Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '61.##5.81.112':139
- '61.##5.238.223':139
- '61.##5.68.18':139
- '61.##5.230.241':139
- '61.##5.42.209':139
- '61.##5.140.142':139
- '61.##5.14.185':139
- '61.##5.211.21':139
- '61.##5.189.201':139
- '61.##5.106.203':139
- '61.##5.242.165':139
- '61.##5.27.95':139
- '61.##5.4.172':139
- '61.##5.119.106':445
- '61.##5.207.248':445
- '61.##5.173.187':445
- '61.##5.38.127':139
- '61.##5.166.26':139
- '61.##5.38.169':139
- '61.##5.157.203':139
- '61.##5.173.0':139
- '61.##5.42.209':445
- '61.##5.68.18':445
- '61.##5.230.241':445
- '61.##5.166.26':445
- '61.##5.242.165':445
- '61.##5.106.203':445
- '61.##5.211.21':445
- '61.##5.189.201':445
- '61.##5.81.112':445
- '61.##5.238.223':445
- '61.##5.38.127':445
- '61.##5.27.56':139
- '61.##5.92.18':139
- '61.##5.47.209':139
- '61.##5.240.183':139
- '61.##5.96.155':139
- '61.##5.173.0':445
- '61.##5.38.169':445
- '61.##5.157.203':445
- '61.##5.27.95':445
- '61.##5.4.172':445
- '61.##5.149.182':445
- '61.##5.149.182':139
- '61.##5.207.248':139
- '61.#35.52.6':139
- '61.##5.130.137':139
- '61.##5.182.9':139
- '61.##5.15.119':445
- '61.##5.146.164':445
- '61.##5.7.197':445
- '61.##5.173.187':139
- '61.##5.119.106':139
- '61.##5.137.3':139
- '61.##5.10.114':139
- '61.##5.16.130':139
- '61.##5.161.150':139
- '61.##5.227.118':139
- '61.##5.182.76':139
- '61.##5.11.87':139
- '61.##5.115.162':139
- '61.##5.248.134':139
- '61.##5.23.188':139
- '61.##5.51.134':139
- '61.##5.248.134':445
- '61.##5.11.87':445
- '61.##5.51.134':445
- '61.##5.16.130':445
- '61.##5.23.188':445
- '61.##5.182.9':445
- '61.#35.52.6':445
- '61.##5.130.137':445
- '61.##5.115.162':445
- '61.##5.137.3':445
- '61.##5.10.114':445
- '61.#35.9.20':445
- '61.##5.13.77':445
- '61.##5.14.189':445
- '61.##5.63.151':445
- '61.##5.9.195':445
- '61.##5.182.76':445
- '61.##5.161.150':445
- '61.##5.227.118':445
- '61.##5.20.91':445
- '61.##5.126.250':445
- '61.##5.140.142':445
- '61.##5.202.223':445
- '61.##5.41.62':445
- '61.##5.54.147':445
- '61.##5.80.133':445
- '61.##5.114.80':445
- '61.##5.45.188':139
- '61.##5.13.161':139
- '61.##5.188.12':445
- '61.##5.183.2':445
- '61.##5.12.183':445
- '61.##5.176.69':445
- '61.##5.11.183':445
- '61.##5.75.11':445
- '61.##5.8.144':445
- '61.##5.23.172':445
- '61.##5.124.159':445
- '61.##5.149.224':445
- '61.##5.242.148':445
- '61.##5.197.228':445
- '61.##5.22.42':445
- '61.##5.128.100':445
- '61.##5.55.189':139
- '61.##5.110.10':139
- '61.##5.67.200':139
- '61.##5.24.85':139
- '61.##5.158.92':139
- '61.##5.46.192':139
- '61.##5.124.78':139
- '61.##5.56.103':139
- '61.##5.252.31':139
- '61.##5.207.16':139
- '61.##5.180.181':139
- '61.##5.158.102':139
- '61.##5.191.125':139
- '61.##5.226.61':139
- '61.##5.212.49':139
- '61.##5.93.77':139
- '61.##5.2.106':139
- '61.##5.204.65':139
- '61.##5.106.214':139
- '61.##5.6.191':139
- '61.##5.79.55':139
- '61.##5.144.27':445
- '61.##5.144.27':139
- '61.##5.23.172':139
- '61.#35.3.73':139
- '61.##5.120.77':139
- '61.##5.236.35':139
- '61.##5.75.11':139
- '61.##5.22.42':139
- '61.##5.11.183':139
- '61.##5.124.159':139
- '61.##5.8.144':139
- '61.##5.61.200':139
- '61.##5.47.209':445
- '61.##5.27.56':445
- '61.##5.96.155':445
- '61.##5.14.185':445
- '61.##5.240.183':445
- '61.##5.245.227':139
- '61.##5.199.128':139
- '61.##5.245.121':139
- '61.##5.92.18':445
- '61.##5.82.161':139
- '61.##5.245.121':445
- '61.##5.245.227':445
- '61.##5.82.161':445
- '61.##5.12.183':139
- '61.##5.188.12':139
- '61.##5.236.35':445
- '61.#35.3.73':445
- '61.##5.120.77':445
- '61.##5.199.128':445
- '61.##5.61.200':445
- '61.##5.183.2':139
- '61.##5.242.148':139
- '61.##5.176.69':139
- '61.##5.149.224':139
- '61.##5.128.100':139
- '61.##5.197.228':139
- '61.##5.202.223':139
- '61.##5.41.62':139
- '61.##5.54.147':139
- '61.##5.80.133':139
- '61.##5.114.80':139
- '61.##5.126.250':139
- '61.##5.8.178':445
- '61.##5.136.123':445
- '61.##5.251.92':445
- '61.##5.222.110':445
- '61.##5.175.53':445
- '61.##5.252.147':445
- '61.##5.44.95':445
- '61.##5.198.2':445
- '61.##5.165.136':445
- '61.##5.232.39':445
- '61.##5.25.11':445
- '61.##5.14.18':139
- '61.##5.255.252':139
- '61.##5.60.210':139
- '61.##5.244.119':139
- '61.##5.162.1':139
- '61.##5.212.202':445
- '61.#35.4.84':445
- '61.##5.39.218':139
- '61.##5.157.232':139
- '61.##5.52.184':139
- '61.##5.77.162':445
- '61.##5.122.247':445
- '61.##5.84.222':445
- '61.#35.85.1':445
- '61.##5.156.0':445
- '61.##5.192.165':445
- '61.##5.18.112':445
- '61.##5.99.25':445
- '61.##5.86.23':445
- '61.##5.118.117':445
- '61.#35.5.28':445
- '61.##5.90.163':445
- '61.##5.131.191':445
- '61.##5.162.240':445
- '61.##5.169.55':445
- '61.##5.240.168':445
- '61.##5.105.120':445
- '61.##5.62.108':445
- '61.##5.38.80':445
- '61.##5.61.111':445
- '61.##5.152.80':445
- '61.##5.140.223':139
- '61.##5.240.168':139
- '61.##5.162.240':139
- '61.##5.169.55':139
- '61.##5.252.147':139
- '61.##5.44.95':139
- '61.##5.152.80':139
- '61.##5.38.80':139
- '61.##5.61.111':139
- '61.##5.90.163':139
- '61.##5.131.191':139
- '61.##5.198.2':139
- '61.##5.222.110':139
- '61.##5.175.53':139
- '61.##5.212.202':139
- '61.#35.4.84':139
- '61.##5.25.11':139
- '61.##5.165.136':139
- '61.##5.232.39':139
- '61.##5.136.123':139
- '61.##5.251.92':139
- '61.##5.8.178':139
- '61.##5.204.189':139
- '61.##5.125.77':139
- '61.##5.228.32':139
- '61.##5.192.165':139
- '61.##5.18.112':139
- '61.##5.125.178':139
- '61.##5.8.121':139
- '61.##5.115.196':139
- '61.##5.29.135':139
- '61.#35.48.0':139
- '61.##5.99.25':139
- '61.#35.85.1':139
- '61.##5.156.0':139
- '61.#35.5.28':139
- '61.##5.105.120':139
- '61.##5.62.108':139
- '61.##5.86.23':139
- '61.##5.118.117':139
- '61.##5.122.247':139
- '61.##5.84.222':139
- '61.##5.77.162':139
- '61.##5.228.32':445
- '61.##5.125.166':445
- '61.##5.50.121':445
- '61.##5.166.144':445
- '61.##5.246.216':445
- '61.#35.0.92':445
- '61.##5.191.88':445
- '61.##5.124.189':445
- '61.##5.127.145':445
- '61.##5.236.181':445
- '61.##5.239.236':445
- '61.##5.62.170':445
- '61.##5.198.38':139
- '61.##5.91.244':139
- '61.##5.38.112':139
- '61.##5.234.59':139
- '61.##5.34.240':139
- '61.##5.51.212':139
- '61.#35.83.2':139
- '61.##5.37.99':139
- '61.##5.64.232':139
- '61.##5.22.93':139
- '61.##5.146.164':139
- '61.##5.63.151':139
- '61.##5.15.119':139
- '61.#35.83.2':445
- '61.##5.7.197':139
- '61.##5.13.77':139
- '61.##5.20.91':139
- '61.#35.9.20':139
- '61.##5.9.195':139
- '61.##5.14.189':139
- '61.##5.51.212':445
- '61.##5.34.240':445
- '61.##5.38.112':445
- '61.##5.234.59':445
- '61.##5.186.217':445
- '61.##5.142.27':445
- '61.##5.22.93':445
- '61.##5.37.99':445
- '61.##5.64.232':445
- '61.##5.198.38':445
- '61.##5.91.244':445
- '61.##5.142.27':139
- '61.##5.52.184':445
- '61.##5.39.218':445
- '61.##5.157.232':445
- '61.##5.14.18':445
- '61.##5.255.252':445
- '61.##5.136.123':9988
- '61.##5.165.136':9988
- '61.##5.251.92':9988
- '61.##5.222.110':9988
- '61.##5.25.11':9988
- '61.##5.60.210':445
- '61.#35.48.0':445
- '61.##5.115.196':445
- '61.##5.29.135':445
- '61.##5.204.189':445
- '61.##5.125.77':445
- '61.##5.244.119':445
- '61.##5.162.1':445
- '61.##5.140.223':445
- '61.##5.125.178':445
- '61.##5.8.121':445
- '61.##5.50.121':139
- '61.##5.236.181':139
- '61.##5.125.166':139
- '61.#35.0.92':139
- '61.##5.166.144':139
- '61.##5.124.189':139
- '61.##5.186.217':139
- '61.##5.191.88':139
- '61.##5.239.236':139
- '61.##5.127.145':139
- '61.##5.246.216':139
- '61.##5.90.163':9988
- '61.##5.131.191':9988
- '61.##5.240.168':9988
- '61.##5.169.55':9988
- '61.##5.162.240':9988
- '61.##5.86.23':9988
- '61.##5.62.170':139
- '61.#35.5.28':9988
- '61.##5.61.111':9988
- '61.##5.152.80':9988