Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '61.##9.185.135':139
- '61.##9.112.251':139
- '61.##9.23.66':139
- '61.##9.247.41':139
- '61.##9.13.61':139
- '61.##9.242.207':139
- '61.##9.93.243':139
- '61.##9.208.169':139
- '61.##9.151.112':139
- '61.##9.148.29':139
- '61.##9.25.214':445
- '61.##9.227.25':445
- '61.##9.213.235':445
- '61.#89.4.14':445
- '61.##9.235.182':445
- '61.##9.233.181':139
- '61.##9.31.80':139
- '61.##9.117.233':139
- '61.##9.187.226':445
- '61.##9.233.187':139
- '61.##9.51.94':139
- '61.##9.208.169':445
- '61.##9.242.207':445
- '61.##9.148.29':445
- '61.##9.112.251':445
- '61.##9.151.112':445
- '61.##9.42.46':445
- '61.##9.163.62':139
- '61.##9.149.86':445
- '61.##9.93.243':445
- '61.##9.51.94':445
- '61.##9.117.233':445
- '61.##9.233.181':445
- '61.##9.233.187':445
- '61.##9.149.86':139
- '61.##9.42.46':139
- '61.##9.23.66':445
- '61.##9.185.135':445
- '61.##9.13.61':445
- '61.##9.31.80':445
- '61.##9.247.41':445
- '61.##9.67.237':445
- '61.##9.187.226':139
- '61.##9.78.124':445
- '61.##9.227.25':139
- '61.##9.213.235':139
- '61.##9.25.214':139
- '61.##9.174.238':445
- '61.##9.11.165':445
- '61.##9.238.158':445
- '61.##9.102.186':445
- '61.##9.62.121':445
- '61.##9.172.44':139
- '61.##9.108.159':139
- '61.##9.73.234':139
- '61.##9.115.123':139
- '61.##9.137.227':139
- '61.#89.4.14':139
- '61.##9.235.182':139
- '61.##9.67.237':139
- '61.##9.31.85':139
- '61.##9.40.155':139
- '61.##9.194.163':445
- '61.##9.115.123':445
- '61.##9.137.227':445
- '61.##9.109.138':445
- '61.##9.195.30':445
- '61.##9.123.119':445
- '61.##9.31.85':445
- '61.##9.40.155':445
- '61.##9.108.159':445
- '61.##9.73.234':445
- '61.##9.172.44':445
- '61.##9.134.209':445
- '61.##9.29.214':445
- '61.##9.143.235':445
- '61.##9.137.237':445
- '61.##9.30.37':445
- '61.##9.47.27':445
- '61.##9.69.198':445
- '61.##9.92.188':445
- '61.##9.89.141':445
- '61.##9.149.53':445
- '61.##9.50.33':139
- '61.##9.41.228':445
- '61.##9.182.226':445
- '61.##9.100.102':445
- '61.##9.6.218':445
- '61.##9.102.7':445
- '61.##9.49.106':445
- '61.##9.168.251':445
- '61.##9.68.53':445
- '61.##9.143.55':445
- '61.##9.17.63':445
- '61.##9.83.81':445
- '61.##9.197.82':445
- '61.##9.49.108':445
- '61.##9.3.222':445
- '61.##9.241.216':445
- '61.##9.225.119':445
- '61.##9.100.15':445
- '61.##9.148.133':445
- '61.##9.181.97':445
- '61.##9.4.185':445
- '61.##9.175.87':445
- '61.##9.187.38':139
- '61.#89.7.97':139
- '61.##9.255.245':139
- '61.##9.37.38':139
- '61.##9.163.233':139
- '61.##9.232.254':139
- '61.##9.217.225':139
- '61.##9.131.241':139
- '61.##9.188.53':139
- '61.##9.239.19':139
- '61.##9.47.72':139
- '61.##9.217.116':139
- '61.##9.148.90':445
- '61.##9.235.121':445
- '61.##9.71.14':445
- '61.##9.55.220':139
- '61.##9.71.251':139
- '61.##9.122.191':139
- '61.##9.44.115':139
- '61.##9.71.45':139
- '61.##9.138.84':445
- '61.##9.181.97':139
- '61.##9.4.185':139
- '61.##9.197.82':139
- '61.##9.49.108':139
- '61.##9.83.81':139
- '61.##9.6.218':139
- '61.##9.102.7':139
- '61.##9.100.15':139
- '61.##9.148.133':139
- '61.##9.225.119':139
- '61.##9.182.177':139
- '61.##9.109.53':139
- '61.##9.114.138':139
- '61.##9.123.230':139
- '61.##9.173.46':139
- '61.##9.3.222':139
- '61.##9.241.216':139
- '61.##9.138.84':139
- '61.##9.97.117':139
- '61.##9.189.252':139
- '61.##9.100.102':139
- '61.##9.123.230':445
- '61.##9.173.46':445
- '61.##9.50.33':445
- '61.##9.148.90':139
- '61.##9.163.62':445
- '61.##9.97.117':445
- '61.##9.189.252':445
- '61.##9.109.53':445
- '61.##9.114.138':445
- '61.##9.182.177':445
- '61.##9.17.63':139
- '61.##9.68.53':139
- '61.##9.143.55':139
- '61.##9.41.228':139
- '61.##9.182.226':139
- '61.##9.235.121':139
- '61.##9.71.14':139
- '61.##9.175.87':139
- '61.##9.49.106':139
- '61.##9.168.251':139
- '61.##9.67.107':445
- '61.##9.40.31':445
- '61.##9.123.19':445
- '61.##9.136.208':445
- '61.##9.66.46':445
- '61.##9.199.53':445
- '61.##9.254.198':445
- '61.##9.187.218':445
- '61.##9.245.59':445
- '61.##9.53.231':445
- '61.##9.80.243':139
- '61.##9.56.189':139
- '61.##9.79.158':139
- '61.##9.118.148':139
- '61.##9.140.186':139
- '61.##9.65.217':139
- '61.##9.168.115':445
- '61.##9.172.161':139
- '61.##9.39.190':139
- '61.##9.88.208':139
- '61.##9.79.254':445
- '61.##9.64.122':445
- '61.##9.125.143':445
- '61.##9.141.227':445
- '61.##9.183.122':445
- '61.#89.0.3':445
- '61.##9.138.95':445
- '61.##9.55.102':445
- '61.##9.95.166':445
- '61.##9.42.162':445
- '61.##9.102.196':445
- '61.##9.212.235':445
- '61.##9.72.88':445
- '61.##9.235.192':445
- '61.##9.45.183':445
- '61.#89.67.6':445
- '61.##9.137.101':445
- '61.##9.190.7':445
- '61.##9.101.25':445
- '61.##9.160.28':445
- '61.##9.61.102':445
- '61.##9.201.145':139
- '61.#89.67.6':139
- '61.##9.235.192':139
- '61.##9.45.183':139
- '61.##9.254.198':139
- '61.##9.79.254':139
- '61.##9.61.102':139
- '61.##9.101.25':139
- '61.##9.160.28':139
- '61.##9.212.235':139
- '61.##9.72.88':139
- '61.##9.40.31':139
- '61.##9.66.46':139
- '61.##9.168.115':139
- '61.##9.187.218':139
- '61.##9.123.19':139
- '61.##9.53.231':139
- '61.##9.199.53':139
- '61.##9.245.59':139
- '61.##9.136.208':139
- '61.##9.67.107':139
- '61.##9.137.101':139
- '61.##9.205.193':139
- '61.#89.57.6':139
- '61.##9.114.210':139
- '61.##9.55.102':139
- '61.##9.113.129':139
- '61.##9.22.249':139
- '61.##9.12.200':139
- '61.##9.220.202':139
- '61.##9.183.161':139
- '61.##9.109.167':139
- '61.##9.141.227':139
- '61.##9.64.122':139
- '61.#89.0.3':139
- '61.##9.190.7':139
- '61.##9.183.122':139
- '61.##9.95.166':139
- '61.##9.138.95':139
- '61.##9.102.196':139
- '61.##9.125.143':139
- '61.##9.42.162':139
- '61.##9.113.129':445
- '61.##9.252.216':445
- '61.##9.89.82':445
- '61.##9.73.252':445
- '61.#89.7.48':445
- '61.#89.0.16':445
- '61.##9.189.77':445
- '61.##9.58.144':445
- '61.##9.141.22':445
- '61.##9.132.149':445
- '61.##9.113.132':445
- '61.##9.113.132':139
- '61.##9.141.22':139
- '61.##9.132.149':139
- '61.##9.252.216':139
- '61.##9.89.82':139
- '61.##9.199.199':445
- '61.##9.0.189':445
- '61.##9.51.32':139
- '61.##9.189.77':139
- '61.##9.58.144':139
- '61.##9.51.32':445
- '61.##9.149.53':139
- '61.##9.92.188':139
- '61.##9.89.141':139
- '61.##9.134.209':139
- '61.##9.29.214':139
- '61.##9.123.119':139
- '61.##9.109.138':139
- '61.##9.195.30':139
- '61.##9.47.27':139
- '61.##9.69.198':139
- '61.##9.238.158':139
- '61.##9.174.238':139
- '61.##9.62.121':139
- '61.##9.78.124':139
- '61.##9.102.186':139
- '61.##9.30.37':139
- '61.##9.143.235':139
- '61.##9.137.237':139
- '61.##9.11.165':139
- '61.##9.194.163':139
- '61.##9.73.252':139
- '61.##9.56.189':445
- '61.##9.39.190':445
- '61.##9.80.243':445
- '61.##9.140.186':445
- '61.##9.79.158':445
- '61.##9.66.46':9988
- '61.##9.123.19':9988
- '61.##9.65.217':445
- '61.##9.88.208':445
- '61.##9.172.161':445
- '61.##9.183.161':445
- '61.##9.109.167':445
- '61.#89.57.6':445
- '61.##9.114.210':445
- '61.##9.205.193':445
- '61.##9.201.145':445
- '61.##9.118.148':445
- '61.##9.12.200':445
- '61.##9.220.202':445
- '61.##9.22.249':445
- '61.##9.67.107':9988
- '61.##9.55.102':9988
- '61.##9.113.129':9988
- '61.##9.42.162':9988
- '61.#89.0.3':9988
- '61.##9.64.122':9988
- '61.#89.7.48':139
- '61.#89.0.16':139
- '61.##9.0.189':139
- '61.##9.201.145':9988
- '61.##9.199.199':139
- '61.##9.45.183':9988
- '61.#89.67.6':9988
- '61.##9.79.254':9988
- '61.##9.199.53':9988
- '61.##9.254.198':9988
- '61.##9.137.101':9988
- '61.##9.183.122':9988
- '61.##9.61.102':9988
- '61.##9.235.192':9988
- '61.##9.212.235':9988