##.64.242':445
- '82.##.157.170':445
- '82.##.101.68':445
- '82.##.34.101':445
- '82.##.208.166':445
- '82.##.30.130':445
- '82.##.118.74':445
- '82.##.232.24':445
- '82.##.180.20':445
- '82.##.105.225':445
- '82.##.89.248':445
- '82.##.195.89':445
- '82.##.24.195':445
- '82.##.240.22':139
- '82.#0.19.71':139
- '82.##.228.189':139
- '82.##.13.153':445
- '82.#0.32.72':445
- '82.##.195.218':139
- '82.##.54.197':139
- '82.##.115.54':139
- '82.##.25.115':139
- '82.##.85.147':139
- '82.##.201.86':139
- '82.##.153.48':139
- '82.##.79.219':445
- '82.##.153.95':445
- '82.##.248.195':445
- '82.##.212.117':445
- '82.##.253.117':445
- '82.#0.79.78':445
- '82.##.118.205':445
- '82.#0.42.81':445
- '82.##.119.21':445
- '82.#0.70.95':445
- '82.#0.53.7':445
- '82.#0.14.73':445
- '82.##.69.117':445
- '82.##.51.229':445
- '82.##.89.248':139
- '82.##.195.89':139
- '82.##.24.195':139
- '82.##.157.170':139
- '82.##.101.68':139
- '82.##.34.101':139
- '82.##.64.242':139
- '82.##.171.25':139
- '82.##.237.170':139
- '82.##.232.24':139
- '82.##.180.20':139
- '82.##.105.225':139
- '82.##.118.74':139
- '82.##.204.49':445
- '82.##.225.245':445
- '82.##.181.22':445
- '82.##.223.181':445
- '82.##.245.185':445
- '82.##.154.245':445
- '82.##.51.229':139
- '82.##.208.166':139
- '82.##.30.130':139
- '82.##.220.11':445
- '82.##.33.140':445
- '82.#0.40.67':445
- '82.#0.53.7':139
- '82.#0.14.73':139
- '82.##.69.117':139
- '82.##.153.95':139
- '82.##.248.195':139
- '82.##.212.117':139
- '82.##.79.219':139
- '82.##.13.153':139
- '82.#0.32.72':139
- '82.#0.42.81':139
- '82.##.119.21':139
- '82.#0.70.95':139
- '82.##.118.205':139
- '82.##.167.231':139
- '82.##.218.238':139
- '82.##.38.177':139
- '82.##.168.141':139
- '82.##.88.195':139
- '82.##.80.114':139
- '82.#0.53.74':139
- '82.##.253.117':139
- '82.#0.79.78':139
- '82.##.74.180':139
- '82.##.182.241':139
- '82.#0.78.45':139
- '82.##.195.218':445
- '82.##.107.100':445
- '82.#0.21.46':445
- '82.#0.35.31':445
- '82.##.240.235':445
- '82.##.174.97':445
- '82.##.101.23':445
- '82.#0.117.6':445
- '82.#0.86.51':445
- '82.##.137.19':445
- '82.##.88.236':445
- '82.##.175.243':445
- '82.#0.94.71':445
- '82.##.130.10':445
- '82.#0.1.179':445
- '82.##.198.209':445
- '82.##.218.213':445
- '82.#0.3.106':445
- '82.##.120.37':445
- '82.##.108.213':445
- '82.##.100.202':445
- '82.##.123.251':445
- '82.##.157.191':445
- '82.##.57.218':445
- '82.#0.98.58':445
- '82.#0.21.99':445
- '82.#0.89.70':139
- '82.##.83.171':139
- '82.##.99.183':139
- '82.##.174.81':445
- '82.##.146.119':445
- '82.##.18.134':139
- '82.##.115.71':139
- '82.##.86.115':139
- '82.##.135.142':139
- '82.##.228.145':139
- '82.##.52.135':139
- '82.#0.28.15':139
- '82.##.109.181':445
- '82.##.151.254':445
- '82.##.95.149':445
- '82.##.213.156':445
- '82.##.63.223':445
- '82.##.104.114':445
- '82.##.106.114':445
- '82.##.53.196':445
- '82.#0.40.44':445
- '82.##.150.106':445
- '82.##.113.253':445
- '82.##.196.226':445
- '82.##.148.25':445
- '82.#0.85.26':445
- '82.##.57.218':139
- '82.#0.98.58':139
- '82.#0.21.99':139
- '82.#0.1.179':139
- '82.##.198.209':139
- '82.##.218.213':139
- '82.##.130.10':139
- '82.##.240.235':139
- '82.##.174.97':139
- '82.##.100.202':139
- '82.##.123.251':139
- '82.##.157.191':139
- '82.##.108.213':139
- '82.##.85.147':445
- '82.##.201.86':445
- '82.##.153.48':445
- '82.##.240.22':445
- '82.#0.19.71':445
- '82.##.228.189':445
- '82.#0.85.26':139
- '82.#0.3.106':139
- '82.##.120.37':139
- '82.##.54.197':445
- '82.##.115.54':445
- '82.##.25.115':445
- '82.##.113.253':139
- '82.##.196.226':139
- '82.##.148.25':139
- '82.##.151.254':139
- '82.##.95.149':139
- '82.##.213.156':139
- '82.##.109.181':139
- '82.##.174.81':139
- '82.##.146.119':139
- '82.##.53.196':139
- '82.#0.40.44':139
- '82.##.150.106':139
- '82.##.106.114':139
- '82.#0.35.31':139
- '82.##.88.236':139
- '82.##.175.243':139
- '82.##.101.23':139
- '82.##.107.100':139
- '82.#0.21.46':139
- '82.##.137.19':139
- '82.##.63.223':139
- '82.##.104.114':139
- '82.#0.94.71':139
- '82.#0.117.6':139
- '82.#0.86.51':139
- '82.##.61.124':445
- '82.#0.55.45':445
- '82.##.54.174':445
- '82.#0.1.47':445
- '82.#0.50.14':445
- '82.##.139.171':445
- '82.##.227.181':445
- '82.##.87.242':445
- '82.##.165.88':445
- '82.##.17.208':445
- '82.##.121.72':445
- '82.##.174.243':445
- '82.#0.86.81':445
- '82.##.124.206':445
- '82.##.125.168':445
- '82.##.238.11':445
- '82.##.57.149':445
- '82.##.137.127':445
- '82.##.169.33':445
- '82.##.23.248':445
- '82.#0.57.36':445
- '82.##.57.153':445
- '82.##.250.56':445
- '82.##.29.206':445
- '82.#0.44.66':445
- '82.#0.79.14':445
- '82.#0.3.77':445
- '82.##.241.34':445
- '82.#0.2.175':445
- '82.#0.22.81':445
- '82.##.222.22':445
- '82.##.157.135':445
- '82.##.127.90':445
- '82.##.144.172':445
- '82.#0.99.95':445
- '82.##.231.130':445
- '82.##.204.231':445
- '82.##.190.204':445
- '82.##.80.166':445
- '82.##.29.115':445
- '82.#0.99.81':445
- '82.##.163.54':445
- '82.##.232.131':445
- '82.##.59.232':445
- '82.##.30.154':445
- '82.#0.96.71':445
- '82.#0.57.90':445
- '82.##.166.57':445
- '82.#0.41.71':445
- '82.##.128.21':445
- '82.##.117.221':445
- '82.#0.6.128':139
- '82.#0.55.45':139
- '82.##.54.174':139
- '82.#0.1.47':139
- '82.#0.50.14':139
- '82.##.139.171':139
- '82.##.227.181':139
- '82.##.87.242':139
- '82.##.165.88':139
- '82.##.17.208':139
- '82.##.121.72':139
- '82.##.174.243':139
- '82.#0.86.81':139
- '82.##.124.206':139
- '82.##.137.127':139
- '82.##.238.11':139
- '82.##.57.149':139
- '82.##.125.168':139
- '82.##.169.33':139
- '82.##.23.248':139
- '82.#0.57.36':139
- '82.##.57.153':139
- '82.##.250.56':139
- '82.##.29.206':139
- '82.#0.44.66':139
- '82.#0.79.14':139
- '82.#0.3.77':139
- '82.##.241.34':139
- '82.#0.2.175':139
- '82.#0.22.81':139
- '82.##.222.22':139
- '82.##.157.135':139
- '82.##.127.90':139
- '82.##.144.172':139
- '82.#0.99.95':139
- '82.##.231.130':139
- '82.##.204.231':139
- '82.##.190.204':139
- '82.##.80.166':139
- '82.#0.99.81':139
- '82.##.29.115':139
- '82.##.163.54':139
- '82.##.232.131':139
- '82.##.59.232':139
- '82.##.30.154':139
- '82.#0.96.71':139
- '82.#0.57.90':139
- '82.##.166.57':139
- '82.#0.41.71':139
- '82.##.128.21':139
- '82.##.117.221':139
- '82.#0.6.128':445
- '82.##.201.19':445
- '82.##.19.221':445
- '82.#0.58.66':445
- '82.##.235.129':445
- '82.#0.20.5':445
- '82.##.194.72':445
- '82.##.18.218':445
- '82.##.163.244':445
- '82.##.75.243':445
- '82.##.167.123':445
- '82.##.151.135':445
- '82.##.63.151':445
- '82.##.80.149':445
- '82.##.244.186':445
- '82.##.101.55':445
- '82.##.163.194':445
- '82.##.80.159':445
- '82.##.58.209':445
- '82.##.176.180':445
- '82.##.194.254':445
- '82.##.159.194':445
- '82.##.218.18':445
- '82.##.170.93':445
- '82.#0.18.22':445
- '82.##.254.249':445
- '82.##.223.181':139
- '82.##.245.185':139
- '82.##.154.245':139
- '82.##.51.133':445
- '82.##.153.116':445
- '82.##.61.124':139
- '82.##.220.11':139
- '82.##.33.140':139
- '82.#0.40.67':139
- '82.##.204.49':139
- '82.##.225.245':139
- '82.##.181.22':139
- '82.##.125.193':445
- '82.##.112.86':445
- '82.##.108.135':445
- '82.##.107.125':445
- '82.##.83.124':445
- '82.##.238.83':445
- '82.##.214.170':445
- '82.##.252.156':445
- '82.##.43.252':445
- '82.##.197.67':445
- '82.##.27.159':445
- '82.##.120.106':445
- '82.##.156.120':445
- '82.##.199.194':445
- '82.##.170.93':139
- '82.#0.18.22':139
- '82.##.254.249':139
- '82.##.244.186':139
- '82.##.101.55':139
- '82.##.163.194':139
- '82.##.80.149':139
- '82.##.235.129':139
- '82.#0.20.5':139
- '82.##.194.254':139
- '82.##.159.194':139
- '82.##.218.18':139
- '82.##.176.180':139
- '82.##.174.243':9988
- '82.##.87.242':9988
- '82.#0.96.71':9988
- '82.#0.44.66':9988
- '82.#0.57.36':9988
- '82.##.57.149':9988
- '82.##.199.194':139
- '82.##.80.159':139
- '82.##.58.209':139
- '82.#0.22.81':9988
- '82.##.157.135':9988
- '82.##.144.172':9988
- '82.##.27.159':139
- '82.##.120.106':139
- '82.##.156.120':139
- '82.##.112.86':139
- '82.##.108.135':139
- '82.##.107.125':139
- '82.##.125.193':139
- '82.##.51.133':139
- '82.##.153.116':139
- '82.##.252.156':139
- '82.##.43.252':139
- '82.##.197.67':139
- '82.##.214.170':139
- '82.#0.58.66':139
- '82.##.167.123':139
- '82.##.151.135':139
- '82.##.194.72':139
- '82.##.201.19':139
- '82.##.19.221':139
- '82.##.75.243':139
- '82.##.83.124':139
- '82.##.238.83':139
- '82.##.63.151':139
- '82.##.18.218':139
- '82.##.163.244':139