Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '69.##7.178.216':139
- '69.##7.92.62':139
- '69.##7.217.40':139
- '69.##7.239.110':139
- '69.##7.217.157':139
- '69.##7.150.213':139
- '69.##7.2.142':139
- '69.##7.10.159':139
- '69.##7.111.169':139
- '69.##7.29.58':139
- '69.##7.83.79':445
- '69.##7.86.177':445
- '69.##7.33.86':445
- '69.##7.203.190':445
- '69.##7.155.32':445
- '69.##7.28.245':445
- '69.##7.204.117':445
- '69.##7.1.185':445
- '69.##7.65.164':445
- '69.##7.77.241':445
- '69.#27.94.5':445
- '69.##7.218.60':139
- '69.##7.2.142':445
- '69.##7.218.60':445
- '69.##7.150.213':445
- '69.##7.29.58':445
- '69.##7.10.159':445
- '69.##7.227.84':445
- '69.##7.184.20':445
- '69.##7.41.253':445
- '69.##7.80.218':445
- '69.##7.75.80':445
- '69.##7.111.169':445
- '69.##7.227.84':139
- '69.##7.184.20':139
- '69.##7.41.253':139
- '69.##7.80.218':139
- '69.##7.75.80':139
- '69.##7.178.216':445
- '69.##7.92.62':445
- '69.##7.217.40':445
- '69.##7.239.110':445
- '69.##7.217.157':445
- '69.#27.94.5':139
- '69.##7.65.164':139
- '69.##7.77.241':139
- '69.##7.86.177':139
- '69.##7.33.86':139
- '69.##7.201.73':445
- '69.##7.156.80':445
- '69.##7.83.79':139
- '69.##7.204.117':139
- '69.##7.1.185':139
- '69.##7.203.190':139
- '69.##7.242.109':139
- '69.##7.178.78':139
- '69.##7.109.212':139
- '69.##7.91.107':139
- '69.##7.86.129':139
- '69.##7.155.32':139
- '69.##7.28.245':139
- '69.##7.79.50':139
- '69.##7.31.176':139
- '69.##7.213.185':139
- '69.##7.231.142':445
- '69.##7.86.129':445
- '69.##7.109.212':445
- '69.##7.91.107':445
- '69.##7.146.74':445
- '69.##7.218.26':445
- '69.##7.213.185':445
- '69.##7.79.50':445
- '69.##7.31.176':445
- '69.##7.242.109':445
- '69.##7.178.78':445
- '69.##7.2.225':445
- '69.##7.71.78':445
- '69.##7.33.184':445
- '69.##7.78.85':445
- '69.##7.101.191':445
- '69.##7.85.94':445
- '69.##7.153.27':445
- '69.##7.202.152':445
- '69.##7.115.175':445
- '69.##7.215.142':445
- '69.##7.143.19':445
- '69.##7.31.88':445
- '69.##7.121.188':445
- '69.##7.87.168':445
- '69.##7.105.87':445
- '69.##7.168.105':445
- '69.##7.74.114':445
- '69.##7.50.17':445
- '69.##7.114.95':445
- '69.##7.253.118':445
- '69.##7.136.193':445
- '69.##7.97.74':445
- '69.##7.165.13':445
- '69.##7.35.185':445
- '69.##7.59.236':445
- '69.##7.107.213':445
- '69.##7.103.88':445
- '69.#27.15.6':445
- '69.##7.190.190':445
- '69.##7.59.40':445
- '69.##7.142.113':445
- '69.##7.161.142':445
- '69.#27.8.69':445
- '69.##7.18.42':139
- '69.##7.253.73':139
- '69.##7.32.170':139
- '69.##7.119.108':139
- '69.##7.81.68':139
- '69.##7.214.191':139
- '69.##7.138.214':139
- '69.##7.152.15':139
- '69.##7.93.48':139
- '69.##7.223.164':139
- '69.##7.106.216':139
- '69.##7.9.104':445
- '69.##7.224.238':445
- '69.##7.10.111':445
- '69.##7.12.253':445
- '69.##7.111.13':445
- '69.#27.57.1':139
- '69.##7.162.244':139
- '69.##7.44.103':139
- '69.##7.218.105':139
- '69.##7.163.90':139
- '69.##7.161.142':139
- '69.##7.59.40':139
- '69.##7.142.113':139
- '69.##7.165.13':139
- '69.##7.35.185':139
- '69.##7.105.87':139
- '69.##7.168.105':139
- '69.##7.97.74':139
- '69.#27.15.6':139
- '69.##7.190.190':139
- '69.##7.59.236':139
- '69.##7.63.147':139
- '69.##7.18.77':139
- '69.##7.104.173':139
- '69.##7.121.106':139
- '69.##7.38.166':139
- '69.##7.107.213':139
- '69.##7.103.88':139
- '69.##7.163.186':139
- '69.##7.247.212':139
- '69.##7.186.167':139
- '69.##7.87.168':139
- '69.##7.38.166':445
- '69.##7.104.173':445
- '69.##7.121.106':445
- '69.##7.9.104':139
- '69.##7.224.238':139
- '69.##7.186.167':445
- '69.##7.163.186':445
- '69.##7.247.212':445
- '69.##7.63.147':445
- '69.##7.18.77':445
- '69.##7.10.111':139
- '69.##7.136.193':139
- '69.##7.114.95':139
- '69.##7.253.118':139
- '69.##7.31.88':139
- '69.##7.121.188':139
- '69.##7.12.253':139
- '69.##7.111.13':139
- '69.#27.8.69':139
- '69.##7.74.114':139
- '69.##7.50.17':139
- '69.##7.199.38':445
- '69.##7.230.198':445
- '69.##7.137.108':445
- '69.##7.33.118':445
- '69.##7.54.252':445
- '69.##7.208.23':445
- '69.##7.254.174':445
- '69.##7.77.105':445
- '69.##7.245.230':445
- '69.##7.10.48':445
- '69.##7.142.243':445
- '69.##7.57.45':139
- '69.##7.152.254':139
- '69.##7.32.139':139
- '69.##7.69.40':139
- '69.##7.138.237':139
- '69.##7.35.232':445
- '69.##7.25.142':445
- '69.##7.129.93':139
- '69.##7.209.214':139
- '69.##7.71.247':139
- '69.##7.212.210':445
- '69.##7.50.213':445
- '69.##7.223.233':445
- '69.##7.156.98':445
- '69.##7.63.59':445
- '69.##7.6.236':445
- '69.##7.213.243':445
- '69.##7.200.31':445
- '69.##7.72.137':445
- '69.##7.194.215':445
- '69.##7.30.96':445
- '69.##7.244.31':445
- '69.##7.165.40':445
- '69.##7.154.212':445
- '69.##7.83.162':445
- '69.##7.135.105':445
- '69.##7.223.135':445
- '69.#27.2.48':445
- '69.##7.105.1':445
- '69.##7.48.163':445
- '69.#27.9.98':445
- '69.##7.163.30':445
- '69.##7.135.105':139
- '69.##7.223.135':139
- '69.##7.212.210':139
- '69.##7.208.23':139
- '69.##7.254.174':139
- '69.#27.9.98':139
- '69.##7.163.30':139
- '69.##7.154.212':139
- '69.##7.83.162':139
- '69.##7.165.40':139
- '69.##7.77.105':139
- '69.##7.33.118':139
- '69.##7.54.252':139
- '69.##7.142.243':139
- '69.##7.25.142':139
- '69.##7.35.232':139
- '69.##7.245.230':139
- '69.##7.10.48':139
- '69.##7.230.198':139
- '69.##7.137.108':139
- '69.##7.199.38':139
- '69.##7.48.163':139
- '69.##7.144.168':139
- '69.##7.166.63':139
- '69.##7.220.199':139
- '69.##7.213.243':139
- '69.##7.200.31':139
- '69.##7.6.118':139
- '69.##7.228.114':139
- '69.##7.46.217':139
- '69.##7.186.166':139
- '69.##7.247.150':139
- '69.##7.72.137':139
- '69.##7.63.59':139
- '69.##7.6.236':139
- '69.##7.244.31':139
- '69.#27.2.48':139
- '69.##7.105.1':139
- '69.##7.194.215':139
- '69.##7.30.96':139
- '69.##7.223.233':139
- '69.##7.156.98':139
- '69.##7.50.213':139
- '69.##7.239.226':445
- '69.##7.204.197':445
- '69.##7.138.201':445
- '69.##7.58.195':445
- '69.##7.64.233':445
- '69.##7.238.184':445
- '69.##7.73.61':445
- '69.##7.184.139':445
- '69.##7.1.133':445
- '69.##7.140.1':445
- '69.##7.223.141':139
- '69.##7.238.184':139
- '69.##7.73.61':139
- '69.##7.184.139':139
- '69.##7.1.133':139
- '69.##7.140.1':139
- '69.##7.83.37':139
- '69.##7.156.113':139
- '69.##7.234.53':139
- '69.##7.80.241':139
- '69.##7.102.85':139
- '69.##7.80.241':445
- '69.##7.143.19':139
- '69.##7.115.175':139
- '69.##7.215.142':139
- '69.##7.71.78':139
- '69.##7.33.184':139
- '69.##7.146.74':139
- '69.##7.218.26':139
- '69.##7.2.225':139
- '69.##7.153.27':139
- '69.##7.202.152':139
- '69.##7.78.85':139
- '69.##7.156.113':445
- '69.##7.223.141':445
- '69.##7.83.37':445
- '69.##7.102.85':445
- '69.##7.234.53':445
- '69.##7.101.191':139
- '69.##7.85.94':139
- '69.##7.231.142':139
- '69.##7.201.73':139
- '69.##7.156.80':139
- '69.##7.71.247':445
- '69.##7.129.93':445
- '69.##7.209.214':445
- '69.##7.57.45':445
- '69.##7.152.254':445
- '69.##7.54.252':9988
- '69.##7.137.108':9988
- '69.##7.142.243':9988
- '69.##7.35.232':9988
- '69.##7.33.118':9988
- '69.##7.32.139':445
- '69.##7.186.166':445
- '69.##7.247.150':445
- '69.##7.166.63':445
- '69.##7.220.199':445
- '69.##7.144.168':445
- '69.##7.69.40':445
- '69.##7.138.237':445
- '69.##7.228.114':445
- '69.##7.46.217':445
- '69.##7.6.118':445
- '69.##7.77.105':9988
- '69.##7.234.45':445
- '69.##7.195.131':445
- '69.##7.48.47':445
- '69.##7.234.45':139
- '69.##7.195.131':139
- '69.##7.239.226':139
- '69.##7.204.197':139
- '69.##7.138.201':139
- '69.##7.58.195':139
- '69.##7.64.233':139
- '69.##7.48.47':139
- '69.##7.194.215':9988
- '69.##7.223.135':9988
- '69.##7.72.137':9988
- '69.##7.83.162':9988
- '69.#27.2.48':9988
- '69.##7.154.212':9988
- '69.##7.220.199':9988
- '69.##7.213.243':9988
- '69.##7.30.96':9988
- '69.##7.212.210':9988