Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##8.47.21':139
- '88.##8.9.249':139
- '88.##8.216.40':139
- '88.##8.31.87':139
- '88.##8.77.31':139
- '88.##8.214.126':139
- '88.##8.84.127':139
- '88.##8.126.111':139
- '88.##8.71.205':139
- '88.##8.87.48':139
- '88.##8.86.191':139
- '88.##8.193.26':139
- '88.##8.114.177':139
- '88.##8.83.64':139
- '88.##8.131.242':139
- '88.##8.146.95':139
- '88.##8.169.114':139
- '88.##8.190.185':139
- '88.##8.74.112':139
- '88.##8.145.124':139
- '88.##8.126.26':139
- '88.##8.114.177':445
- '88.##8.145.124':445
- '88.##8.193.26':445
- '88.##8.146.95':445
- '88.##8.83.64':445
- '88.##8.190.185':445
- '88.##8.86.191':445
- '88.##8.169.114':445
- '88.##8.126.26':445
- '88.##8.74.112':445
- '88.##8.131.242':445
- '88.##8.207.37':139
- '88.##8.19.185':445
- '88.##8.168.182':139
- '88.##8.65.43':139
- '88.##8.147.31':139
- '88.##8.92.111':445
- '88.##8.242.160':445
- '88.##8.213.207':445
- '88.##8.107.121':445
- '88.##8.33.138':445
- '88.##8.242.160':139
- '88.##8.244.181':139
- '88.##8.87.90':139
- '88.##8.182.95':139
- '88.##8.100.62':139
- '88.##8.187.22':139
- '88.##8.223.165':445
- '88.##8.111.223':445
- '88.##8.25.230':445
- '88.##8.37.195':139
- '88.##8.12.217':445
- '88.##8.140.78':139
- '88.##8.133.221':139
- '88.##8.45.45':139
- '88.##8.192.91':139
- '88.##8.111.223':139
- '88.##8.92.112':139
- '88.##8.113.252':139
- '88.##8.247.87':139
- '88.##8.249.30':139
- '88.##8.19.136':139
- '88.##8.120.162':139
- '88.##8.87.90':445
- '88.##8.37.195':445
- '88.##8.244.181':445
- '88.##8.187.22':445
- '88.##8.182.95':445
- '88.##8.213.207':139
- '88.##8.92.111':139
- '88.##8.33.138':139
- '88.##8.19.185':139
- '88.##8.107.121':139
- '88.##8.100.62':445
- '88.##8.45.45':445
- '88.##8.19.136':445
- '88.##8.133.221':445
- '88.##8.92.112':445
- '88.##8.192.91':445
- '88.##8.247.87':445
- '88.##8.140.78':445
- '88.##8.113.252':445
- '88.##8.120.162':445
- '88.##8.249.30':445
- '88.##8.36.249':139
- '88.##8.204.159':139
- '88.##8.15.245':139
- '88.##8.78.156':139
- '88.#98.2.39':139
- '88.##8.44.89':139
- '88.##8.71.149':139
- '88.##8.214.113':139
- '88.##8.107.110':139
- '88.##8.16.167':139
- '88.##8.39.129':445
- '88.##8.78.192':445
- '88.##8.79.79':445
- '88.##8.193.3':445
- '88.##8.118.78':445
- '88.##8.21.228':445
- '88.##8.122.160':445
- '88.##8.109.253':445
- '88.##8.95.230':445
- '88.##8.31.190':445
- '88.##8.100.94':445
- '88.##8.237.13':139
- '88.##8.99.57':139
- '88.##8.19.155':139
- '88.##8.44.34':139
- '88.##8.150.44':139
- '88.##8.84.50':139
- '88.##8.151.121':139
- '88.#98.3.25':139
- '88.##8.10.218':139
- '88.##8.70.65':139
- '88.##8.69.86':139
- '88.##8.187.172':139
- '88.##8.35.88':139
- '88.##8.206.26':139
- '88.##8.154.86':139
- '88.##8.42.102':139
- '88.##8.63.192':139
- '88.##8.186.89':139
- '88.##8.191.185':139
- '88.##8.143.203':139
- '88.##8.194.108':139
- '88.##8.131.81':445
- '88.##8.68.193':139
- '88.##8.140.239':139
- '88.##8.207.37':445
- '88.##8.147.31':445
- '88.##8.168.182':445
- '88.##8.184.19':139
- '88.##8.20.173':139
- '88.##8.138.162':139
- '88.##8.15.151':139
- '88.##8.163.135':139
- '88.##8.65.43':445
- '88.##8.47.21':445
- '88.##8.9.249':445
- '88.##8.216.40':445
- '88.##8.31.87':445
- '88.##8.77.31':445
- '88.##8.214.126':445
- '88.##8.84.127':445
- '88.##8.126.111':445
- '88.##8.71.205':445
- '88.##8.87.48':445
- '88.##8.140.239':445
- '88.##8.15.151':445
- '88.##8.68.193':445
- '88.##8.109.253':139
- '88.##8.39.129':139
- '88.##8.20.173':445
- '88.##8.63.20':445
- '88.##8.184.19':445
- '88.##8.163.135':445
- '88.##8.138.162':445
- '88.##8.122.160':139
- '88.##8.21.228':139
- '88.##8.193.3':139
- '88.##8.118.78':139
- '88.##8.63.20':139
- '88.##8.131.81':139
- '88.##8.100.94':139
- '88.##8.95.230':139
- '88.##8.31.190':139
- '88.##8.78.192':139
- '88.##8.79.79':139
- '88.##8.223.165':139
- '88.##8.26.225':445
- '88.##8.30.95':445
- '88.##8.93.67':445
- '88.##8.197.66':445
- '88.##8.73.197':445
- '88.##8.77.152':445
- '88.##8.204.19':445
- '88.##8.153.75':445
- '88.##8.29.13':445
- '88.##8.75.29':445
- '88.##8.75.91':445
- '88.##8.157.16':139
- '88.##8.122.126':139
- '88.##8.16.155':139
- '88.##8.222.51':139
- '88.##8.240.150':139
- '88.##8.5.151':445
- '88.##8.128.47':445
- '88.##8.11.186':139
- '88.##8.36.166':139
- '88.##8.234.35':139
- '88.##8.20.141':445
- '88.##8.213.143':445
- '88.##8.9.222':445
- '88.##8.45.254':445
- '88.##8.124.103':445
- '88.##8.213.96':445
- '88.##8.196.217':445
- '88.##8.14.68':445
- '88.##8.74.202':445
- '88.##8.114.170':445
- '88.##8.10.103':445
- '88.##8.95.73':445
- '88.##8.180.121':445
- '88.##8.10.140':445
- '88.##8.193.43':445
- '88.##8.145.241':445
- '88.##8.217.137':445
- '88.##8.174.177':445
- '88.##8.117.138':445
- '88.##8.241.163':445
- '88.##8.21.47':445
- '88.##8.52.81':139
- '88.##8.145.241':139
- '88.##8.10.140':139
- '88.##8.193.43':139
- '88.##8.77.152':139
- '88.##8.204.19':139
- '88.##8.21.47':139
- '88.##8.117.138':139
- '88.##8.241.163':139
- '88.##8.95.73':139
- '88.##8.180.121':139
- '88.##8.153.75':139
- '88.##8.197.66':139
- '88.##8.73.197':139
- '88.##8.75.91':139
- '88.##8.5.151':139
- '88.##8.128.47':139
- '88.##8.29.13':139
- '88.##8.75.29':139
- '88.##8.30.95':139
- '88.##8.93.67':139
- '88.##8.26.225':139
- '88.##8.208.13':139
- '88.##8.96.249':139
- '88.##8.158.221':139
- '88.##8.213.96':139
- '88.##8.196.217':139
- '88.##8.11.63':139
- '88.##8.81.67':139
- '88.##8.172.18':139
- '88.##8.203.157':139
- '88.##8.2.121':139
- '88.##8.14.68':139
- '88.##8.45.254':139
- '88.##8.124.103':139
- '88.##8.10.103':139
- '88.##8.217.137':139
- '88.##8.174.177':139
- '88.##8.74.202':139
- '88.##8.114.170':139
- '88.##8.213.143':139
- '88.##8.9.222':139
- '88.##8.20.141':139
- '88.##8.168.67':445
- '88.#98.35.0':445
- '88.##8.226.73':445
- '88.##8.25.83':139
- '88.#98.9.53':139
- '88.#98.53.0':445
- '88.##8.132.226':445
- '88.##8.41.227':445
- '88.##8.172.164':445
- '88.##8.218.178':445
- '88.##8.84.89':139
- '88.##8.167.108':139
- '88.##8.74.115':139
- '88.##8.108.161':139
- '88.##8.101.201':139
- '88.##8.115.13':139
- '88.##8.9.213':139
- '88.##8.127.33':139
- '88.##8.34.80':139
- '88.##8.230.217':139
- '88.##8.244.161':139
- '88.##8.9.213':445
- '88.##8.127.33':445
- '88.##8.34.80':445
- '88.##8.230.217':445
- '88.##8.244.161':445
- '88.##8.12.217':139
- '88.##8.25.230':139
- '88.#98.9.53':445
- '88.##8.84.89':445
- '88.##8.25.83':445
- '88.##8.74.115':445
- '88.##8.14.129':445
- '88.##8.172.14':445
- '88.##8.168.22':445
- '88.##8.165.43':445
- '88.##8.167.152':445
- '88.##8.108.161':445
- '88.##8.167.108':445
- '88.##8.115.13':445
- '88.##8.159.134':445
- '88.##8.101.201':445
- '88.##8.159.134':139
- '88.##8.36.166':445
- '88.##8.234.35':445
- '88.##8.122.126':445
- '88.##8.16.155':445
- '88.##8.157.16':445
- '88.##8.75.91':9988
- '88.##8.197.66':9988
- '88.##8.128.47':9988
- '88.##8.11.186':445
- '88.##8.5.151':9988
- '88.##8.240.150':445
- '88.##8.203.157':445
- '88.##8.2.121':445
- '88.##8.96.249':445
- '88.##8.158.221':445
- '88.##8.208.13':445
- '88.##8.52.81':445
- '88.##8.222.51':445
- '88.##8.81.67':445
- '88.##8.172.18':445
- '88.##8.11.63':445
- '88.#98.53.0':139
- '88.##8.132.226':139
- '88.##8.41.227':139
- '88.##8.172.164':139
- '88.##8.218.178':139
- '88.##8.14.129':139
- '88.##8.172.14':139
- '88.##8.168.22':139
- '88.##8.165.43':139
- '88.##8.167.152':139
- '88.#98.35.0':139
- '88.##8.180.121':9988
- '88.##8.20.141':9988
- '88.##8.95.73':9988
- '88.##8.30.95':9988
- '88.##8.77.152':9988
- '88.##8.226.73':139
- '88.##8.168.67':139
- '88.##8.81.67':9988
- '88.##8.74.202':9988
- '88.##8.213.96':9988