Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '81.##1.96.209':445
- '81.##1.69.105':445
- '81.##1.180.239':139
- '81.##1.199.45':139
- '81.##1.170.85':445
- '81.##1.59.15':445
- '81.##1.98.238':445
- '81.##1.49.170':445
- '81.##1.124.74':445
- '81.##1.191.214':139
- '81.##1.182.170':139
- '81.##1.233.106':139
- '81.##1.218.43':139
- '81.##1.70.171':139
- '81.##1.202.215':139
- '81.##1.115.202':139
- '81.##1.20.184':139
- '81.##1.207.40':139
- '81.##1.134.167':445
- '81.##1.190.153':445
- '81.##1.4.115':445
- '81.##1.255.177':445
- '81.##1.109.23':445
- '81.##1.126.3':445
- '81.##1.77.111':445
- '81.##1.207.116':445
- '81.##1.17.240':445
- '81.##1.12.47':445
- '81.##1.34.151':445
- '81.##1.138.190':445
- '81.##1.121.144':445
- '81.##1.13.28':445
- '81.##1.39.211':445
- '81.##1.69.165':445
- '81.##1.68.251':445
- '81.##1.66.70':445
- '81.##1.210.252':445
- '81.##1.41.15':139
- '81.##1.66.70':139
- '81.##1.210.252':139
- '81.##1.138.190':139
- '81.##1.39.211':139
- '81.##1.69.165':139
- '81.##1.109.23':139
- '81.##1.190.153':139
- '81.##1.68.251':139
- '81.##1.255.177':139
- '81.##1.124.74':139
- '81.##1.59.15':139
- '81.##1.170.85':139
- '81.##1.49.170':139
- '81.##1.98.238':139
- '81.##1.13.28':139
- '81.##1.34.151':139
- '81.##1.134.167':139
- '81.##1.121.144':139
- '81.##1.4.115':139
- '81.##1.28.15':139
- '81.##1.21.192':139
- '81.##1.92.11':139
- '81.##1.163.197':139
- '81.##1.10.64':139
- '81.##1.79.125':139
- '81.##1.15.79':139
- '81.##1.34.74':139
- '81.##1.188.9':139
- '81.##1.12.47':139
- '81.##1.77.111':139
- '81.##1.126.3':139
- '81.##1.17.240':139
- '81.##1.207.116':139
- '81.##1.20.244':139
- '81.##1.167.20':139
- '81.##1.177.150':139
- '81.##1.221.21':139
- '81.##1.177.150':445
- '81.##1.52.203':139
- '81.##1.86.179':139
- '81.##1.120.78':139
- '81.##1.35.31':139
- '81.##1.59.86':139
- '81.##1.80.100':139
- '81.##1.6.147':139
- '81.##1.42.98':139
- '81.##1.99.217':139
- '81.##1.245.215':139
- '81.##1.134.153':139
- '81.##1.166.103':139
- '81.##1.30.132':139
- '81.##1.79.146':139
- '81.##1.63.129':139
- '81.##1.157.165':139
- '81.##1.144.57':139
- '81.##1.83.102':139
- '81.##1.0.154':139
- '81.##1.27.84':139
- '81.##1.242.99':139
- '81.#11.67.1':139
- '81.##1.96.210':139
- '81.##1.187.10':139
- '81.##1.50.240':139
- '81.#11.7.71':139
- '81.##1.79.187':139
- '81.##1.47.135':139
- '81.##1.86.79':139
- '81.##1.148.108':139
- '81.##1.72.176':139
- '81.##1.79.145':139
- '81.##1.84.213':139
- '81.##1.21.31':139
- '81.##1.199.231':139
- '81.##1.76.11':139
- '81.##1.35.251':139
- '81.##1.104.107':139
- '81.##1.15.79':445
- '81.##1.41.15':445
- '81.##1.188.9':445
- '81.##1.79.125':445
- '81.##1.233.106':445
- '81.##1.182.170':445
- '81.##1.70.171':445
- '81.##1.218.43':445
- '81.##1.191.214':445
- '81.##1.167.20':445
- '81.##1.92.11':445
- '81.##1.221.21':445
- '81.##1.20.244':445
- '81.##1.163.197':445
- '81.##1.10.64':445
- '81.##1.34.74':445
- '81.##1.28.15':445
- '81.##1.21.192':445
- '81.##1.20.184':445
- '81.##1.58.240':139
- '81.##1.94.145':139
- '81.##1.171.169':139
- '81.##1.171.171':139
- '81.##1.92.94':139
- '81.#11.76.4':139
- '81.##1.107.91':139
- '81.##1.144.138':139
- '81.##1.180.194':139
- '81.##1.115.202':445
- '81.##1.180.239':445
- '81.##1.207.40':445
- '81.##1.202.215':445
- '81.##1.199.45':445
- '81.##1.225.11':139
- '81.##1.201.236':139
- '81.##1.36.157':139
- '81.##1.111.126':139
- '81.##1.69.105':139
- '81.##1.249.0':139
- '81.##1.77.249':139
- '81.##1.224.75':139
- '81.##1.0.204':139
- '81.##1.162.202':445
- '81.##1.31.122':445
- '81.##1.105.47':445
- '81.##1.245.162':445
- '81.##1.53.41':445
- '81.##1.162.67':139
- '81.##1.211.9':139
- '81.##1.30.178':139
- '81.##1.155.98':139
- '81.##1.112.83':139
- '81.##1.90.211':139
- '81.##1.233.232':139
- '81.##1.10.113':139
- '81.##1.18.10':139
- '81.##1.5.137':445
- '81.##1.116.56':445
- '81.##1.166.158':445
- '81.##1.183.1':445
- '81.##1.115.170':445
- '81.##1.108.3':445
- '81.#11.79.4':445
- '81.##1.210.11':445
- '81.##1.96.216':445
- '81.##1.3.226':445
- '81.##1.121.208':445
- '81.#11.88.8':445
- '81.##1.29.231':445
- '81.##1.3.232':445
- '81.##1.128.201':445
- '81.##1.143.67':445
- '81.##1.47.146':445
- '81.#11.3.86':445
- '81.##1.230.149':445
- '81.##1.132.254':139
- '81.#11.3.86':139
- '81.##1.230.149':139
- '81.#11.88.8':139
- '81.##1.128.201':139
- '81.##1.143.67':139
- '81.##1.115.170':139
- '81.##1.116.56':139
- '81.##1.47.146':139
- '81.##1.183.1':139
- '81.##1.53.41':139
- '81.##1.162.202':139
- '81.##1.5.137':139
- '81.##1.31.122':139
- '81.##1.245.162':139
- '81.##1.3.232':139
- '81.##1.121.208':139
- '81.##1.105.47':139
- '81.##1.29.231':139
- '81.##1.166.158':139
- '81.##1.62.92':139
- '81.##1.255.72':139
- '81.##1.77.71':139
- '81.##1.157.69':139
- '81.#11.88.9':139
- '81.##1.165.16':139
- '81.##1.146.62':139
- '81.##1.125.67':139
- '81.##1.17.124':139
- '81.##1.96.216':139
- '81.#11.79.4':139
- '81.##1.108.3':139
- '81.##1.3.226':139
- '81.##1.210.11':139
- '81.##1.125.171':139
- '81.##1.199.130':139
- '81.##1.112.76':139
- '81.##1.171.57':139
- '81.##1.112.76':445
- '81.##1.110.89':139
- '81.##1.21.70':139
- '81.##1.150.97':139
- '81.##1.107.245':139
- '81.##1.146.106':139
- '81.##1.189.75':139
- '81.##1.32.189':139
- '81.##1.221.101':139
- '81.##1.75.170':139
- '81.##1.77.71':9988
- '81.##1.157.69':9988
- '81.##1.112.76':9988
- '81.##1.125.171':9988
- '81.##1.155.98':9988
- '81.##1.64.226':139
- '81.##1.78.142':139
- '81.##1.162.67':9988
- '81.##1.75.46':139
- '81.##1.13.191':139
- '81.##1.75.170':445
- '81.##1.189.75':445
- '81.##1.146.106':445
- '81.##1.221.101':445
- '81.##1.32.189':445
- '81.##1.14.24':445
- '81.##1.96.209':139
- '81.##1.13.191':445
- '81.##1.77.94':445
- '81.##1.75.46':445
- '81.##1.64.226':445
- '81.##1.77.94':139
- '81.##1.14.24':139
- '81.##1.78.142':445
- '81.##1.107.245':445
- '81.##1.21.70':445
- '81.##1.150.97':445
- '81.##1.110.89':445
- '81.##1.210.11':9988
- '81.##1.146.62':445
- '81.##1.132.254':445
- '81.##1.17.124':445
- '81.##1.165.16':445
- '81.##1.30.178':445
- '81.##1.211.9':445
- '81.##1.112.83':445
- '81.##1.155.98':445
- '81.##1.162.67':445
- '81.##1.77.71':445
- '81.##1.199.130':445
- '81.##1.171.57':445
- '81.##1.125.171':445
- '81.##1.157.69':445
- '81.##1.125.67':445
- '81.#11.88.9':445
- '81.##1.62.92':445
- '81.##1.255.72':445
- '81.##1.10.113':445
- '81.#11.88.8':9988
- '81.##1.128.201':9988
- '81.##1.29.231':9988
- '81.##1.121.208':9988
- '81.##1.47.146':9988
- '81.##1.116.56':9988
- '81.##1.166.158':9988
- '81.##1.183.1':9988
- '81.##1.115.170':9988
- '81.##1.233.232':445
- '81.##1.224.75':445
- '81.##1.18.10':445
- '81.##1.90.211':445
- '81.##1.0.204':445
- '81.##1.31.122':9988
- '81.##1.5.137':9988
- '81.##1.249.0':445
- '81.##1.77.249':445