Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '87.##9.190.93':139
- '87.##9.109.26':139
- '87.##9.192.107':139
- '87.##9.28.69':139
- '87.##9.26.90':139
- '87.##9.73.42':139
- '87.##9.241.25':139
- '87.##9.84.103':139
- '87.##9.29.30':139
- '87.##9.42.37':139
- '87.##9.105.69':139
- '87.##9.77.116':139
- '87.##9.99.77':139
- '87.##9.232.49':139
- '87.##9.67.220':139
- '87.##9.37.19':139
- '87.##9.228.128':139
- '87.##9.93.213':139
- '87.##9.20.210':139
- '87.##9.190.247':139
- '87.#49.2.60':139
- '87.##9.170.236':139
- '87.##9.20.210':445
- '87.##9.228.128':445
- '87.#49.2.60':445
- '87.##9.99.77':445
- '87.##9.190.247':445
- '87.##9.26.90':445
- '87.##9.192.107':445
- '87.##9.28.69':445
- '87.##9.93.213':445
- '87.##9.105.69':445
- '87.##9.77.116':445
- '87.##9.254.27':139
- '87.##9.61.250':139
- '87.##9.131.182':139
- '87.##9.250.6':139
- '87.##9.183.20':139
- '87.##9.37.19':445
- '87.##9.232.49':445
- '87.##9.67.220':445
- '87.##9.249.148':139
- '87.##9.184.241':445
- '87.##9.210.142':139
- '87.##9.212.2':139
- '87.##9.50.110':139
- '87.##9.40.244':139
- '87.##9.26.55':139
- '87.##9.47.73':139
- '87.##9.94.193':445
- '87.##9.252.221':139
- '87.##9.200.3':139
- '87.##9.74.149':139
- '87.##9.60.185':139
- '87.##9.112.241':139
- '87.#49.29.8':139
- '87.##9.221.157':139
- '87.#49.5.54':139
- '87.##9.43.55':139
- '87.##9.235.220':139
- '87.##9.212.168':139
- '87.##9.97.139':139
- '87.##9.12.237':139
- '87.##9.173.160':139
- '87.##9.23.102':445
- '87.##9.210.142':445
- '87.##9.212.2':445
- '87.##9.50.110':445
- '87.##9.40.244':445
- '87.##9.26.55':445
- '87.##9.47.73':445
- '87.##9.184.241':139
- '87.##9.252.221':445
- '87.##9.200.3':445
- '87.##9.74.149':445
- '87.##9.60.185':445
- '87.##9.112.241':445
- '87.#49.29.8':445
- '87.##9.221.157':445
- '87.#49.5.54':445
- '87.##9.43.55':445
- '87.##9.235.220':445
- '87.##9.212.168':445
- '87.##9.97.139':445
- '87.##9.12.237':445
- '87.##9.173.160':445
- '87.##9.190.93':445
- '87.##9.55.142':139
- '87.##9.75.55':139
- '87.##9.121.152':445
- '87.##9.242.252':445
- '87.##9.101.200':445
- '87.##9.30.220':139
- '87.##9.77.108':139
- '87.##9.246.157':139
- '87.#49.85.6':139
- '87.##9.222.206':139
- '87.##9.44.33':445
- '87.##9.213.166':445
- '87.##9.5.250':445
- '87.#49.8.11':445
- '87.##9.129.121':445
- '87.##9.183.2':445
- '87.##9.68.115':445
- '87.##9.50.210':445
- '87.##9.43.187':445
- '87.##9.86.109':445
- '87.##9.27.83':445
- '87.##9.72.123':139
- '87.##9.139.159':139
- '87.##9.87.42':139
- '87.##9.224.122':139
- '87.##9.215.112':139
- '87.##9.246.214':139
- '87.##9.149.239':139
- '87.##9.44.66':139
- '87.##9.109.184':139
- '87.##9.228.86':139
- '87.##9.19.228':139
- '87.##9.83.125':139
- '87.##9.45.139':139
- '87.##9.16.34':139
- '87.##9.88.248':139
- '87.##9.127.121':139
- '87.##9.159.242':139
- '87.##9.75.128':139
- '87.##9.177.27':139
- '87.#49.1.44':139
- '87.##9.14.39':139
- '87.##9.72.152':139
- '87.#49.1.3':139
- '87.##9.74.136':139
- '87.##9.48.173':139
- '87.##9.61.250':445
- '87.##9.249.148':445
- '87.##9.129.121':139
- '87.##9.2.130':139
- '87.##9.121.138':139
- '87.##9.99.95':139
- '87.##9.138.99':139
- '87.##9.254.27':445
- '87.##9.84.103':445
- '87.##9.73.42':445
- '87.##9.42.37':445
- '87.##9.109.26':445
- '87.##9.29.30':445
- '87.##9.183.20':445
- '87.##9.131.182':445
- '87.##9.250.6':445
- '87.##9.241.25':445
- '87.##9.170.236':445
- '87.##9.183.2':139
- '87.#49.1.3':445
- '87.##9.99.95':445
- '87.##9.48.173':445
- '87.##9.101.200':139
- '87.##9.121.152':139
- '87.##9.2.130':445
- '87.##9.23.185':445
- '87.##9.121.138':445
- '87.##9.74.136':445
- '87.##9.138.99':445
- '87.##9.242.252':139
- '87.##9.5.250':139
- '87.##9.86.109':139
- '87.##9.213.166':139
- '87.##9.23.185':139
- '87.#49.8.11':139
- '87.##9.50.210':139
- '87.##9.44.33':139
- '87.##9.27.83':139
- '87.##9.68.115':139
- '87.##9.43.187':139
- '87.##9.113.216':445
- '87.##9.217.5':445
- '87.##9.217.11':445
- '87.##9.114.170':445
- '87.##9.54.240':445
- '87.##9.192.126':445
- '87.##9.144.96':445
- '87.##9.127.71':445
- '87.##9.105.138':445
- '87.##9.13.177':445
- '87.##9.183.92':445
- '87.##9.161.16':139
- '87.##9.152.8':139
- '87.##9.184.216':139
- '87.##9.195.144':139
- '87.##9.67.123':139
- '87.##9.109.185':445
- '87.##9.204.34':445
- '87.##9.83.147':139
- '87.##9.48.152':139
- '87.##9.129.233':139
- '87.##9.241.209':445
- '87.#49.37.2':445
- '87.##9.37.137':445
- '87.##9.1.115':445
- '87.##9.42.93':445
- '87.##9.59.147':445
- '87.##9.122.232':445
- '87.##9.212.155':445
- '87.##9.192.218':445
- '87.##9.26.145':445
- '87.##9.209.49':445
- '87.##9.246.70':445
- '87.##9.28.180':445
- '87.##9.21.100':445
- '87.##9.189.9':445
- '87.#49.5.30':445
- '87.##9.113.17':445
- '87.##9.30.22':445
- '87.##9.217.90':445
- '87.##9.9.123':445
- '87.##9.222.102':445
- '87.##9.122.208':445
- '87.#49.5.30':139
- '87.##9.113.17':139
- '87.##9.241.209':139
- '87.##9.192.126':139
- '87.##9.144.96':139
- '87.##9.222.102':139
- '87.##9.122.208':139
- '87.##9.21.100':139
- '87.##9.189.9':139
- '87.##9.28.180':139
- '87.##9.127.71':139
- '87.##9.114.170':139
- '87.##9.54.240':139
- '87.##9.183.92':139
- '87.##9.204.34':139
- '87.##9.109.185':139
- '87.##9.105.138':139
- '87.##9.13.177':139
- '87.##9.217.5':139
- '87.##9.217.11':139
- '87.##9.113.216':139
- '87.##9.9.123':139
- '87.##9.252.168':139
- '87.##9.252.137':139
- '87.##9.7.157':139
- '87.##9.122.232':139
- '87.##9.212.155':139
- '87.##9.195.215':139
- '87.##9.115.241':139
- '87.##9.160.16':139
- '87.##9.175.77':139
- '87.##9.129.62':139
- '87.##9.192.218':139
- '87.##9.42.93':139
- '87.##9.59.147':139
- '87.##9.246.70':139
- '87.##9.30.22':139
- '87.##9.217.90':139
- '87.##9.26.145':139
- '87.##9.209.49':139
- '87.##9.37.137':139
- '87.##9.1.115':139
- '87.#49.37.2':139
- '87.##9.7.157':445
- '87.##9.72.113':445
- '87.##9.117.107':445
- '87.##9.112.132':445
- '87.##9.78.75':139
- '87.##9.53.41':445
- '87.##9.103.112':445
- '87.##9.78.109':445
- '87.##9.250.125':445
- '87.##9.9.227':445
- '87.#49.79.9':445
- '87.#49.49.2':139
- '87.##9.105.120':139
- '87.##9.44.244':139
- '87.##9.120.77':139
- '87.##9.201.94':139
- '87.##9.128.118':139
- '87.##9.82.246':139
- '87.##9.112.148':139
- '87.##9.41.236':139
- '87.##9.220.167':139
- '87.##9.61.220':139
- '87.##9.171.88':445
- '87.##9.41.236':445
- '87.##9.82.246':445
- '87.##9.61.220':445
- '87.##9.44.244':445
- '87.##9.220.167':445
- '87.##9.94.193':139
- '87.##9.23.102':139
- '87.##9.78.75':445
- '87.##9.112.148':445
- '87.#49.49.2':445
- '87.##9.105.120':445
- '87.##9.151.53':445
- '87.##9.169.165':445
- '87.##9.167.175':445
- '87.##9.93.171':445
- '87.##9.182.93':445
- '87.##9.128.118':445
- '87.##9.120.77':445
- '87.##9.201.94':445
- '87.##9.206.198':445
- '87.##9.229.206':445
- '87.##9.83.147':445
- '87.##9.113.216':9988
- '87.##9.129.233':445
- '87.##9.152.8':445
- '87.##9.48.152':445
- '87.##9.241.209':9988
- '87.##9.28.180':9988
- '87.##9.13.177':9988
- '87.##9.217.5':9988
- '87.##9.105.138':9988
- '87.##9.161.16':445
- '87.##9.129.62':445
- '87.##9.160.16':445
- '87.##9.175.77':445
- '87.##9.252.168':445
- '87.##9.252.137':445
- '87.##9.67.123':445
- '87.##9.184.216':445
- '87.##9.195.144':445
- '87.##9.195.215':445
- '87.##9.115.241':445
- '87.##9.21.100':9988
- '87.##9.93.171':139
- '87.##9.182.93':139
- '87.##9.171.88':139
- '87.##9.103.112':139
- '87.##9.78.109':139
- '87.##9.206.198':139
- '87.##9.229.206':139
- '87.##9.169.165':139
- '87.##9.167.175':139
- '87.##9.151.53':139
- '87.##9.250.125':139
- '87.##9.26.145':9988
- '87.##9.53.41':139
- '87.#49.37.2':9988
- '87.##9.9.123':9988
- '87.##9.222.102':9988
- '87.##9.9.227':139
- '87.#49.79.9':139
- '87.##9.117.107':139
- '87.##9.112.132':139
- '87.##9.72.113':139