Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '61.##8.39.40':139
- '61.##8.58.250':139
- '61.##8.160.104':139
- '61.##8.26.124':139
- '61.##8.221.221':139
- '61.##8.189.114':139
- '61.##8.15.82':139
- '61.##8.62.165':139
- '61.##8.60.12':139
- '61.##8.155.230':139
- '61.##8.12.156':139
- '61.##8.206.47':139
- '61.##8.151.206':139
- '61.##8.238.110':139
- '61.##8.148.17':139
- '61.##8.123.18':139
- '61.##8.146.139':139
- '61.##8.142.165':139
- '61.##8.128.1':139
- '61.##8.139.59':139
- '61.##8.30.89':139
- '61.##8.62.22':139
- '61.##8.247.51':139
- '61.##8.37.127':445
- '61.##8.242.190':445
- '61.##8.234.108':445
- '61.##8.142.53':139
- '61.##8.162.159':445
- '61.##8.120.137':445
- '61.#78.96.8':445
- '61.##8.251.240':445
- '61.##8.117.23':445
- '61.##8.20.182':445
- '61.##8.121.189':445
- '61.##8.20.165':139
- '61.##8.33.10':139
- '61.##8.8.160':139
- '61.##8.234.160':139
- '61.##8.145.179':139
- '61.##8.125.63':139
- '61.##8.17.36':139
- '61.##8.252.12':139
- '61.##8.55.218':139
- '61.##8.153.84':139
- '61.##8.230.102':139
- '61.##8.88.129':139
- '61.##8.230.228':445
- '61.##8.29.206':445
- '61.##8.126.92':445
- '61.##8.192.138':445
- '61.##8.231.41':445
- '61.##8.43.62':445
- '61.##8.139.234':445
- '61.##8.212.104':445
- '61.##8.243.170':445
- '61.##8.45.215':445
- '61.##8.252.243':445
- '61.##8.55.106':445
- '61.##8.223.132':445
- '61.##8.105.27':445
- '61.##8.157.225':445
- '61.##8.216.233':445
- '61.##8.204.225':445
- '61.##8.78.36':445
- '61.##8.138.148':445
- '61.#78.24.6':445
- '61.##8.162.22':445
- '61.##8.240.153':445
- '61.##8.43.60':445
- '61.##8.117.23':139
- '61.#78.96.8':139
- '61.##8.121.189':139
- '61.##8.120.137':139
- '61.##8.20.182':139
- '61.##8.251.240':139
- '61.##8.51.213':139
- '61.##8.84.21':139
- '61.##8.68.74':139
- '61.##8.230.165':139
- '61.##8.129.230':139
- '61.##8.77.208':445
- '61.##8.179.139':445
- '61.##8.22.216':445
- '61.##8.120.0':445
- '61.##8.147.193':445
- '61.##8.4.180':445
- '61.##8.37.127':139
- '61.##8.242.190':139
- '61.##8.234.108':139
- '61.##8.204.115':445
- '61.##8.162.159':139
- '61.##8.230.165':445
- '61.##8.175.208':139
- '61.##8.233.84':139
- '61.##8.150.111':139
- '61.##8.102.237':139
- '61.##8.180.160':139
- '61.##8.232.178':139
- '61.##8.30.69':139
- '61.##8.120.138':139
- '61.##8.103.155':139
- '61.##8.96.40':139
- '61.##8.87.139':139
- '61.##8.247.205':139
- '61.##8.15.69':139
- '61.##8.66.33':139
- '61.##8.200.190':139
- '61.##8.15.215':139
- '61.##8.27.186':139
- '61.##8.140.62':139
- '61.##8.25.32':139
- '61.##8.62.148':139
- '61.##8.80.27':139
- '61.##8.148.80':139
- '61.##8.9.148':139
- '61.##8.181.207':139
- '61.##8.84.59':139
- '61.##8.106.68':139
- '61.##8.23.83':139
- '61.##8.248.248':139
- '61.##8.66.182':139
- '61.##8.188.173':139
- '61.##8.188.188':139
- '61.##8.124.249':139
- '61.##8.228.134':139
- '61.##8.61.229':139
- '61.##8.192.87':139
- '61.##8.16.94':139
- '61.##8.16.38':139
- '61.##8.120.139':139
- '61.##8.87.46':139
- '61.##8.189.208':139
- '61.##8.84.155':139
- '61.##8.15.170':139
- '61.##8.155.121':139
- '61.##8.100.119':139
- '61.##8.121.104':139
- '61.##8.224.3':139
- '61.##8.142.165':445
- '61.##8.128.1':445
- '61.##8.139.59':445
- '61.##8.30.89':445
- '61.##8.62.22':445
- '61.##8.26.124':445
- '61.##8.58.250':445
- '61.##8.189.114':445
- '61.##8.39.40':445
- '61.##8.221.221':445
- '61.##8.160.104':445
- '61.##8.84.21':445
- '61.##8.88.129':445
- '61.##8.51.213':445
- '61.##8.129.230':445
- '61.##8.68.74':445
- '61.##8.148.17':445
- '61.##8.151.206':445
- '61.##8.146.139':445
- '61.##8.206.47':445
- '61.##8.123.18':445
- '61.##8.238.110':445
- '61.##8.155.230':445
- '61.##8.17.36':445
- '61.##8.252.12':445
- '61.##8.55.218':445
- '61.##8.153.84':445
- '61.##8.230.102':445
- '61.##8.142.53':445
- '61.##8.136.137':139
- '61.##8.204.233':139
- '61.##8.215.233':139
- '61.##8.34.142':139
- '61.##8.204.31':139
- '61.##8.62.165':445
- '61.##8.247.51':445
- '61.##8.15.82':445
- '61.##8.12.156':445
- '61.##8.60.12':445
- '61.##8.234.160':445
- '61.##8.33.10':445
- '61.##8.125.63':445
- '61.##8.20.165':445
- '61.##8.145.179':445
- '61.##8.8.160':445
- '61.##8.13.102':445
- '61.#78.69.7':445
- '61.##8.196.178':445
- '61.##8.241.36':445
- '61.##8.40.145':445
- '61.##8.200.21':445
- '61.##8.180.83':445
- '61.##8.158.61':445
- '61.##8.239.106':445
- '61.##8.69.240':445
- '61.##8.60.180':445
- '61.##8.186.166':445
- '61.##8.215.177':139
- '61.##8.231.215':139
- '61.##8.28.186':139
- '61.##8.87.91':139
- '61.##8.123.136':139
- '61.##8.85.105':445
- '61.#78.7.53':445
- '61.##8.161.84':445
- '61.##8.102.148':445
- '61.##8.5.246':445
- '61.##8.209.147':445
- '61.##8.165.44':445
- '61.##8.168.116':445
- '61.##8.56.40':445
- '61.##8.56.27':445
- '61.##8.162.156':445
- '61.##8.178.108':445
- '61.##8.68.56':445
- '61.##8.185.179':445
- '61.##8.31.51':445
- '61.##8.125.245':445
- '61.##8.142.135':445
- '61.##8.213.172':445
- '61.##8.53.118':445
- '61.##8.45.19':445
- '61.##8.147.122':445
- '61.##8.40.165':445
- '61.##8.14.143':445
- '61.##8.22.179':445
- '61.##8.197.146':445
- '61.##8.189.197':445
- '61.##8.146.178':445
- '61.##8.127.17':445
- '61.##8.178.212':445
- '61.##8.62.239':139
- '61.##8.69.240':139
- '61.##8.158.61':139
- '61.##8.186.166':139
- '61.##8.180.83':139
- '61.##8.60.180':139
- '61.##8.239.106':139
- '61.##8.147.122':139
- '61.##8.53.118':139
- '61.##8.14.143':139
- '61.##8.165.44':139
- '61.##8.40.165':139
- '61.##8.209.147':139
- '61.##8.5.246':139
- '61.##8.102.148':139
- '61.#78.7.53':139
- '61.##8.85.105':139
- '61.##8.161.84':139
- '61.#78.69.7':139
- '61.##8.196.178':139
- '61.##8.241.36':139
- '61.##8.40.145':139
- '61.##8.200.21':139
- '61.##8.45.19':139
- '61.##8.125.245':139
- '61.##8.185.179':139
- '61.##8.213.172':139
- '61.##8.68.56':139
- '61.##8.142.135':139
- '61.##8.31.51':139
- '61.#78.59.5':139
- '61.##8.74.103':139
- '61.##8.87.48':139
- '61.##8.162.205':139
- '61.##8.48.225':139
- '61.##8.146.178':139
- '61.##8.197.146':139
- '61.##8.178.212':139
- '61.##8.22.179':139
- '61.##8.127.17':139
- '61.##8.189.197':139
- '61.##8.168.116':139
- '61.##8.56.40':139
- '61.##8.56.27':139
- '61.##8.162.156':139
- '61.##8.178.108':139
- '61.##8.162.205':445
- '61.##8.252.243':139
- '61.##8.212.104':139
- '61.##8.243.170':139
- '61.##8.43.62':139
- '61.##8.45.215':139
- '61.##8.139.234':139
- '61.##8.22.216':139
- '61.##8.77.208':139
- '61.##8.147.193':139
- '61.##8.43.60':139
- '61.##8.120.0':139
- '61.#78.24.6':139
- '61.##8.78.36':139
- '61.##8.240.153':139
- '61.##8.204.225':139
- '61.##8.162.22':139
- '61.##8.138.148':139
- '61.##8.126.92':139
- '61.##8.29.206':139
- '61.##8.230.228':139
- '61.##8.192.138':139
- '61.##8.231.41':139
- '61.##8.179.139':139
- '61.##8.37.24':445
- '61.##8.156.171':445
- '61.##8.150.209':445
- '61.##8.185.239':445
- '61.##8.228.145':445
- '61.##8.19.147':445
- '61.##8.81.86':445
- '61.##8.102.203':445
- '61.##8.21.211':445
- '61.##8.180.223':445
- '61.##8.129.39':445
- '61.##8.123.197':445
- '61.#78.6.52':445
- '61.##8.151.30':445
- '61.##8.4.180':139
- '61.##8.204.115':139
- '61.##8.125.197':445
- '61.##8.114.198':445
- '61.##8.51.198':445
- '61.##8.74.210':445
- '61.##8.29.26':445
- '61.##8.210.2':445
- '61.##8.55.106':139
- '61.##8.161.84':9988
- '61.##8.241.36':9988
- '61.#78.69.7':9988
- '61.##8.165.44':9988
- '61.##8.147.122':9988
- '61.##8.146.178':9988
- '61.##8.151.30':139
- '61.##8.123.197':139
- '61.##8.231.215':9988
- '61.##8.31.51':9988
- '61.##8.162.205':9988
- '61.##8.74.103':445
- '61.##8.62.239':445
- '61.#78.59.5':445
- '61.##8.48.225':445
- '61.##8.87.48':445
- '61.##8.87.91':445
- '61.##8.231.215':445
- '61.##8.200.21':9988
- '61.##8.215.177':445
- '61.##8.28.186':445
- '61.##8.123.136':445
- '61.#78.6.52':139
- '61.##8.21.211':139
- '61.##8.81.86':139
- '61.##8.129.39':139
- '61.##8.19.147':139
- '61.##8.180.223':139
- '61.##8.102.203':139
- '61.##8.105.27':139
- '61.##8.223.132':139
- '61.##8.216.233':139
- '61.##8.13.102':139
- '61.##8.157.225':139
- '61.##8.74.210':139
- '61.##8.114.198':139
- '61.##8.210.2':139
- '61.##8.125.197':139
- '61.##8.29.26':139
- '61.##8.51.198':139
- '61.##8.37.24':139
- '61.##8.156.171':139
- '61.##8.150.209':139
- '61.##8.185.239':139
- '61.##8.228.145':139