Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.##.112.115':139
- '82.##.159.112':139
- '82.##.102.89':139
- '82.##.80.224':139
- '82.#3.5.130':139
- '82.#3.15.25':139
- '82.##.100.235':139
- '82.##.137.110':139
- '82.##.193.159':139
- '82.##.146.116':139
- '82.##.26.206':139
- '82.#3.4.188':139
- '82.#3.195.4':139
- '82.#3.6.93':139
- '82.##.39.219':139
- '82.##.142.202':139
- '82.##.121.61':139
- '82.##.218.106':139
- '82.##.197.96':139
- '82.##.112.194':139
- '82.##.239.149':139
- '82.##.26.206':445
- '82.##.80.224':445
- '82.##.218.106':445
- '82.##.197.96':445
- '82.##.121.61':445
- '82.##.159.112':445
- '82.##.193.159':445
- '82.##.112.115':445
- '82.#3.5.130':445
- '82.##.102.89':445
- '82.##.239.149':445
- '82.##.211.39':139
- '82.##.39.219':445
- '82.#3.64.62':139
- '82.##.17.176':139
- '82.##.112.172':139
- '82.#3.195.4':445
- '82.##.112.194':445
- '82.#3.4.188':445
- '82.##.142.202':445
- '82.#3.6.93':445
- '82.##.77.241':139
- '82.##.104.31':139
- '82.##.216.114':139
- '82.#3.9.249':139
- '82.##.157.226':139
- '82.##.145.126':445
- '82.##.192.196':445
- '82.##.69.146':445
- '82.##.231.115':445
- '82.#3.174.2':445
- '82.##.160.244':139
- '82.#3.181.0':139
- '82.#3.73.56':139
- '82.#3.9.46':139
- '82.#3.1.28':139
- '82.#3.28.72':139
- '82.##.218.95':139
- '82.##.244.239':139
- '82.##.76.219':139
- '82.##.185.67':139
- '82.##.164.129':139
- '82.##.244.239':445
- '82.##.160.244':445
- '82.##.218.95':445
- '82.##.164.129':445
- '82.##.76.219':445
- '82.##.77.241':445
- '82.##.104.31':445
- '82.##.216.114':445
- '82.#3.9.249':445
- '82.##.157.226':445
- '82.##.185.67':445
- '82.##.21.250':445
- '82.#3.28.22':445
- '82.##.132.106':445
- '82.#3.8.28':445
- '82.#3.56.94':445
- '82.#3.181.0':445
- '82.#3.73.56':445
- '82.#3.9.46':445
- '82.#3.1.28':445
- '82.#3.28.72':445
- '82.##.146.116':445
- '82.##.254.65':445
- '82.#3.79.12':445
- '82.#3.65.78':445
- '82.##.198.172':445
- '82.#3.56.14':445
- '82.##.118.88':139
- '82.##.219.92':139
- '82.#3.98.92':139
- '82.#3.56.66':445
- '82.##.130.18':139
- '82.##.248.58':445
- '82.##.183.121':445
- '82.##.159.194':445
- '82.##.234.146':445
- '82.##.55.200':445
- '82.##.199.241':445
- '82.#3.142.8':445
- '82.##.141.64':445
- '82.##.22.147':445
- '82.##.85.250':445
- '82.##.139.146':445
- '82.#3.210.4':139
- '82.##.109.243':139
- '82.#3.15.94':139
- '82.##.65.125':139
- '82.#3.48.95':139
- '82.#3.134.1':139
- '82.##.124.57':139
- '82.##.80.180':139
- '82.##.207.22':139
- '82.##.223.13':139
- '82.##.122.163':139
- '82.##.69.196':139
- '82.##.116.62':139
- '82.##.243.197':139
- '82.#3.54.23':139
- '82.##.199.177':139
- '82.##.254.106':139
- '82.##.192.47':139
- '82.##.131.241':139
- '82.##.66.116':139
- '82.##.208.12':139
- '82.##.214.87':139
- '82.#3.129.6':139
- '82.#3.7.125':139
- '82.##.223.205':139
- '82.##.124.224':139
- '82.##.183.121':139
- '82.##.159.194':139
- '82.##.234.146':139
- '82.##.55.200':139
- '82.##.199.241':139
- '82.#3.7.206':139
- '82.##.17.176':445
- '82.##.112.172':445
- '82.##.100.235':445
- '82.##.137.110':445
- '82.#3.15.25':445
- '82.##.243.115':139
- '82.#3.84.20':139
- '82.##.10.176':139
- '82.#3.64.62':445
- '82.##.211.39':445
- '82.#3.84.20':445
- '82.#3.7.206':445
- '82.##.243.115':445
- '82.#3.56.66':139
- '82.##.10.176':445
- '82.##.214.87':445
- '82.#3.129.6':445
- '82.#3.7.125':445
- '82.##.223.205':445
- '82.##.124.224':445
- '82.#3.79.12':139
- '82.#3.142.8':139
- '82.##.141.64':139
- '82.##.22.147':139
- '82.##.85.250':139
- '82.##.139.146':139
- '82.#3.65.78':139
- '82.##.254.65':139
- '82.#3.56.14':139
- '82.##.248.58':139
- '82.##.198.172':139
- '82.##.222.100':445
- '82.##.236.36':445
- '82.##.157.151':445
- '82.#3.54.32':445
- '82.##.195.237':445
- '82.##.151.66':445
- '82.##.183.47':445
- '82.#3.79.49':445
- '82.#3.34.58':445
- '82.##.229.88':445
- '82.##.168.229':445
- '82.#3.29.8':139
- '82.##.94.250':139
- '82.##.116.176':139
- '82.##.11.105':139
- '82.##.212.190':139
- '82.##.44.230':139
- '82.##.136.51':445
- '82.##.235.145':139
- '82.#3.98.72':139
- '82.##.44.206':139
- '82.#3.5.247':445
- '82.##.144.13':445
- '82.##.10.126':445
- '82.##.15.153':445
- '82.#3.4.101':445
- '82.##.128.194':445
- '82.##.188.184':445
- '82.##.255.138':445
- '82.##.83.146':445
- '82.##.32.242':445
- '82.##.151.241':445
- '82.#3.59.95':445
- '82.#3.169.3':445
- '82.##.160.194':445
- '82.##.65.112':445
- '82.##.141.41':445
- '82.##.124.196':445
- '82.##.165.168':445
- '82.##.99.222':445
- '82.##.222.169':445
- '82.##.166.99':445
- '82.##.160.194':139
- '82.#3.59.95':139
- '82.##.141.41':139
- '82.##.183.47':139
- '82.##.65.112':139
- '82.##.166.99':139
- '82.##.124.196':139
- '82.##.99.222':139
- '82.#3.169.3':139
- '82.##.222.169':139
- '82.##.151.66':139
- '82.##.157.151':139
- '82.#3.54.32':139
- '82.##.168.229':139
- '82.#3.34.58':139
- '82.##.136.51':139
- '82.##.229.88':139
- '82.#3.79.49':139
- '82.##.236.36':139
- '82.##.222.100':139
- '82.##.195.237':139
- '82.##.120.187':139
- '82.##.250.239':139
- '82.#3.95.41':139
- '82.##.188.184':139
- '82.##.55.171':139
- '82.#3.21.22':139
- '82.##.149.78':139
- '82.##.97.160':139
- '82.##.137.30':139
- '82.##.60.163':139
- '82.##.128.194':139
- '82.#3.4.101':139
- '82.##.10.126':139
- '82.##.15.153':139
- '82.##.165.168':139
- '82.##.151.241':139
- '82.##.32.242':139
- '82.##.255.138':139
- '82.##.83.146':139
- '82.#3.5.247':139
- '82.##.144.13':139
- '82.##.55.171':445
- '82.##.107.78':445
- '82.#3.24.33':445
- '82.##.14.114':445
- '82.##.234.116':445
- '82.##.120.156':445
- '82.##.174.134':445
- '82.##.63.233':445
- '82.#3.32.40':445
- '82.##.142.12':445
- '82.##.225.79':445
- '82.##.249.66':139
- '82.##.45.121':139
- '82.#3.32.89':139
- '82.##.103.88':139
- '82.##.11.194':139
- '82.##.225.221':139
- '82.#3.5.193':139
- '82.##.92.134':139
- '82.##.115.136':139
- '82.##.129.226':139
- '82.#3.114.4':139
- '82.##.145.126':139
- '82.##.192.196':139
- '82.##.69.146':139
- '82.##.231.115':139
- '82.#3.174.2':139
- '82.##.21.250':139
- '82.#3.28.22':139
- '82.##.132.106':139
- '82.#3.8.28':139
- '82.#3.56.94':139
- '82.##.249.66':445
- '82.##.45.121':445
- '82.#3.32.89':445
- '82.##.103.88':445
- '82.##.11.194':445
- '82.##.225.221':445
- '82.#3.5.193':445
- '82.##.92.134':445
- '82.##.115.136':445
- '82.##.129.226':445
- '82.#3.114.4':445
- '82.##.235.145':445
- '82.##.44.206':445
- '82.#3.98.72':445
- '82.#3.29.8':445
- '82.##.94.250':445
- '82.#3.54.32':9988
- '82.##.160.194':9988
- '82.##.136.51':9988
- '82.##.44.230':445
- '82.#3.79.49':9988
- '82.##.212.190':445
- '82.##.137.30':445
- '82.##.60.163':445
- '82.##.250.239':445
- '82.#3.95.41':445
- '82.##.120.187':445
- '82.##.11.105':445
- '82.##.116.176':445
- '82.##.149.78':445
- '82.##.97.160':445
- '82.#3.21.22':445
- '82.##.107.78':139
- '82.#3.24.33':139
- '82.##.14.114':139
- '82.##.234.116':139
- '82.##.120.156':139
- '82.##.174.134':139
- '82.##.63.233':139
- '82.#3.32.40':139
- '82.##.142.12':139
- '82.##.225.79':139
- '82.##.149.78':9988
- '82.##.83.146':9988
- '82.##.255.138':9988
- '82.##.151.241':9988
- '82.#3.59.95':9988
- '82.##.165.168':9988
- '82.##.120.187':9988
- '82.##.250.239':9988
- '82.#3.95.41':9988
- '82.##.128.194':9988
- '82.##.55.171':9988