Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '22#.#.223.219':139
- '22#.0.84.73':139
- '22#.#.117.105':139
- '22#.#.103.250':139
- '22#.0.72.57':139
- '22#.#.115.71':139
- '22#.#.130.89':139
- '22#.0.79.37':139
- '22#.0.93.3':139
- '22#.#.229.92':139
- '22#.#.225.89':139
- '22#.#.247.232':445
- '22#.#.49.104':139
- '22#.0.86.27':445
- '22#.#.19.211':445
- '22#.#.26.248':445
- '22#.#.120.178':139
- '22#.#.119.23':139
- '22#.#.178.253':139
- '22#.#.10.187':139
- '22#.#.181.232':139
- '22#.#.223.219':445
- '22#.0.84.73':445
- '22#.#.117.105':445
- '22#.#.103.250':445
- '22#.0.72.57':445
- '22#.#.115.71':445
- '22#.#.130.89':445
- '22#.0.79.37':445
- '22#.0.93.3':445
- '22#.#.229.92':445
- '22#.#.225.89':445
- '22#.#.19.172':139
- '22#.#.49.104':445
- '22#.0.75.56':139
- '22#.#.103.84':139
- '22#.#.144.87':139
- '22#.#.120.178':445
- '22#.#.119.23':445
- '22#.#.178.253':445
- '22#.#.10.187':445
- '22#.#.181.232':445
- '22#.0.86.27':139
- '22#.#.247.232':139
- '22#.#.26.248':139
- '22#.#.73.245':139
- '22#.#.19.211':139
- '22#.0.7.3':445
- '22#.#.149.135':445
- '22#.#.181.209':445
- '22#.#.140.35':445
- '22#.#.106.144':445
- '22#.#.144.153':139
- '22#.#.181.24':139
- '22#.0.36.70':139
- '22#.0.60.83':139
- '22#.0.7.155':139
- '22#.0.2.158':139
- '22#.#.175.132':139
- '22#.#.38.252':139
- '22#.#.132.64':139
- '22#.#.63.164':139
- '22#.0.65.63':139
- '22#.#.63.164':445
- '22#.0.65.63':445
- '22#.0.36.70':445
- '22#.0.60.83':445
- '22#.#.181.24':445
- '22#.#.144.153':445
- '22#.#.73.245':445
- '22#.#.38.252':445
- '22#.#.132.64':445
- '22#.#.175.132':445
- '22#.0.2.158':445
- '22#.#.12.217':445
- '22#.#.110.59':445
- '22#.#.157.67':445
- '22#.#.65.182':445
- '22#.#.67.156':445
- '22#.#.208.195':445
- '22#.0.7.155':445
- '22#.0.91.57':445
- '22#.#.170.101':445
- '22#.#.31.170':445
- '22#.#.103.84':445
- '22#.0.2.253':445
- '22#.0.135.8':445
- '22#.#.188.92':445
- '22#.#.17.163':445
- '22#.#.179.243':445
- '22#.#.140.113':445
- '22#.0.150.1':445
- '22#.#.98.191':445
- '22#.0.73.38':445
- '22#.#.247.72':445
- '22#.#.158.91':445
- '22#.#.168.160':445
- '22#.#.22.160':445
- '22#.0.54.3':445
- '22#.0.80.75':445
- '22#.#.213.85':445
- '22#.#.213.59':445
- '22#.#.29.201':445
- '22#.#.60.110':445
- '22#.0.52.0':445
- '22#.#.217.244':445
- '22#.0.9.76':139
- '22#.#.187.72':139
- '22#.#.173.62':139
- '22#.0.76.19':139
- '22#.#.143.31':139
- '22#.#.31.228':139
- '22#.#.18.111':139
- '22#.0.52.70':139
- '22#.#.101.11':139
- '22#.#.48.161':139
- '22#.#.86.242':139
- '22#.#.167.242':139
- '22#.#.207.238':139
- '22#.#.27.164':139
- '22#.#.235.251':139
- '22#.#.27.240':139
- '22#.0.95.11':139
- '22#.0.40.53':139
- '22#.#.64.116':139
- '22#.#.111.152':139
- '22#.#.220.25':139
- '22#.0.54.3':139
- '22#.#.168.160':139
- '22#.#.213.85':139
- '22#.#.231.203':139
- '22#.0.80.75':139
- '22#.#.60.110':139
- '22#.#.213.59':139
- '22#.#.217.244':139
- '22#.#.22.160':139
- '22#.0.52.0':139
- '22#.#.139.73':139
- '22#.#.150.222':139
- '22#.0.30.7':139
- '22#.#.19.172':445
- '22#.#.144.87':445
- '22#.0.75.56':445
- '22#.#.28.183':139
- '22#.#.73.114':139
- '22#.0.41.38':139
- '22#.#.128.37':139
- '22#.#.36.218':139
- '22#.#.128.37':445
- '22#.#.36.218':445
- '22#.0.30.7':445
- '22#.0.150.1':139
- '22#.#.150.222':445
- '22#.#.139.73':445
- '22#.#.231.203':445
- '22#.#.73.114':445
- '22#.0.41.38':445
- '22#.#.28.183':445
- '22#.#.140.113':139
- '22#.#.179.243':139
- '22#.#.188.92':139
- '22#.#.17.163':139
- '22#.#.29.201':139
- '22#.#.158.91':139
- '22#.#.247.72':139
- '22#.#.98.191':139
- '22#.0.73.38':139
- '22#.0.2.253':139
- '22#.0.135.8':139
- '22#.#.208.195':139
- '22#.#.175.44':445
- '22#.#.230.113':445
- '22#.#.109.77':445
- '22#.#.232.73':445
- '22#.0.183.8':445
- '22#.#.138.195':445
- '22#.#.75.244':445
- '22#.#.176.122':445
- '22#.#.69.230':445
- '22#.#.104.70':445
- '22#.0.45.32':445
- '22#.#.22.168':139
- '22#.#.28.163':139
- '22#.#.154.124':139
- '22#.#.171.131':139
- '22#.#.239.154':139
- '22#.#.84.185':139
- '22#.#.74.146':445
- '22#.#.184.188':139
- '22#.#.30.217':139
- '22#.0.60.14':139
- '22#.#.114.54':445
- '22#.#.155.239':445
- '22#.#.99.129':445
- '22#.#.90.165':445
- '22#.0.25.69':445
- '22#.#.56.121':445
- '22#.#.141.35':445
- '22#.#.129.37':445
- '22#.0.2.155':445
- '22#.0.236.2':445
- '22#.#.15.133':445
- '22#.#.12.100':445
- '22#.#.75.249':445
- '22#.0.29.67':445
- '22#.#.174.216':445
- '22#.#.13.229':445
- '22#.#.194.54':445
- '22#.0.32.91':445
- '22#.#.30.253':445
- '22#.#.127.45':445
- '22#.#.140.60':445
- '22#.0.29.67':139
- '22#.#.12.100':139
- '22#.#.13.229':139
- '22#.#.75.244':139
- '22#.#.174.216':139
- '22#.#.30.253':139
- '22#.#.194.54':139
- '22#.#.140.60':139
- '22#.#.75.249':139
- '22#.#.127.45':139
- '22#.#.138.195':139
- '22#.0.183.8':139
- '22#.#.109.77':139
- '22#.#.232.73':139
- '22#.#.74.146':139
- '22#.0.45.32':139
- '22#.#.104.70':139
- '22#.#.176.122':139
- '22#.#.69.230':139
- '22#.#.175.44':139
- '22#.#.230.113':139
- '22#.#.54.236':139
- '22#.0.96.66':139
- '22#.#.229.15':139
- '22#.#.141.35':139
- '22#.#.118.165':139
- '22#.#.153.215':139
- '22#.#.140.127':139
- '22#.#.236.17':139
- '22#.#.178.189':139
- '22#.0.64.0':139
- '22#.#.56.121':139
- '22#.0.25.69':139
- '22#.#.99.129':139
- '22#.#.90.165':139
- '22#.0.32.91':139
- '22#.#.15.133':139
- '22#.0.236.2':139
- '22#.#.129.37':139
- '22#.0.2.155':139
- '22#.#.114.54':139
- '22#.#.155.239':139
- '22#.#.118.165':445
- '22#.#.159.103':445
- '22#.#.241.227':445
- '22#.#.102.243':445
- '22#.0.0.122':445
- '22#.#.22.226':445
- '22#.0.2.152':445
- '22#.0.43.14':445
- '22#.0.59.38':445
- '22#.0.42.89':445
- '22#.0.39.42':445
- '22#.#.122.84':445
- '22#.#.56.214':139
- '22#.#.249.214':139
- '22#.#.105.51':139
- '22#.0.2.152':139
- '22#.0.43.14':139
- '22#.#.225.174':139
- '22#.#.83.116':139
- '22#.#.98.235':139
- '22#.#.34.118':139
- '22#.0.29.74':139
- '22#.#.67.156':139
- '22#.#.157.67':139
- '22#.#.65.182':139
- '22#.0.7.3':139
- '22#.#.149.135':139
- '22#.#.31.170':139
- '22#.0.91.57':139
- '22#.#.170.101':139
- '22#.#.12.217':139
- '22#.#.110.59':139
- '22#.#.181.209':139
- '22#.#.34.118':445
- '22#.0.29.74':445
- '22#.#.249.214':445
- '22#.#.105.51':445
- '22#.#.56.214':445
- '22#.#.140.35':139
- '22#.#.106.144':139
- '22#.#.83.116':445
- '22#.#.98.235':445
- '22#.#.225.174':445
- '22#.0.60.14':445
- '22#.#.184.188':445
- '22#.#.30.217':445
- '22#.#.22.168':445
- '22#.#.28.163':445
- '22#.#.175.44':9988
- '22#.#.230.113':9988
- '22#.#.232.73':9988
- '22#.#.84.185':445
- '22#.0.183.8':9988
- '22#.#.154.124':445
- '22#.#.178.189':445
- '22#.0.64.0':445
- '22#.0.96.66':445
- '22#.#.229.15':445
- '22#.#.54.236':445
- '22#.#.171.131':445
- '22#.#.239.154':445
- '22#.#.140.127':445
- '22#.#.236.17':445
- '22#.#.153.215':445
- '22#.#.22.226':139
- '22#.#.102.243':139
- '22#.0.0.122':139
- '22#.#.30.217':9988
- '22#.#.122.84':139
- '22#.0.39.42':139
- '22#.0.59.38':139
- '22#.0.42.89':139
- '22#.#.159.103':139
- '22#.#.241.227':139
- '22#.#.229.15':9988
- '22#.#.75.249':9988
- '22#.#.194.54':9988
- '22#.#.138.195':9988
- '22#.#.69.230':9988
- '22#.#.176.122':9988
- '22#.#.141.35':9988
- '22#.#.118.165':9988
- '22#.#.129.37':9988
- '22#.0.25.69':9988
- '22#.#.99.129':9988