Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.##8.214.166':139
- '59.##8.202.222':139
- '59.##8.167.30':139
- '59.##8.199.9':139
- '59.#18.30.5':139
- '59.##8.84.39':139
- '59.##8.38.85':139
- '59.##8.46.194':139
- '59.##8.48.192':139
- '59.##8.52.207':139
- '59.##8.7.160':139
- '59.##8.183.179':139
- '59.##8.145.73':139
- '59.##8.178.236':139
- '59.##8.163.60':139
- '59.##8.125.187':139
- '59.##8.74.63':139
- '59.##8.200.250':139
- '59.##8.157.63':139
- '59.##8.232.224':139
- '59.##8.34.160':139
- '59.##8.178.236':445
- '59.##8.183.179':445
- '59.##8.125.187':445
- '59.#18.12.7':445
- '59.##8.163.60':445
- '59.##8.157.63':445
- '59.##8.74.63':445
- '59.##8.34.160':445
- '59.##8.145.73':445
- '59.##8.232.224':445
- '59.##8.106.219':445
- '59.##8.148.227':139
- '59.##8.38.205':445
- '59.##8.62.146':139
- '59.##8.220.144':139
- '59.##8.141.5':139
- '59.##8.173.39':445
- '59.##8.206.106':445
- '59.##8.37.114':445
- '59.##8.60.183':445
- '59.##8.203.156':445
- '59.#18.62.7':139
- '59.##8.218.84':139
- '59.##8.33.148':139
- '59.##8.0.185':139
- '59.##8.41.207':139
- '59.##8.157.78':445
- '59.##8.198.198':445
- '59.##8.78.78':445
- '59.##8.2.222':445
- '59.##8.126.101':445
- '59.##8.184.251':139
- '59.##8.213.87':139
- '59.##8.79.89':139
- '59.##8.198.198':139
- '59.##8.78.78':139
- '59.##8.157.78':139
- '59.##8.107.225':139
- '59.##8.251.3':139
- '59.##8.250.56':139
- '59.##8.140.232':139
- '59.##8.42.234':139
- '59.##8.60.183':139
- '59.##8.203.156':139
- '59.##8.38.205':139
- '59.#18.62.7':445
- '59.##8.218.84':445
- '59.##8.106.219':139
- '59.#18.12.7':139
- '59.##8.206.106':139
- '59.##8.37.114':139
- '59.##8.173.39':139
- '59.##8.33.148':445
- '59.##8.42.234':445
- '59.##8.250.56':445
- '59.##8.140.232':445
- '59.##8.213.87':445
- '59.##8.79.89':445
- '59.##8.0.185':445
- '59.##8.41.207':445
- '59.##8.184.251':445
- '59.##8.107.225':445
- '59.##8.251.3':445
- '59.##8.200.250':445
- '59.##8.100.128':139
- '59.##8.81.134':139
- '59.##8.128.178':139
- '59.##8.108.142':139
- '59.##8.177.145':139
- '59.##8.27.172':139
- '59.##8.9.186':139
- '59.##8.17.36':139
- '59.##8.23.58':139
- '59.##8.136.206':139
- '59.##8.66.117':139
- '59.##8.159.203':445
- '59.##8.83.25':445
- '59.##8.153.173':445
- '59.##8.85.168':445
- '59.##8.173.70':445
- '59.##8.17.173':445
- '59.##8.31.221':139
- '59.##8.191.55':445
- '59.##8.45.89':445
- '59.##8.126.113':445
- '59.##8.18.236':139
- '59.#18.1.19':139
- '59.##8.97.147':139
- '59.#18.7.26':139
- '59.##8.254.244':139
- '59.##8.85.136':139
- '59.##8.22.188':139
- '59.##8.175.140':139
- '59.##8.95.112':139
- '59.##8.58.12':139
- '59.##8.14.28':139
- '59.##8.80.29':139
- '59.##8.59.80':139
- '59.##8.240.251':139
- '59.##8.138.9':139
- '59.##8.244.198':139
- '59.##8.105.127':139
- '59.##8.28.61':139
- '59.##8.80.171':139
- '59.##8.15.173':139
- '59.#18.7.14':139
- '59.##8.148.227':445
- '59.##8.52.204':139
- '59.##8.62.146':445
- '59.##8.220.144':445
- '59.##8.141.5':445
- '59.##8.106.46':139
- '59.##8.171.106':139
- '59.##8.143.154':139
- '59.##8.59.176':139
- '59.##8.49.16':139
- '59.##8.38.85':445
- '59.##8.167.30':445
- '59.##8.214.166':445
- '59.#18.30.5':445
- '59.##8.7.160':445
- '59.##8.199.9':445
- '59.##8.46.194':445
- '59.##8.84.39':445
- '59.##8.52.207':445
- '59.##8.202.222':445
- '59.##8.48.192':445
- '59.##8.49.16':445
- '59.##8.143.154':445
- '59.##8.59.176':445
- '59.##8.17.173':139
- '59.##8.52.204':445
- '59.##8.68.177':445
- '59.##8.242.23':445
- '59.##8.83.21':445
- '59.##8.106.46':445
- '59.##8.171.106':445
- '59.##8.191.55':139
- '59.##8.68.177':139
- '59.##8.173.70':139
- '59.##8.242.23':139
- '59.##8.83.21':139
- '59.##8.85.168':139
- '59.##8.45.89':139
- '59.##8.126.113':139
- '59.##8.83.25':139
- '59.##8.153.173':139
- '59.##8.159.203':139
- '59.##8.126.101':139
- '59.##8.63.156':445
- '59.##8.232.115':445
- '59.##8.204.243':445
- '59.##8.136.186':445
- '59.##8.123.83':445
- '59.##8.203.204':445
- '59.##8.178.18':445
- '59.##8.244.113':445
- '59.##8.130.215':445
- '59.##8.113.130':445
- '59.##8.73.197':445
- '59.##8.157.212':139
- '59.##8.239.77':139
- '59.##8.198.103':139
- '59.##8.144.81':139
- '59.##8.163.144':139
- '59.##8.228.170':139
- '59.##8.67.10':445
- '59.##8.19.120':139
- '59.##8.73.164':139
- '59.##8.105.158':139
- '59.##8.20.74':445
- '59.##8.27.109':445
- '59.##8.184.11':445
- '59.##8.177.8':445
- '59.##8.109.83':445
- '59.##8.197.67':445
- '59.##8.105.128':445
- '59.##8.138.182':445
- '59.##8.14.130':445
- '59.##8.14.58':445
- '59.##8.244.69':445
- '59.##8.28.195':445
- '59.##8.44.46':445
- '59.##8.156.58':445
- '59.##8.111.149':445
- '59.##8.60.91':445
- '59.##8.231.153':445
- '59.##8.12.146':445
- '59.#18.15.4':445
- '59.##8.101.214':445
- '59.##8.252.49':445
- '59.##8.156.58':139
- '59.##8.28.195':139
- '59.##8.60.91':139
- '59.##8.178.18':139
- '59.##8.111.149':139
- '59.#18.15.4':139
- '59.##8.231.153':139
- '59.##8.252.49':139
- '59.##8.44.46':139
- '59.##8.101.214':139
- '59.##8.203.204':139
- '59.##8.63.156':139
- '59.##8.136.186':139
- '59.##8.67.10':139
- '59.##8.204.243':139
- '59.##8.73.197':139
- '59.##8.113.130':139
- '59.##8.244.113':139
- '59.##8.130.215':139
- '59.##8.123.83':139
- '59.##8.232.115':139
- '59.##8.84.199':139
- '59.##8.81.144':139
- '59.##8.70.249':139
- '59.##8.105.128':139
- '59.##8.99.115':139
- '59.#18.59.3':139
- '59.##8.42.197':139
- '59.##8.81.83':139
- '59.##8.177.17':139
- '59.##8.212.216':139
- '59.##8.197.67':139
- '59.##8.109.83':139
- '59.##8.184.11':139
- '59.##8.177.8':139
- '59.##8.12.146':139
- '59.##8.244.69':139
- '59.##8.14.58':139
- '59.##8.138.182':139
- '59.##8.14.130':139
- '59.##8.20.74':139
- '59.##8.27.109':139
- '59.##8.99.115':445
- '59.##8.36.127':445
- '59.##8.246.163':445
- '59.##8.32.147':139
- '59.##8.250.183':139
- '59.##8.133.169':139
- '59.#18.20.6':445
- '59.##8.192.20':445
- '59.##8.5.218':445
- '59.##8.130.113':445
- '59.##8.217.229':445
- '59.##8.36.73':139
- '59.##8.91.129':139
- '59.##8.123.43':139
- '59.##8.235.150':139
- '59.##8.226.177':139
- '59.##8.150.169':139
- '59.##8.72.148':139
- '59.##8.92.182':139
- '59.#18.74.0':139
- '59.##8.151.123':139
- '59.##8.85.171':139
- '59.##8.72.148':445
- '59.##8.92.182':445
- '59.#18.74.0':445
- '59.##8.151.123':445
- '59.##8.85.171':445
- '59.##8.32.147':445
- '59.##8.2.222':139
- '59.##8.133.169':445
- '59.##8.36.73':445
- '59.##8.250.183':445
- '59.##8.123.43':445
- '59.##8.49.96':445
- '59.##8.218.107':445
- '59.##8.99.66':445
- '59.##8.211.232':445
- '59.##8.12.162':445
- '59.##8.235.150':445
- '59.##8.91.129':445
- '59.##8.150.169':445
- '59.##8.65.218':445
- '59.##8.226.177':445
- '59.##8.105.158':445
- '59.##8.19.120':445
- '59.##8.73.164':445
- '59.##8.157.212':445
- '59.##8.239.77':445
- '59.##8.203.204':9988
- '59.##8.178.18':9988
- '59.##8.244.113':9988
- '59.##8.228.170':445
- '59.##8.113.130':9988
- '59.##8.198.103':445
- '59.##8.177.17':445
- '59.##8.212.216':445
- '59.##8.81.144':445
- '59.##8.70.249':445
- '59.##8.84.199':445
- '59.##8.144.81':445
- '59.##8.163.144':445
- '59.##8.42.197':445
- '59.##8.81.83':445
- '59.#18.59.3':445
- '59.##8.192.20':139
- '59.##8.211.232':139
- '59.#18.20.6':139
- '59.##8.217.229':139
- '59.##8.5.218':139
- '59.##8.218.107':139
- '59.##8.65.218':139
- '59.##8.49.96':139
- '59.##8.12.162':139
- '59.##8.99.66':139
- '59.##8.130.113':139
- '59.##8.28.195':9988
- '59.#18.15.4':9988
- '59.##8.156.58':9988
- '59.##8.111.149':9988
- '59.##8.60.91':9988
- '59.##8.36.127':139
- '59.##8.246.163':139
- '59.##8.198.103':9988
- '59.##8.212.216':9988
- '59.##8.81.83':9988