Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '83.##7.210.66':139
- '83.#77.97.6':139
- '83.##7.66.179':139
- '83.##7.42.166':139
- '83.##7.179.130':139
- '83.##7.113.103':139
- '83.##7.231.49':139
- '83.##7.23.185':139
- '83.##7.228.199':139
- '83.##7.0.214':139
- '83.##7.90.42':139
- '83.##7.43.94':139
- '83.##7.60.14':139
- '83.##7.30.86':139
- '83.##7.183.129':139
- '83.##7.17.162':139
- '83.##7.22.203':139
- '83.##7.42.251':139
- '83.##7.190.125':139
- '83.##7.208.24':139
- '83.##7.18.67':139
- '83.##7.44.230':445
- '83.##7.70.29':445
- '83.##7.96.216':445
- '83.##7.253.208':445
- '83.##7.17.223':445
- '83.##7.17.162':445
- '83.##7.30.86':445
- '83.##7.183.129':445
- '83.##7.140.185':445
- '83.##7.99.12':445
- '83.##7.140.238':445
- '83.##7.45.59':139
- '83.##7.28.78':445
- '83.##7.58.195':139
- '83.##7.246.220':139
- '83.##7.104.219':139
- '83.##7.34.233':445
- '83.##7.229.212':445
- '83.##7.12.102':445
- '83.##7.251.35':445
- '83.##7.5.176':445
- '83.##7.17.33':139
- '83.##7.77.209':139
- '83.##7.66.194':139
- '83.##7.252.13':139
- '83.##7.52.240':139
- '83.##7.189.192':445
- '83.##7.30.181':445
- '83.##7.254.72':445
- '83.##7.34.149':445
- '83.##7.238.104':445
- '83.##7.51.227':139
- '83.##7.60.130':445
- '83.##7.34.149':139
- '83.##7.130.28':445
- '83.##7.153.24':445
- '83.##7.81.130':445
- '83.##7.30.181':139
- '83.#77.0.99':139
- '83.##7.189.192':139
- '83.##7.238.104':139
- '83.##7.254.72':139
- '83.##7.253.208':139
- '83.##7.17.223':139
- '83.##7.140.238':139
- '83.##7.34.233':139
- '83.##7.229.212':139
- '83.##7.140.185':139
- '83.##7.99.12':139
- '83.##7.70.29':139
- '83.##7.96.216':139
- '83.##7.44.230':139
- '83.##7.12.102':139
- '83.##7.52.240':445
- '83.##7.66.194':445
- '83.##7.252.13':445
- '83.#77.0.99':445
- '83.##7.51.227':445
- '83.##7.251.35':139
- '83.##7.5.176':139
- '83.##7.28.78':139
- '83.##7.17.33':445
- '83.##7.77.209':445
- '83.##7.43.94':445
- '83.##7.5.217':139
- '83.##7.108.72':139
- '83.##7.215.117':139
- '83.##7.117.192':139
- '83.##7.59.62':139
- '83.##7.213.230':139
- '83.##7.137.213':139
- '83.##7.122.94':139
- '83.##7.96.200':139
- '83.##7.137.218':139
- '83.##7.138.220':139
- '83.##7.30.183':139
- '83.##7.247.30':139
- '83.##7.182.230':445
- '83.##7.76.158':445
- '83.##7.83.150':445
- '83.##7.116.110':139
- '83.##7.10.45':139
- '83.##7.63.197':139
- '83.##7.17.24':139
- '83.##7.230.193':139
- '83.##7.84.108':139
- '83.##7.235.152':139
- '83.##7.229.99':139
- '83.##7.116.47':139
- '83.##7.87.178':139
- '83.#77.3.65':139
- '83.##7.188.74':139
- '83.##7.161.252':139
- '83.##7.25.162':139
- '83.##7.42.40':139
- '83.##7.169.241':139
- '83.##7.4.252':139
- '83.##7.189.73':139
- '83.##7.60.22':139
- '83.##7.147.137':139
- '83.##7.238.147':139
- '83.##7.205.65':139
- '83.##7.24.46':139
- '83.##7.73.26':139
- '83.##7.52.40':139
- '83.##7.32.52':139
- '83.##7.23.185':445
- '83.##7.113.103':445
- '83.##7.0.214':445
- '83.#77.97.6':445
- '83.##7.228.199':445
- '83.##7.58.195':445
- '83.##7.45.59':445
- '83.##7.104.219':445
- '83.##7.231.49':445
- '83.##7.246.220':445
- '83.##7.210.66':445
- '83.##7.190.125':445
- '83.##7.22.203':445
- '83.##7.18.67':445
- '83.##7.60.14':445
- '83.##7.208.24':445
- '83.##7.179.130':445
- '83.##7.66.179':445
- '83.##7.42.166':445
- '83.##7.42.251':445
- '83.##7.90.42':445
- '83.##7.216.181':445
- '83.##7.47.251':445
- '83.##7.227.180':445
- '83.##7.182.230':139
- '83.##7.248.60':445
- '83.##7.147.250':445
- '83.##7.73.174':445
- '83.##7.29.215':445
- '83.##7.50.242':445
- '83.##7.158.182':445
- '83.##7.83.150':139
- '83.##7.47.251':139
- '83.##7.50.242':139
- '83.##7.216.181':139
- '83.##7.248.60':139
- '83.##7.227.180':139
- '83.##7.73.174':139
- '83.##7.76.158':139
- '83.##7.147.250':139
- '83.##7.158.182':139
- '83.##7.29.215':139
- '83.##7.29.102':445
- '83.##7.68.252':445
- '83.##7.31.66':445
- '83.##7.247.169':445
- '83.##7.216.187':445
- '83.##7.21.27':445
- '83.##7.182.145':445
- '83.##7.106.60':445
- '83.##7.145.121':445
- '83.##7.188.132':445
- '83.#77.5.2':445
- '83.##7.89.222':445
- '83.##7.45.125':139
- '83.##7.175.239':139
- '83.##7.206.206':139
- '83.##7.99.181':139
- '83.##7.19.240':139
- '83.##7.103.191':139
- '83.##7.122.81':445
- '83.##7.106.154':139
- '83.##7.67.179':139
- '83.##7.231.61':139
- '83.##7.120.111':445
- '83.##7.96.192':445
- '83.##7.151.133':445
- '83.##7.46.29':445
- '83.##7.17.146':445
- '83.##7.228.211':445
- '83.##7.113.108':445
- '83.##7.75.31':445
- '83.#77.21.9':445
- '83.##7.255.190':445
- '83.##7.151.171':445
- '83.##7.129.113':445
- '83.##7.67.58':445
- '83.##7.81.158':445
- '83.##7.164.19':445
- '83.##7.106.84':445
- '83.##7.69.184':445
- '83.##7.94.95':445
- '83.##7.184.39':445
- '83.##7.50.114':445
- '83.##7.84.71':445
- '83.##7.81.158':139
- '83.##7.129.113':139
- '83.##7.106.84':139
- '83.##7.106.60':139
- '83.##7.164.19':139
- '83.##7.184.39':139
- '83.##7.69.184':139
- '83.##7.84.71':139
- '83.##7.67.58':139
- '83.##7.50.114':139
- '83.##7.182.145':139
- '83.##7.21.27':139
- '83.##7.247.169':139
- '83.##7.89.222':139
- '83.##7.122.81':139
- '83.##7.216.187':139
- '83.#77.5.2':139
- '83.##7.145.121':139
- '83.##7.188.132':139
- '83.##7.68.252':139
- '83.##7.31.66':139
- '83.##7.177.200':139
- '83.##7.36.129':139
- '83.##7.194.14':139
- '83.##7.113.108':139
- '83.##7.14.114':139
- '83.##7.232.140':139
- '83.##7.181.71':139
- '83.##7.231.121':139
- '83.##7.8.128':139
- '83.##7.172.144':139
- '83.##7.228.211':139
- '83.##7.17.146':139
- '83.##7.151.133':139
- '83.##7.46.29':139
- '83.##7.94.95':139
- '83.##7.151.171':139
- '83.##7.255.190':139
- '83.##7.75.31':139
- '83.#77.21.9':139
- '83.##7.120.111':139
- '83.##7.96.192':139
- '83.##7.14.114':445
- '83.##7.130.28':139
- '83.##7.60.130':139
- '83.##7.81.130':139
- '83.##7.29.102':139
- '83.##7.153.24':139
- '83.##7.53.170':445
- '83.##7.8.198':445
- '83.##7.59.231':445
- '83.##7.101.111':445
- '83.##7.56.238':445
- '83.##7.57.213':139
- '83.##7.110.233':139
- '83.##7.41.163':139
- '83.##7.45.81':139
- '83.##7.25.91':139
- '83.##7.181.5':139
- '83.##7.15.210':139
- '83.##7.60.114':139
- '83.##7.46.41':139
- '83.##7.187.253':139
- '83.##7.150.188':139
- '83.##7.41.163':445
- '83.##7.187.253':445
- '83.##7.110.233':445
- '83.##7.181.5':445
- '83.##7.45.81':445
- '83.##7.60.114':445
- '83.##7.57.213':445
- '83.##7.15.210':445
- '83.##7.150.188':445
- '83.##7.46.41':445
- '83.##7.25.91':445
- '83.##7.171.149':445
- '83.##7.55.24':445
- '83.##7.167.183':445
- '83.##7.150.169':445
- '83.##7.52.51':445
- '83.##7.120.51':445
- '83.##7.192.102':445
- '83.##7.226.130':445
- '83.##7.27.131':445
- '83.##7.13.105':445
- '83.##7.231.61':445
- '83.##7.106.154':445
- '83.##7.67.179':445
- '83.##7.45.125':445
- '83.##7.175.239':445
- '83.##7.68.252':9988
- '83.##7.182.145':9988
- '83.##7.89.222':9988
- '83.##7.103.191':445
- '83.##7.247.169':9988
- '83.##7.206.206':445
- '83.##7.8.128':445
- '83.##7.172.144':445
- '83.##7.36.129':445
- '83.##7.194.14':445
- '83.##7.177.200':445
- '83.##7.99.181':445
- '83.##7.19.240':445
- '83.##7.181.71':445
- '83.##7.231.121':445
- '83.##7.232.140':445
- '83.##7.171.149':139
- '83.##7.55.24':139
- '83.##7.52.51':139
- '83.##7.150.169':139
- '83.##7.167.183':139
- '83.##7.120.51':139
- '83.##7.192.102':139
- '83.##7.226.130':139
- '83.##7.27.131':139
- '83.##7.13.105':139
- '83.##7.53.170':139
- '83.##7.8.128':9988
- '83.##7.99.181':9988
- '83.##7.177.200':9988
- '83.##7.67.58':9988
- '83.##7.94.95':9988
- '83.##7.59.231':139
- '83.##7.8.198':139
- '83.##7.56.238':139
- '83.##7.19.240':9988
- '83.##7.101.111':139