Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '19#.9.101.3':139
- '19#.#.122.12':139
- '19#.9.3.150':139
- '19#.#.63.214':139
- '19#.#.28.185':139
- '19#.#.122.135':139
- '19#.#.165.181':139
- '19#.#.243.129':139
- '19#.#.20.149':139
- '19#.#.156.150':139
- '19#.9.28.75':139
- '19#.#.116.53':139
- '19#.#.145.238':139
- '19#.#.56.127':445
- '19#.9.72.73':445
- '19#.9.57.78':445
- '19#.#.178.219':139
- '19#.#.105.48':139
- '19#.#.219.82':139
- '19#.9.216.7':139
- '19#.#.82.216':139
- '19#.#.28.185':445
- '19#.9.3.150':445
- '19#.#.63.214':445
- '19#.#.105.48':445
- '19#.9.28.75':445
- '19#.#.156.150':445
- '19#.#.243.129':445
- '19#.#.20.149':445
- '19#.9.101.3':445
- '19#.#.122.12':445
- '19#.#.178.219':445
- '19#.#.199.71':139
- '19#.#.234.13':139
- '19#.#.30.222':139
- '19#.#.94.166':139
- '19#.#.121.49':139
- '19#.#.82.216':445
- '19#.#.219.82':445
- '19#.9.216.7':445
- '19#.#.116.53':445
- '19#.#.145.238':445
- '19#.#.13.210':445
- '19#.#.13.210':139
- '19#.9.72.73':139
- '19#.#.128.50':139
- '19#.#.72.220':139
- '19#.#.109.160':139
- '19#.#.217.110':445
- '19#.#.91.112':445
- '19#.#.156.215':445
- '19#.9.57.78':139
- '19#.#.56.127':139
- '19#.#.148.40':139
- '19#.#.142.163':139
- '19#.#.111.182':139
- '19#.9.95.35':139
- '19#.#.241.198':139
- '19#.#.210.241':139
- '19#.#.243.177':139
- '19#.#.201.60':139
- '19#.#.200.91':139
- '19#.9.46.89':139
- '19#.9.62.78':139
- '19#.#.200.91':445
- '19#.#.243.177':445
- '19#.9.62.78':445
- '19#.#.111.182':445
- '19#.9.46.89':445
- '19#.#.109.160':445
- '19#.#.128.50':445
- '19#.#.72.220':445
- '19#.#.201.60':445
- '19#.#.148.40':445
- '19#.#.142.163':445
- '19#.9.0.253':445
- '19#.#.253.209':445
- '19#.#.191.156':445
- '19#.#.182.58':445
- '19#.#.55.208':445
- '19#.#.210.241':445
- '19#.9.95.35':445
- '19#.#.241.198':445
- '19#.#.69.254':445
- '19#.#.198.69':445
- '19#.#.122.135':445
- '19#.#.76.222':445
- '19#.#.63.199':445
- '19#.#.80.219':445
- '19#.9.20.96':445
- '19#.9.59.54':445
- '19#.#.142.43':139
- '19#.#.29.142':139
- '19#.9.43.50':445
- '19#.#.201.183':445
- '19#.#.91.225':445
- '19#.#.55.216':445
- '19#.#.244.205':445
- '19#.#.233.17':445
- '19#.#.214.129':445
- '19#.#.153.44':445
- '19#.#.99.131':445
- '19#.#.178.38':445
- '19#.#.13.181':445
- '19#.#.30.178':445
- '19#.#.11.177':445
- '19#.#.211.69':445
- '19#.#.139.254':139
- '19#.#.65.252':139
- '19#.#.151.125':139
- '19#.#.26.183':139
- '19#.9.32.13':139
- '19#.#.132.63':139
- '19#.#.153.130':139
- '19#.9.54.21':139
- '19#.9.86.23':139
- '19#.#.49.140':139
- '19#.#.50.252':139
- '19#.#.113.191':139
- '19#.#.28.125':139
- '19#.#.112.90':139
- '19#.#.166.160':139
- '19#.#.90.105':139
- '19#.#.15.238':139
- '19#.#.150.147':139
- '19#.#.79.247':139
- '19#.#.205.77':139
- '19#.#.216.80':139
- '19#.#.243.96':445
- '19#.#.243.96':139
- '19#.#.153.44':139
- '19#.#.31.137':139
- '19#.#.124.79':139
- '19#.9.24.53':139
- '19#.#.233.17':139
- '19#.#.11.177':139
- '19#.#.244.205':139
- '19#.#.99.131':139
- '19#.#.214.129':139
- '19#.9.50.90':139
- '19#.#.30.222':445
- '19#.#.199.71':445
- '19#.#.121.49':445
- '19#.#.165.181':445
- '19#.#.94.166':445
- '19#.#.100.238':139
- '19#.#.48.250':139
- '19#.#.175.213':139
- '19#.#.234.13':445
- '19#.#.35.234':139
- '19#.#.175.213':445
- '19#.#.100.238':445
- '19#.#.35.234':445
- '19#.#.91.225':139
- '19#.9.43.50':139
- '19#.9.24.53':445
- '19#.#.31.137':445
- '19#.#.124.79':445
- '19#.#.48.250':445
- '19#.9.50.90':445
- '19#.#.201.183':139
- '19#.#.13.181':139
- '19#.#.55.216':139
- '19#.#.178.38':139
- '19#.#.211.69':139
- '19#.#.30.178':139
- '19#.#.76.222':139
- '19#.#.63.199':139
- '19#.#.80.219':139
- '19#.9.20.96':139
- '19#.9.59.54':139
- '19#.#.198.69':139
- '19#.#.110.186':445
- '19#.#.244.254':445
- '19#.9.0.69':445
- '19#.#.123.175':445
- '19#.#.145.200':445
- '19#.#.209.213':445
- '19#.#.198.210':445
- '19#.#.44.121':445
- '19#.9.159.5':445
- '19#.#.21.217':445
- '19#.#.119.238':445
- '19#.#.225.132':139
- '19#.#.87.180':139
- '19#.#.236.181':139
- '19#.#.119.207':139
- '19#.#.196.247':139
- '19#.#.103.48':445
- '19#.9.88.15':445
- '19#.9.56.34':139
- '19#.9.151.2':139
- '19#.#.165.17':139
- '19#.#.198.252':445
- '19#.9.2.97':445
- '19#.9.13.26':445
- '19#.#.189.110':445
- '19#.9.24.14':445
- '19#.#.50.128':445
- '19#.#.66.124':445
- '19#.#.17.247':445
- '19#.#.168.232':445
- '19#.#.156.201':445
- '19#.#.68.138':445
- '19#.#.180.246':445
- '19#.9.6.214':445
- '19#.#.238.208':445
- '19#.#.81.198':445
- '19#.#.208.81':445
- '19#.#.109.130':445
- '19#.#.23.109':445
- '19#.#.12.100':445
- '19#.#.154.194':445
- '19#.#.163.193':445
- '19#.#.169.182':139
- '19#.#.208.81':139
- '19#.#.238.208':139
- '19#.#.81.198':139
- '19#.#.209.213':139
- '19#.#.198.210':139
- '19#.#.163.193':139
- '19#.#.12.100':139
- '19#.#.154.194':139
- '19#.#.180.246':139
- '19#.9.6.214':139
- '19#.#.44.121':139
- '19#.#.145.200':139
- '19#.9.88.15':139
- '19#.#.119.238':139
- '19#.#.103.48':139
- '19#.#.123.175':139
- '19#.9.159.5':139
- '19#.#.21.217':139
- '19#.#.244.254':139
- '19#.9.0.69':139
- '19#.#.110.186':139
- '19#.#.89.124':139
- '19#.#.173.206':139
- '19#.9.2.192':139
- '19#.#.50.128':139
- '19#.#.66.124':139
- '19#.#.30.210':139
- '19#.9.12.4':139
- '19#.#.175.68':139
- '19#.#.48.214':139
- '19#.9.69.86':139
- '19#.#.17.247':139
- '19#.#.189.110':139
- '19#.9.24.14':139
- '19#.#.68.138':139
- '19#.#.109.130':139
- '19#.#.23.109':139
- '19#.#.168.232':139
- '19#.#.156.201':139
- '19#.9.2.97':139
- '19#.9.13.26':139
- '19#.#.198.252':139
- '19#.9.2.192':445
- '19#.#.139.54':445
- '19#.9.54.62':445
- '19#.#.15.134':445
- '19#.#.176.169':445
- '19#.#.43.103':445
- '19#.9.30.15':445
- '19#.#.16.201':445
- '19#.9.8.214':445
- '19#.#.60.130':445
- '19#.#.197.249':445
- '19#.#.241.190':445
- '19#.#.252.43':139
- '19#.9.4.252':139
- '19#.#.37.139':139
- '19#.#.54.234':139
- '19#.#.15.202':139
- '19#.9.94.0':139
- '19#.#.246.82':139
- '19#.#.53.235':139
- '19#.#.106.137':139
- '19#.#.107.14':139
- '19#.#.91.112':139
- '19#.#.182.58':139
- '19#.#.217.110':139
- '19#.#.246.82':445
- '19#.#.156.215':139
- '19#.#.253.209':139
- '19#.#.69.254':139
- '19#.9.0.253':139
- '19#.#.55.208':139
- '19#.#.191.156':139
- '19#.9.94.0':445
- '19#.#.15.202':445
- '19#.#.37.139':445
- '19#.#.54.234':445
- '19#.#.247.36':445
- '19#.9.30.23':445
- '19#.#.107.14':445
- '19#.#.53.235':445
- '19#.#.106.137':445
- '19#.#.252.43':445
- '19#.9.4.252':445
- '19#.9.30.23':139
- '19#.#.165.17':445
- '19#.9.56.34':445
- '19#.9.151.2':445
- '19#.#.225.132':445
- '19#.#.87.180':445
- '19#.9.159.5':9988
- '19#.#.198.210':9988
- '19#.#.244.254':9988
- '19#.9.88.15':9988
- '19#.#.110.186':9988
- '19#.#.236.181':445
- '19#.9.69.86':445
- '19#.#.175.68':445
- '19#.#.48.214':445
- '19#.#.89.124':445
- '19#.#.173.206':445
- '19#.#.119.207':445
- '19#.#.196.247':445
- '19#.#.169.182':445
- '19#.#.30.210':445
- '19#.9.12.4':445
- '19#.9.54.62':139
- '19#.#.60.130':139
- '19#.#.139.54':139
- '19#.#.43.103':139
- '19#.#.15.134':139
- '19#.#.16.201':139
- '19#.#.247.36':139
- '19#.9.30.15':139
- '19#.#.197.249':139
- '19#.9.8.214':139
- '19#.#.241.190':139
- '19#.#.180.246':9988
- '19#.9.6.214':9988
- '19#.#.238.208':9988
- '19#.#.81.198':9988
- '19#.#.208.81':9988
- '19#.#.68.138':9988
- '19#.#.176.169':139
- '19#.#.23.109':9988
- '19#.#.163.193':9988
- '19#.#.109.130':9988