Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '61.##2.227.81':139
- '61.##2.164.227':139
- '61.##2.45.80':139
- '61.##2.129.128':139
- '61.##2.126.129':139
- '61.##2.172.55':139
- '61.##2.216.109':139
- '61.#82.4.39':139
- '61.##2.194.164':139
- '61.##2.173.133':139
- '61.##2.128.16':139
- '61.##2.42.86':139
- '61.##2.163.33':139
- '61.##2.161.209':139
- '61.##2.154.25':139
- '61.##2.119.244':139
- '61.##2.97.137':139
- '61.##2.94.209':139
- '61.##2.139.153':139
- '61.##2.83.163':139
- '61.##2.69.93':139
- '61.##2.128.16':445
- '61.##2.129.128':445
- '61.##2.94.209':445
- '61.##2.139.153':445
- '61.##2.97.137':445
- '61.##2.164.227':445
- '61.##2.194.164':445
- '61.##2.227.81':445
- '61.##2.126.129':445
- '61.##2.45.80':445
- '61.##2.69.93':445
- '61.##2.247.63':139
- '61.##2.154.25':445
- '61.##2.64.14':139
- '61.##2.124.247':139
- '61.##2.14.125':139
- '61.##2.163.33':445
- '61.##2.83.163':445
- '61.##2.42.86':445
- '61.##2.119.244':445
- '61.##2.161.209':445
- '61.##2.25.212':445
- '61.##2.230.59':139
- '61.##2.212.229':139
- '61.##2.104.134':139
- '61.##2.117.8':139
- '61.##2.217.64':139
- '61.##2.42.241':445
- '61.##2.158.24':445
- '61.##2.121.64':445
- '61.##2.25.212':139
- '61.##2.87.124':445
- '61.##2.83.196':139
- '61.##2.87.195':139
- '61.##2.166.242':139
- '61.##2.142.170':139
- '61.##2.49.172':139
- '61.##2.91.190':139
- '61.##2.63.103':139
- '61.##2.79.40':139
- '61.##2.252.244':139
- '61.##2.254.85':139
- '61.#82.12.5':139
- '61.##2.79.40':445
- '61.##2.83.196':445
- '61.##2.63.103':445
- '61.#82.12.5':445
- '61.##2.252.244':445
- '61.##2.230.59':445
- '61.##2.212.229':445
- '61.##2.104.134':445
- '61.##2.117.8':445
- '61.##2.217.64':445
- '61.##2.254.85':445
- '61.##2.44.248':445
- '61.##2.65.71':445
- '61.##2.182.30':445
- '61.##2.223.176':445
- '61.##2.30.175':445
- '61.##2.87.195':445
- '61.##2.166.242':445
- '61.##2.142.170':445
- '61.##2.49.172':445
- '61.##2.91.190':445
- '61.##2.230.231':445
- '61.#82.7.81':445
- '61.##2.55.135':445
- '61.##2.127.249':445
- '61.##2.135.127':445
- '61.##2.61.16':139
- '61.##2.135.122':139
- '61.##2.15.172':139
- '61.##2.231.101':445
- '61.##2.206.30':139
- '61.##2.85.41':445
- '61.##2.108.253':445
- '61.##2.134.109':445
- '61.##2.253.33':445
- '61.##2.112.18':445
- '61.##2.173.41':445
- '61.##2.27.33':445
- '61.##2.98.207':445
- '61.##2.38.218':445
- '61.##2.174.73':445
- '61.##2.119.225':445
- '61.##2.191.230':139
- '61.##2.235.164':139
- '61.##2.75.250':139
- '61.##2.27.97':139
- '61.##2.86.144':139
- '61.##2.89.91':139
- '61.##2.156.179':139
- '61.##2.91.176':139
- '61.##2.102.193':139
- '61.##2.134.161':139
- '61.##2.197.179':139
- '61.##2.86.53':139
- '61.##2.181.37':139
- '61.##2.80.215':139
- '61.##2.35.23':139
- '61.##2.152.35':139
- '61.##2.170.237':139
- '61.##2.172.104':139
- '61.##2.34.91':139
- '61.##2.73.15':139
- '61.##2.163.240':139
- '61.##2.211.35':445
- '61.##2.30.16':139
- '61.##2.36.30':139
- '61.##2.11.43':139
- '61.##2.238.81':139
- '61.##2.154.172':139
- '61.##2.253.33':139
- '61.##2.108.253':139
- '61.##2.173.41':139
- '61.##2.211.35':139
- '61.##2.112.18':139
- '61.##2.81.109':139
- '61.##2.216.109':445
- '61.##2.124.247':445
- '61.##2.172.55':445
- '61.##2.173.133':445
- '61.#82.4.39':445
- '61.##2.145.170':139
- '61.##2.179.161':139
- '61.##2.247.63':445
- '61.##2.14.125':445
- '61.##2.64.14':445
- '61.##2.179.161':445
- '61.##2.81.109':445
- '61.##2.145.170':445
- '61.#82.7.81':139
- '61.##2.231.101':139
- '61.##2.30.16':445
- '61.##2.36.30':445
- '61.##2.11.43':445
- '61.##2.238.81':445
- '61.##2.154.172':445
- '61.##2.230.231':139
- '61.##2.38.218':139
- '61.##2.27.33':139
- '61.##2.119.225':139
- '61.##2.134.109':139
- '61.##2.174.73':139
- '61.##2.135.127':139
- '61.##2.55.135':139
- '61.##2.127.249':139
- '61.##2.98.207':139
- '61.##2.85.41':139
- '61.##2.65.71':139
- '61.##2.158.159':445
- '61.##2.99.19':445
- '61.##2.207.0':445
- '61.##2.126.27':445
- '61.##2.34.186':445
- '61.##2.28.45':445
- '61.##2.237.28':445
- '61.##2.15.52':445
- '61.##2.238.66':445
- '61.##2.51.178':445
- '61.##2.81.38':445
- '61.##2.116.242':139
- '61.##2.182.112':139
- '61.##2.15.77':139
- '61.##2.111.129':139
- '61.##2.77.42':139
- '61.##2.72.35':445
- '61.##2.187.43':445
- '61.##2.202.172':139
- '61.##2.62.158':139
- '61.##2.111.125':139
- '61.##2.79.117':445
- '61.##2.187.116':445
- '61.##2.117.21':445
- '61.##2.109.110':445
- '61.##2.21.223':445
- '61.##2.109.253':445
- '61.##2.39.45':445
- '61.##2.13.127':445
- '61.##2.162.229':445
- '61.##2.4.123':445
- '61.##2.141.9':445
- '61.##2.62.102':445
- '61.##2.47.72':445
- '61.##2.244.7':445
- '61.##2.233.236':445
- '61.##2.116.181':445
- '61.##2.219.137':445
- '61.##2.207.32':445
- '61.##2.80.45':445
- '61.##2.169.29':445
- '61.##2.191.180':445
- '61.##2.214.233':139
- '61.##2.116.181':139
- '61.##2.244.7':139
- '61.##2.233.236':139
- '61.##2.28.45':139
- '61.##2.237.28':139
- '61.##2.191.180':139
- '61.##2.80.45':139
- '61.##2.169.29':139
- '61.##2.62.102':139
- '61.##2.47.72':139
- '61.##2.15.52':139
- '61.##2.126.27':139
- '61.##2.34.186':139
- '61.##2.81.38':139
- '61.##2.72.35':139
- '61.##2.187.43':139
- '61.##2.238.66':139
- '61.##2.51.178':139
- '61.##2.99.19':139
- '61.##2.207.0':139
- '61.##2.158.159':139
- '61.##2.189.26':139
- '61.##2.83.189':139
- '61.##2.12.51':139
- '61.##2.109.253':139
- '61.##2.39.45':139
- '61.##2.101.22':139
- '61.##2.12.190':139
- '61.##2.118.153':139
- '61.##2.38.141':139
- '61.##2.69.61':139
- '61.##2.13.127':139
- '61.##2.109.110':139
- '61.##2.21.223':139
- '61.##2.141.9':139
- '61.##2.219.137':139
- '61.##2.207.32':139
- '61.##2.162.229':139
- '61.##2.4.123':139
- '61.##2.187.116':139
- '61.##2.117.21':139
- '61.##2.79.117':139
- '61.##2.225.198':445
- '61.##2.6.150':445
- '61.##2.44.162':445
- '61.##2.187.164':445
- '61.##2.15.100':445
- '61.##2.35.238':445
- '61.##2.155.138':445
- '61.##2.22.231':445
- '61.##2.50.189':445
- '61.##2.214.149':445
- '61.##2.58.203':139
- '61.##2.27.178':139
- '61.##2.130.31':139
- '61.##2.26.58':139
- '61.##2.90.104':139
- '61.##2.58.90':139
- '61.##2.35.148':139
- '61.##2.110.35':139
- '61.##2.159.49':139
- '61.##2.151.243':139
- '61.##2.56.45':139
- '61.##2.121.64':139
- '61.##2.42.241':139
- '61.##2.87.124':139
- '61.##2.110.35':445
- '61.##2.58.203':445
- '61.##2.182.30':139
- '61.##2.44.248':139
- '61.##2.30.175':139
- '61.##2.158.24':139
- '61.##2.223.176':139
- '61.##2.35.148':445
- '61.##2.58.90':445
- '61.##2.26.58':445
- '61.##2.90.104':445
- '61.#82.33.0':445
- '61.##2.61.67':445
- '61.##2.56.45':445
- '61.##2.159.49':445
- '61.##2.151.243':445
- '61.##2.27.178':445
- '61.##2.130.31':445
- '61.##2.61.67':139
- '61.##2.62.158':445
- '61.##2.111.125':445
- '61.##2.182.112':445
- '61.##2.15.77':445
- '61.##2.116.242':445
- '61.##2.81.38':9988
- '61.##2.187.43':9988
- '61.##2.126.27':9988
- '61.##2.202.172':445
- '61.##2.72.35':9988
- '61.##2.77.42':445
- '61.##2.38.141':445
- '61.##2.69.61':445
- '61.##2.83.189':445
- '61.##2.12.51':445
- '61.##2.189.26':445
- '61.##2.214.233':445
- '61.##2.111.129':445
- '61.##2.12.190':445
- '61.##2.118.153':445
- '61.##2.101.22':445
- '61.##2.6.150':139
- '61.##2.50.189':139
- '61.##2.225.198':139
- '61.##2.15.100':139
- '61.##2.44.162':139
- '61.##2.155.138':139
- '61.#82.33.0':139
- '61.##2.35.238':139
- '61.##2.214.149':139
- '61.##2.22.231':139
- '61.##2.187.164':139
- '61.##2.233.236':9988
- '61.##2.169.29':9988
- '61.##2.99.19':9988
- '61.##2.34.186':9988
- '61.##2.158.159':9988
- '61.##2.117.21':9988
- '61.##2.15.77':9988
- '61.##2.219.137':9988
- '61.##2.191.180':9988
- '61.##2.80.45':9988