Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '89.##.23.129':139
- '89.##.224.23':139
- '89.##.106.249':139
- '89.##.205.207':139
- '89.##.91.252':139
- '89.#6.3.91':139
- '89.#6.109.3':139
- '89.##.90.243':139
- '89.##.131.224':139
- '89.##.243.130':139
- '89.##.255.125':139
- '89.##.244.153':139
- '89.##.37.221':139
- '89.##.42.151':445
- '89.##.190.172':445
- '89.##.184.87':445
- '89.#6.25.54':139
- '89.##.70.152':139
- '89.##.136.135':139
- '89.#6.4.108':139
- '89.#6.37.4':139
- '89.##.91.252':445
- '89.##.106.249':445
- '89.##.205.207':445
- '89.##.70.152':445
- '89.##.255.125':445
- '89.##.243.130':445
- '89.##.90.243':445
- '89.##.131.224':445
- '89.##.23.129':445
- '89.##.224.23':445
- '89.#6.25.54':445
- '89.##.61.156':139
- '89.##.135.88':139
- '89.#6.21.2':139
- '89.##.103.109':139
- '89.#6.53.31':139
- '89.#6.37.4':445
- '89.##.136.135':445
- '89.#6.4.108':445
- '89.##.244.153':445
- '89.##.37.221':445
- '89.##.139.92':445
- '89.##.139.92':139
- '89.##.190.172':139
- '89.##.93.186':139
- '89.##.127.62':139
- '89.#6.5.234':139
- '89.##.129.103':445
- '89.#6.27.77':445
- '89.##.239.196':445
- '89.##.184.87':139
- '89.##.42.151':139
- '89.##.62.100':139
- '89.##.233.154':139
- '89.##.130.151':139
- '89.#6.86.62':139
- '89.#6.83.46':139
- '89.#6.48.3':139
- '89.##.18.249':139
- '89.#6.34.88':139
- '89.#6.90.36':139
- '89.##.152.130':139
- '89.#6.59.86':139
- '89.#6.90.36':445
- '89.##.18.249':445
- '89.#6.59.86':445
- '89.##.130.151':445
- '89.##.152.130':445
- '89.#6.5.234':445
- '89.##.93.186':445
- '89.##.127.62':445
- '89.#6.34.88':445
- '89.##.62.100':445
- '89.##.233.154':445
- '89.##.18.212':445
- '89.##.105.38':445
- '89.##.252.51':445
- '89.##.62.126':445
- '89.##.209.18':445
- '89.#6.48.3':445
- '89.#6.86.62':445
- '89.#6.83.46':445
- '89.##.97.178':445
- '89.##.12.223':445
- '89.#6.3.91':445
- '89.##.180.142':445
- '89.#6.5.218':445
- '89.##.143.162':445
- '89.##.207.74':445
- '89.##.98.160':445
- '89.##.219.249':139
- '89.##.146.151':139
- '89.##.102.44':445
- '89.##.202.139':445
- '89.##.237.64':445
- '89.##.95.162':445
- '89.##.117.100':445
- '89.##.214.225':445
- '89.##.85.167':445
- '89.#6.59.63':445
- '89.##.203.140':445
- '89.##.155.46':445
- '89.#6.81.69':445
- '89.#6.5.46':445
- '89.##.136.111':445
- '89.##.112.20':445
- '89.##.216.42':139
- '89.##.181.215':139
- '89.##.253.63':139
- '89.##.118.86':139
- '89.##.241.113':139
- '89.##.245.34':139
- '89.##.78.128':139
- '89.##.34.110':139
- '89.##.146.215':139
- '89.#6.66.36':139
- '89.##.210.150':139
- '89.##.46.109':139
- '89.##.202.69':139
- '89.##.97.174':139
- '89.##.189.136':139
- '89.##.179.76':139
- '89.##.28.145':139
- '89.#6.20.15':139
- '89.#6.7.24':139
- '89.##.75.215':139
- '89.##.111.140':139
- '89.##.100.102':445
- '89.##.100.102':139
- '89.#6.59.63':139
- '89.#6.4.173':139
- '89.##.234.94':139
- '89.##.136.79':139
- '89.##.214.225':139
- '89.##.136.111':139
- '89.##.117.100':139
- '89.##.203.140':139
- '89.##.85.167':139
- '89.##.108.161':139
- '89.#6.21.2':445
- '89.##.61.156':445
- '89.#6.53.31':445
- '89.#6.109.3':445
- '89.##.103.109':445
- '89.##.156.254':139
- '89.##.110.253':139
- '89.#6.6.178':139
- '89.##.135.88':445
- '89.##.111.135':139
- '89.#6.6.178':445
- '89.##.156.254':445
- '89.##.111.135':445
- '89.##.237.64':139
- '89.##.102.44':139
- '89.##.136.79':445
- '89.#6.4.173':445
- '89.##.234.94':445
- '89.##.110.253':445
- '89.##.108.161':445
- '89.##.202.139':139
- '89.#6.81.69':139
- '89.##.95.162':139
- '89.##.155.46':139
- '89.##.112.20':139
- '89.#6.5.46':139
- '89.##.180.142':139
- '89.#6.5.218':139
- '89.##.143.162':139
- '89.##.207.74':139
- '89.##.98.160':139
- '89.##.12.223':139
- '89.##.192.124':445
- '89.##.27.226':445
- '89.##.124.75':445
- '89.##.146.60':445
- '89.#6.8.93':445
- '89.#6.57.62':445
- '89.##.55.122':445
- '89.##.35.128':445
- '89.##.100.213':445
- '89.##.100.173':445
- '89.##.249.69':445
- '89.##.23.108':139
- '89.##.251.52':139
- '89.##.251.36':139
- '89.##.113.38':139
- '89.##.176.197':139
- '89.##.150.229':445
- '89.##.140.190':445
- '89.##.75.155':139
- '89.##.70.145':139
- '89.##.201.108':139
- '89.##.231.149':445
- '89.##.36.225':445
- '89.#6.150.9':445
- '89.##.154.63':445
- '89.##.209.59':445
- '89.##.139.72':445
- '89.##.107.40':445
- '89.##.55.226':445
- '89.##.48.251':445
- '89.##.170.40':445
- '89.##.230.25':445
- '89.##.163.32':445
- '89.#6.58.28':445
- '89.##.106.245':445
- '89.#6.2.213':445
- '89.##.227.59':445
- '89.##.129.175':445
- '89.##.249.253':445
- '89.#6.34.1':445
- '89.#6.62.61':445
- '89.#6.0.130':445
- '89.##.242.158':139
- '89.##.227.59':139
- '89.##.106.245':139
- '89.#6.2.213':139
- '89.#6.57.62':139
- '89.##.55.122':139
- '89.#6.0.130':139
- '89.#6.34.1':139
- '89.#6.62.61':139
- '89.##.163.32':139
- '89.#6.58.28':139
- '89.##.35.128':139
- '89.##.140.190':139
- '89.#6.8.93':139
- '89.##.146.60':139
- '89.##.249.69':139
- '89.##.150.229':139
- '89.##.100.213':139
- '89.##.100.173':139
- '89.##.27.226':139
- '89.##.124.75':139
- '89.##.192.124':139
- '89.##.135.90':139
- '89.#6.30.3':139
- '89.#6.42.16':139
- '89.##.139.72':139
- '89.##.107.40':139
- '89.##.149.244':139
- '89.##.158.190':139
- '89.##.71.142':139
- '89.##.37.127':139
- '89.##.213.119':139
- '89.##.55.226':139
- '89.##.154.63':139
- '89.##.209.59':139
- '89.##.230.25':139
- '89.##.129.175':139
- '89.##.249.253':139
- '89.##.48.251':139
- '89.##.170.40':139
- '89.##.36.225':139
- '89.#6.150.9':139
- '89.##.231.149':139
- '89.#6.42.16':445
- '89.##.74.240':445
- '89.##.88.129':445
- '89.#6.14.29':445
- '89.#6.19.41':445
- '89.#6.34.20':445
- '89.#6.51.26':445
- '89.##.13.101':445
- '89.##.188.90':445
- '89.##.228.42':445
- '89.##.134.216':445
- '89.##.233.46':445
- '89.#6.160.8':139
- '89.##.28.159':139
- '89.#6.8.40':139
- '89.##.120.15':139
- '89.##.39.227':139
- '89.##.192.13':139
- '89.##.197.191':139
- '89.##.89.129':139
- '89.##.202.136':139
- '89.#6.5.203':139
- '89.#6.27.77':139
- '89.##.62.126':139
- '89.##.129.103':139
- '89.##.197.191':445
- '89.##.239.196':139
- '89.##.105.38':139
- '89.##.97.178':139
- '89.##.18.212':139
- '89.##.209.18':139
- '89.##.252.51':139
- '89.##.192.13':445
- '89.##.39.227':445
- '89.#6.8.40':445
- '89.##.120.15':445
- '89.##.217.12':445
- '89.#6.75.25':445
- '89.#6.5.203':445
- '89.##.89.129':445
- '89.##.202.136':445
- '89.#6.160.8':445
- '89.##.28.159':445
- '89.#6.75.25':139
- '89.##.201.108':445
- '89.##.75.155':445
- '89.##.70.145':445
- '89.##.23.108':445
- '89.##.251.52':445
- '89.#6.2.213':9988
- '89.##.106.245':9988
- '89.##.100.173':9988
- '89.##.146.60':9988
- '89.##.100.213':9988
- '89.##.251.36':445
- '89.##.213.119':445
- '89.##.71.142':445
- '89.##.37.127':445
- '89.##.135.90':445
- '89.#6.30.3':445
- '89.##.113.38':445
- '89.##.176.197':445
- '89.##.242.158':445
- '89.##.149.244':445
- '89.##.158.190':445
- '89.##.88.129':139
- '89.##.228.42':139
- '89.##.74.240':139
- '89.#6.34.20':139
- '89.#6.14.29':139
- '89.##.13.101':139
- '89.##.217.12':139
- '89.#6.51.26':139
- '89.##.134.216':139
- '89.##.188.90':139
- '89.#6.19.41':139
- '89.##.249.253':9988
- '89.#6.0.130':9988
- '89.#6.58.28':9988
- '89.##.227.59':9988
- '89.##.163.32':9988
- '89.#6.34.1':9988
- '89.##.233.46':139
- '89.#6.62.61':9988
- '89.##.230.25':9988
- '89.##.129.175':9988