Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '63.##.69.134':139
- '63.#6.20.18':139
- '63.##.153.171':139
- '63.##.77.122':139
- '63.##.166.77':139
- '63.##.38.137':139
- '63.##.74.187':139
- '63.#6.6.16':139
- '63.##.250.67':139
- '63.##.226.133':139
- '63.##.108.142':139
- '63.##.53.225':445
- '63.#6.95.25':445
- '63.##.81.126':445
- '63.##.28.171':445
- '63.##.87.220':445
- '63.##.211.62':139
- '63.##.168.120':139
- '63.#6.7.152':139
- '63.##.248.37':445
- '63.##.34.176':139
- '63.##.250.67':445
- '63.##.226.133':445
- '63.#6.20.18':445
- '63.##.153.171':445
- '63.##.69.134':445
- '63.##.220.148':445
- '63.##.207.219':445
- '63.##.74.187':445
- '63.#6.6.16':445
- '63.##.38.137':445
- '63.##.166.77':445
- '63.##.91.131':139
- '63.##.34.176':445
- '63.##.88.207':139
- '63.##.220.148':139
- '63.##.207.219':139
- '63.##.108.142':445
- '63.##.77.122':445
- '63.##.168.120':445
- '63.#6.7.152':445
- '63.##.211.62':445
- '63.#6.95.25':139
- '63.##.248.37':139
- '63.##.53.225':139
- '63.##.87.220':139
- '63.##.81.126':139
- '63.##.252.37':445
- '63.##.241.111':445
- '63.##.37.155':445
- '63.#6.22.91':445
- '63.##.155.145':445
- '63.##.28.171':139
- '63.##.68.220':139
- '63.##.157.20':139
- '63.##.68.147':139
- '63.##.108.71':139
- '63.##.244.12':139
- '63.#6.22.41':139
- '63.##.53.250':139
- '63.##.213.113':139
- '63.##.18.193':139
- '63.#6.51.84':139
- '63.##.68.220':445
- '63.##.157.20':445
- '63.##.68.147':445
- '63.##.108.71':445
- '63.##.244.12':445
- '63.#6.22.41':445
- '63.##.53.250':445
- '63.##.213.113':445
- '63.##.18.193':445
- '63.#6.51.84':445
- '63.##.160.72':445
- '63.#6.47.8':445
- '63.##.106.30':445
- '63.##.211.136':445
- '63.#6.74.71':445
- '63.##.55.116':445
- '63.##.146.231':445
- '63.##.73.135':445
- '63.##.74.117':445
- '63.#6.0.212':445
- '63.##.246.131':445
- '63.##.88.207':445
- '63.##.59.212':445
- '63.##.78.107':445
- '63.#6.52.46':445
- '63.#6.31.47':445
- '63.##.106.46':445
- '63.##.26.101':445
- '63.##.130.117':445
- '63.#6.8.207':445
- '63.##.78.215':445
- '63.##.168.175':445
- '63.##.146.244':445
- '63.##.193.231':445
- '63.##.143.66':445
- '63.##.153.48':445
- '63.##.215.85':445
- '63.##.48.204':445
- '63.##.75.180':445
- '63.##.243.224':445
- '63.##.122.229':445
- '63.##.183.249':445
- '63.#6.69.59':445
- '63.##.170.107':139
- '63.##.197.57':139
- '63.##.61.199':139
- '63.##.245.82':139
- '63.##.199.129':139
- '63.#6.34.52':139
- '63.##.12.121':139
- '63.##.64.190':139
- '63.#6.94.50':139
- '63.#6.29.94':139
- '63.##.16.207':139
- '63.##.210.137':139
- '63.##.104.210':139
- '63.#6.138.1':139
- '63.##.228.248':445
- '63.#6.20.10':445
- '63.#6.80.31':139
- '63.##.44.136':139
- '63.##.18.159':139
- '63.##.229.204':139
- '63.#6.24.80':139
- '63.##.143.66':139
- '63.##.183.249':139
- '63.##.193.231':139
- '63.##.48.204':139
- '63.##.153.48':139
- '63.##.243.224':139
- '63.##.146.244':139
- '63.##.75.180':139
- '63.#6.69.59':139
- '63.##.122.229':139
- '63.##.215.85':139
- '63.##.49.146':139
- '63.##.100.49':139
- '63.##.244.102':139
- '63.##.91.131':445
- '63.##.86.149':139
- '63.##.210.228':139
- '63.#6.24.79':139
- '63.##.63.238':139
- '63.##.92.223':139
- '63.#6.17.3':139
- '63.##.49.146':445
- '63.##.100.49':445
- '63.##.244.102':445
- '63.#6.20.10':139
- '63.##.86.149':445
- '63.##.210.228':445
- '63.#6.24.79':445
- '63.##.63.238':445
- '63.##.92.223':445
- '63.#6.17.3':445
- '63.##.228.248':139
- '63.##.59.212':139
- '63.##.78.107':139
- '63.#6.52.46':139
- '63.#6.31.47':139
- '63.##.106.46':139
- '63.##.26.101':139
- '63.##.130.117':139
- '63.#6.8.207':139
- '63.##.78.215':139
- '63.##.168.175':139
- '63.#6.106.5':445
- '63.#6.164.7':445
- '63.##.107.178':445
- '63.#6.39.45':445
- '63.#6.14.70':445
- '63.##.132.145':445
- '63.#6.0.127':445
- '63.#6.46.26':445
- '63.##.101.175':445
- '63.##.184.110':445
- '63.##.45.148':445
- '63.##.24.122':139
- '63.##.124.179':139
- '63.#6.1.101':139
- '63.##.30.187':139
- '63.##.34.182':139
- '63.#6.17.51':139
- '63.##.93.116':445
- '63.##.101.123':139
- '63.##.94.110':139
- '63.#6.54.8':139
- '63.##.173.180':445
- '63.#6.85.24':445
- '63.##.169.23':445
- '63.##.77.117':445
- '63.#6.24.77':445
- '63.##.89.180':445
- '63.##.206.214':445
- '63.##.241.239':445
- '63.##.238.145':445
- '63.##.78.104':445
- '63.##.43.105':445
- '63.#6.52.1':445
- '63.##.238.51':445
- '63.#6.71.88':445
- '63.##.38.195':445
- '63.#6.7.48':445
- '63.##.221.22':445
- '63.##.105.221':445
- '63.##.242.87':445
- '63.#6.5.170':445
- '63.##.86.176':445
- '63.#6.71.88':139
- '63.#6.52.1':139
- '63.#6.7.48':139
- '63.#6.0.127':139
- '63.##.38.195':139
- '63.##.242.87':139
- '63.##.221.22':139
- '63.##.86.176':139
- '63.##.238.51':139
- '63.#6.5.170':139
- '63.##.132.145':139
- '63.#6.14.70':139
- '63.##.107.178':139
- '63.#6.39.45':139
- '63.##.45.148':139
- '63.##.93.116':139
- '63.##.184.110':139
- '63.#6.46.26':139
- '63.##.101.175':139
- '63.#6.106.5':139
- '63.#6.164.7':139
- '63.#6.4.124':139
- '63.##.181.38':139
- '63.##.201.16':139
- '63.##.206.214':139
- '63.##.40.192':139
- '63.#6.105.1':139
- '63.##.125.110':139
- '63.#6.32.2':139
- '63.#6.98.98':139
- '63.##.189.12':139
- '63.##.89.180':139
- '63.#6.24.77':139
- '63.##.169.23':139
- '63.##.77.117':139
- '63.##.105.221':139
- '63.##.43.105':139
- '63.##.78.104':139
- '63.##.241.239':139
- '63.##.238.145':139
- '63.##.173.180':139
- '63.#6.85.24':139
- '63.##.40.192':445
- '63.##.92.185':445
- '63.##.232.92':445
- '63.##.165.71':445
- '63.##.17.239':445
- '63.##.210.156':445
- '63.##.147.82':445
- '63.##.51.226':445
- '63.#6.35.31':445
- '63.##.237.190':445
- '63.##.16.161':445
- '63.##.40.226':445
- '63.##.51.226':139
- '63.##.251.51':139
- '63.##.147.82':139
- '63.##.16.161':139
- '63.#6.35.31':139
- '63.##.112.137':139
- '63.##.141.63':445
- '63.##.185.147':139
- '63.#6.74.52':139
- '63.#6.6.253':139
- '63.##.106.30':139
- '63.#6.0.212':139
- '63.#6.47.8':139
- '63.##.55.116':139
- '63.##.211.136':139
- '63.##.73.135':139
- '63.##.160.72':139
- '63.##.146.231':139
- '63.##.246.131':139
- '63.##.74.117':139
- '63.#6.74.71':139
- '63.##.185.147':445
- '63.##.112.137':445
- '63.#6.6.253':445
- '63.##.251.51':445
- '63.#6.74.52':445
- '63.##.252.37':139
- '63.##.241.111':139
- '63.##.37.155':139
- '63.#6.22.91':139
- '63.##.155.145':139
- '63.#6.54.8':445
- '63.##.101.123':445
- '63.##.94.110':445
- '63.##.24.122':445
- '63.##.124.179':445
- '63.#6.106.5':9988
- '63.#6.164.7':9988
- '63.##.107.178':9988
- '63.#6.17.51':445
- '63.##.93.116':9988
- '63.#6.1.101':445
- '63.#6.98.98':445
- '63.##.189.12':445
- '63.##.181.38':445
- '63.##.201.16':445
- '63.#6.4.124':445
- '63.##.30.187':445
- '63.##.34.182':445
- '63.##.125.110':445
- '63.#6.32.2':445
- '63.#6.105.1':445
- '63.##.40.226':139
- '63.##.17.239':139
- '63.##.141.63':139
- '63.##.189.12':9988
- '63.#6.32.2':9988
- '63.##.232.92':139
- '63.##.237.190':139
- '63.##.92.185':139
- '63.##.210.156':139
- '63.##.165.71':139
- '63.##.89.180':9988
- '63.##.86.176':9988
- '63.#6.5.170':9988
- '63.##.238.51':9988
- '63.#6.7.48':9988
- '63.#6.52.1':9988
- '63.#6.24.77':9988
- '63.##.169.23':9988
- '63.##.77.117':9988
- '63.##.242.87':9988
- '63.##.105.221':9988