Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '14.##8.108.175':445
- '14.##8.73.201':445
- '14.##8.61.162':445
- '14.##8.135.242':445
- '14.##8.247.137':445
- '14.##8.188.156':445
- '14.##8.210.50':445
- '14.#08.16.7':445
- '14.##8.10.63':445
- '14.##8.165.24':139
- '14.#08.6.4':139
- '14.##8.216.131':139
- '14.##8.19.188':139
- '14.##8.183.50':445
- '14.##8.72.173':445
- '14.##8.76.219':139
- '14.##8.78.226':445
- '14.##8.97.15':445
- '14.#08.46.3':445
- '14.##8.154.69':445
- '14.##8.229.197':445
- '14.##8.142.207':445
- '14.##8.193.245':445
- '14.##8.78.203':445
- '14.##8.175.130':445
- '14.##8.126.218':445
- '14.##8.128.242':445
- '14.##8.31.232':445
- '14.#08.81.6':445
- '14.##8.19.197':445
- '14.##8.4.113':445
- '14.##8.138.33':445
- '14.##8.225.138':445
- '14.##8.147.108':445
- '14.##8.126.189':445
- '14.##8.131.168':139
- '14.##8.210.50':139
- '14.#08.16.7':139
- '14.##8.108.175':139
- '14.##8.73.201':139
- '14.##8.97.15':139
- '14.##8.19.197':139
- '14.##8.247.137':139
- '14.##8.188.156':139
- '14.##8.135.242':139
- '14.##8.15.110':445
- '14.##8.78.226':139
- '14.##8.88.118':445
- '14.##8.109.193':445
- '14.##8.10.63':139
- '14.##8.61.162':139
- '14.##8.183.50':139
- '14.##8.72.173':139
- '14.##8.4.113':139
- '14.##8.175.130':139
- '14.##8.126.218':139
- '14.#08.46.3':139
- '14.##8.154.69':139
- '14.##8.92.18':139
- '14.##8.9.189':139
- '14.##8.193.245':139
- '14.##8.78.203':139
- '14.##8.142.207':139
- '14.##8.147.108':139
- '14.##8.126.189':139
- '14.##8.31.232':139
- '14.#08.81.6':139
- '14.##8.128.242':139
- '14.##8.229.197':139
- '14.##8.138.33':139
- '14.##8.225.138':139
- '14.##8.92.18':445
- '14.##8.232.111':139
- '14.##8.101.113':139
- '14.##8.21.182':139
- '14.##8.111.251':139
- '14.##8.165.25':139
- '14.##8.232.3':139
- '14.##8.181.232':139
- '14.##8.144.81':139
- '14.##8.45.81':139
- '14.##8.87.60':139
- '14.##8.3.104':139
- '14.##8.48.209':139
- '14.##8.196.148':139
- '14.##8.5.212':139
- '14.##8.81.55':139
- '14.##8.87.120':139
- '14.##8.10.23':139
- '14.##8.45.207':139
- '14.##8.116.178':139
- '14.##8.11.253':139
- '14.##8.81.116':139
- '14.##8.177.192':139
- '14.##8.11.169':139
- '14.##8.138.208':139
- '14.##8.91.182':139
- '14.##8.64.183':139
- '14.##8.41.254':139
- '14.##8.22.16':139
- '14.##8.41.63':139
- '14.##8.146.230':139
- '14.##8.27.147':139
- '14.##8.131.175':139
- '14.##8.73.112':139
- '14.##8.50.192':139
- '14.##8.243.213':139
- '14.##8.170.74':139
- '14.##8.245.71':139
- '14.##8.202.200':139
- '14.##8.15.95':139
- '14.##8.135.26':139
- '14.##8.122.184':139
- '14.##8.171.122':139
- '14.##8.67.210':139
- '14.##8.73.52':139
- '14.##8.219.135':139
- '14.##8.216.131':445
- '14.##8.19.188':445
- '14.##8.9.189':445
- '14.##8.131.168':445
- '14.##8.76.219':445
- '14.##8.27.10':139
- '14.##8.165.24':445
- '14.#08.6.4':445
- '14.##8.68.29':139
- '14.##8.171.122':445
- '14.##8.68.29':445
- '14.##8.73.52':445
- '14.##8.122.184':445
- '14.##8.128.72':139
- '14.##8.83.62':139
- '14.##8.81.179':445
- '14.##8.76.192':445
- '14.##8.67.210':445
- '14.##8.27.10':445
- '14.##8.219.135':445
- '14.##8.81.179':139
- '14.##8.76.192':139
- '14.##8.245.71':445
- '14.##8.202.200':445
- '14.##8.15.95':445
- '14.##8.135.26':445
- '14.##8.194.32':445
- '14.##8.98.112':139
- '14.##8.24.20':139
- '14.##8.103.60':139
- '14.##8.119.129':139
- '14.##8.67.118':445
- '14.##8.4.133':445
- '14.##8.49.24':139
- '14.##8.12.49':139
- '14.##8.91.137':139
- '14.##8.122.217':139
- '14.##8.149.122':139
- '14.##8.44.182':139
- '14.##8.217.164':139
- '14.##8.126.79':139
- '14.##8.139.48':139
- '14.##8.96.149':139
- '14.##8.192.193':139
- '14.##8.30.53':445
- '14.##8.148.99':445
- '14.##8.63.141':445
- '14.##8.109.17':445
- '14.##8.92.215':445
- '14.##8.136.195':445
- '14.##8.61.137':445
- '14.##8.127.245':445
- '14.##8.30.126':445
- '14.##8.46.138':445
- '14.##8.239.130':445
- '14.##8.158.121':445
- '14.##8.52.97':445
- '14.##8.45.166':445
- '14.##8.17.12':445
- '14.##8.183.192':445
- '14.##8.3.101':445
- '14.##8.120.26':445
- '14.##8.116.42':139
- '14.##8.46.138':139
- '14.##8.109.17':139
- '14.##8.17.12':139
- '14.##8.183.192':139
- '14.##8.63.141':139
- '14.##8.127.245':139
- '14.##8.92.215':139
- '14.##8.148.99':139
- '14.##8.120.26':139
- '14.##8.30.53':139
- '14.##8.158.121':139
- '14.##8.4.133':139
- '14.##8.67.118':139
- '14.##8.239.130':139
- '14.##8.3.101':139
- '14.##8.52.97':139
- '14.##8.45.166':139
- '14.##8.30.126':139
- '14.##8.153.200':139
- '14.##8.176.153':139
- '14.##8.178.64':139
- '14.##8.178.234':139
- '14.##8.76.205':139
- '14.##8.13.78':139
- '14.##8.43.177':139
- '14.##8.85.180':139
- '14.##8.118.170':139
- '14.##8.113.94':139
- '14.##8.155.107':139
- '14.##8.136.195':139
- '14.##8.61.137':139
- '14.#08.1.77':139
- '14.##8.22.99':139
- '14.##8.237.154':139
- '14.##8.113.4':139
- '14.##8.113.94':445
- '14.##8.96.149':9988
- '14.##8.149.122':9988
- '14.##8.76.205':9988
- '14.##8.217.164':9988
- '14.##8.216.44':139
- '14.##8.237.239':139
- '14.##8.212.73':139
- '14.##8.29.104':139
- '14.##8.43.177':9988
- '14.##8.127.245':9988
- '14.##8.61.137':9988
- '14.##8.148.99':9988
- '14.##8.63.141':9988
- '14.##8.113.4':9988
- '14.#08.1.77':9988
- '14.##8.113.94':9988
- '14.##8.237.154':9988
- '14.##8.154.95':139
- '14.##8.237.239':445
- '14.##8.154.95':445
- '14.##8.29.104':445
- '14.##8.216.44':445
- '14.##8.207.22':445
- '14.##8.213.62':445
- '14.##8.75.235':445
- '14.##8.31.217':445
- '14.##8.212.73':445
- '14.##8.207.22':139
- '14.##8.213.62':139
- '14.##8.75.235':139
- '14.##8.31.217':139
- '14.##8.109.193':139
- '14.##8.15.110':139
- '14.##8.194.32':139
- '14.##8.88.118':139
- '14.##8.92.215':9988
- '14.##8.85.180':445
- '14.##8.76.205':445
- '14.##8.176.153':445
- '14.##8.43.177':445
- '14.##8.44.182':445
- '14.##8.217.164':445
- '14.##8.13.78':445
- '14.##8.116.42':445
- '14.##8.153.200':445
- '14.##8.113.4':445
- '14.#08.1.77':445
- '14.##8.155.107':445
- '14.##8.237.154':445
- '14.##8.118.170':445
- '14.##8.178.234':445
- '14.##8.178.64':445
- '14.##8.22.99':445
- '14.##8.122.217':445
- '14.##8.12.49':445
- '14.##8.45.166':9988
- '14.##8.24.20':445
- '14.##8.49.24':445
- '14.##8.46.138':9988
- '14.##8.109.17':9988
- '14.##8.239.130':9988
- '14.##8.183.192':9988
- '14.##8.98.112':445
- '14.##8.192.193':445
- '14.##8.126.79':445
- '14.##8.149.122':445
- '14.##8.96.149':445
- '14.##8.103.60':445
- '14.##8.119.129':445
- '14.##8.139.48':445
- '14.##8.91.137':445