Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##8.221.94':445
- '88.##8.58.82':445
- '88.##8.145.58':445
- '88.##8.179.42':445
- '88.##8.127.132':445
- '88.##8.6.122':445
- '88.##8.197.104':445
- '88.##8.22.69':445
- '88.##8.42.230':445
- '88.##8.39.145':445
- '88.##8.122.16':445
- '88.##8.45.223':445
- '88.##8.207.62':445
- '88.##8.65.185':445
- '88.##8.33.71':445
- '88.##8.97.242':445
- '88.##8.146.188':139
- '88.##8.124.207':445
- '88.##8.121.86':445
- '88.##8.154.243':445
- '88.##8.12.66':445
- '88.##8.207.50':445
- '88.##8.42.109':445
- '88.##8.184.15':445
- '88.##8.14.43':445
- '88.##8.40.56':445
- '88.##8.181.18':445
- '88.##8.235.235':445
- '88.##8.46.154':445
- '88.##8.66.194':445
- '88.##8.16.90':445
- '88.##8.85.170':445
- '88.##8.217.227':139
- '88.##8.35.68':139
- '88.##8.159.24':139
- '88.##8.68.250':445
- '88.##8.113.33':445
- '88.##8.146.188':445
- '88.##8.195.20':445
- '88.##8.81.245':445
- '88.##8.213.45':445
- '88.##8.175.122':445
- '88.##8.125.220':445
- '88.##8.26.236':445
- '88.##8.83.136':445
- '88.##8.213.99':445
- '88.##8.242.6':445
- '88.##8.99.14':445
- '88.##8.19.204':445
- '88.##8.232.18':445
- '88.##8.11.140':445
- '88.##8.207.62':139
- '88.##8.179.42':139
- '88.##8.127.132':139
- '88.##8.154.243':139
- '88.##8.12.66':139
- '88.##8.207.50':139
- '88.##8.145.58':139
- '88.##8.39.145':139
- '88.##8.122.16':139
- '88.##8.6.122':139
- '88.##8.221.94':139
- '88.##8.58.82':139
- '88.##8.14.43':139
- '88.##8.54.140':445
- '88.##8.140.128':445
- '88.##8.124.207':139
- '88.##8.140.128':139
- '88.##8.165.125':445
- '88.##8.164.191':445
- '88.##8.97.242':139
- '88.##8.42.109':139
- '88.##8.184.15':139
- '88.##8.121.86':139
- '88.##8.65.185':139
- '88.##8.33.71':139
- '88.##8.45.223':139
- '88.##8.195.20':139
- '88.##8.66.194':139
- '88.##8.16.90':139
- '88.##8.213.99':139
- '88.##8.242.6':139
- '88.##8.99.14':139
- '88.##8.46.154':139
- '88.##8.68.250':139
- '88.##8.113.33':139
- '88.##8.85.170':139
- '88.##8.181.18':139
- '88.##8.235.235':139
- '88.##8.11.140':139
- '88.##8.40.56':139
- '88.##8.125.220':139
- '88.##8.26.236':139
- '88.##8.197.104':139
- '88.##8.22.69':139
- '88.##8.42.230':139
- '88.##8.175.122':139
- '88.##8.19.204':139
- '88.##8.232.18':139
- '88.##8.83.136':139
- '88.##8.81.245':139
- '88.##8.213.45':139
- '88.##8.35.159':139
- '88.##8.162.157':445
- '88.##8.41.148':445
- '88.##8.82.96':445
- '88.##8.144.203':445
- '88.##8.194.242':445
- '88.##8.158.40':445
- '88.##8.194.189':445
- '88.##8.56.197':445
- '88.##8.85.15':445
- '88.##8.39.170':445
- '88.##8.145.39':445
- '88.##8.182.35':445
- '88.##8.203.0':445
- '88.##8.93.132':445
- '88.##8.178.63':445
- '88.##8.174.173':445
- '88.##8.24.172':445
- '88.##8.142.97':445
- '88.##8.189.98':445
- '88.##8.179.24':445
- '88.##8.126.127':445
- '88.##8.78.80':445
- '88.##8.171.46':445
- '88.##8.31.248':445
- '88.##8.43.217':445
- '88.##8.19.236':445
- '88.##8.100.140':445
- '88.##8.251.94':445
- '88.##8.53.251':445
- '88.##8.56.37':445
- '88.##8.225.86':445
- '88.##8.51.83':445
- '88.##8.154.120':139
- '88.##8.77.154':139
- '88.##8.80.177':139
- '88.##8.57.234':445
- '88.##8.145.75':445
- '88.##8.120.149':139
- '88.#88.8.52':445
- '88.##8.105.62':445
- '88.##8.78.14':445
- '88.##8.175.26':445
- '88.##8.216.47':445
- '88.##8.66.71':445
- '88.##8.202.223':445
- '88.##8.20.157':445
- '88.##8.92.107':445
- '88.##8.39.128':445
- '88.##8.107.44':445
- '88.##8.92.166':445
- '88.##8.189.179':445
- '88.##8.203.0':139
- '88.##8.144.203':139
- '88.##8.194.242':139
- '88.##8.179.24':139
- '88.##8.126.127':139
- '88.##8.78.80':139
- '88.##8.82.96':139
- '88.##8.39.170':139
- '88.##8.145.39':139
- '88.##8.158.40':139
- '88.##8.162.157':139
- '88.##8.41.148':139
- '88.##8.43.217':139
- '88.##8.35.159':445
- '88.##8.24.172':139
- '88.##8.142.97':139
- '88.##8.217.227':445
- '88.##8.35.68':445
- '88.##8.159.24':445
- '88.##8.174.173':139
- '88.##8.171.46':139
- '88.##8.31.248':139
- '88.##8.189.98':139
- '88.##8.93.132':139
- '88.##8.178.63':139
- '88.##8.182.35':139
- '88.#88.8.52':139
- '88.##8.56.37':139
- '88.##8.225.86':139
- '88.##8.20.157':139
- '88.##8.92.107':139
- '88.##8.39.128':139
- '88.##8.53.251':139
- '88.##8.57.234':139
- '88.##8.145.75':139
- '88.##8.51.83':139
- '88.##8.100.140':139
- '88.##8.251.94':139
- '88.##8.189.179':139
- '88.##8.19.236':139
- '88.##8.216.47':139
- '88.##8.66.71':139
- '88.##8.194.189':139
- '88.##8.56.197':139
- '88.##8.85.15':139
- '88.##8.175.26':139
- '88.##8.107.44':139
- '88.##8.92.166':139
- '88.##8.202.223':139
- '88.##8.105.62':139
- '88.##8.78.14':139
- '88.##8.58.177':445
- '88.##8.150.171':445
- '88.##8.151.252':445
- '88.##8.191.93':445
- '88.##8.138.190':445
- '88.##8.177.138':445
- '88.##8.87.239':445
- '88.#88.2.37':445
- '88.##8.85.37':445
- '88.##8.175.254':445
- '88.##8.20.80':445
- '88.##8.184.194':445
- '88.##8.96.232':445
- '88.##8.27.216':445
- '88.##8.211.55':445
- '88.##8.165.39':445
- '88.##8.200.67':445
- '88.##8.24.40':445
- '88.##8.145.199':445
- '88.##8.80.117':445
- '88.##8.197.80':445
- '88.##8.149.216':445
- '88.##8.40.145':445
- '88.##8.117.250':445
- '88.##8.29.68':445
- '88.##8.118.103':445
- '88.##8.246.188':445
- '88.##8.132.246':445
- '88.##8.30.99':445
- '88.#88.87.6':445
- '88.##8.159.202':445
- '88.##8.74.216':445
- '88.#88.9.5':445
- '88.##8.102.9':445
- '88.##8.83.144':445
- '88.##8.49.73':445
- '88.##8.36.251':445
- '88.#88.5.37':445
- '88.##8.167.234':445
- '88.##8.34.237':445
- '88.##8.123.69':445
- '88.##8.164.248':445
- '88.##8.209.57':445
- '88.##8.224.43':445
- '88.##8.60.27':445
- '88.##8.27.204':445
- '88.##8.64.21':445
- '88.##8.234.65':445
- '88.##8.64.128':445
- '88.#88.9.46':445
- '88.##8.204.8':445
- '88.##8.58.177':139
- '88.##8.150.171':139
- '88.##8.151.252':139
- '88.##8.191.93':139
- '88.##8.138.190':139
- '88.##8.177.138':139
- '88.#88.2.37':139
- '88.##8.87.239':139
- '88.##8.85.37':139
- '88.##8.175.254':139
- '88.##8.20.80':139
- '88.##8.184.194':139
- '88.##8.96.232':139
- '88.##8.29.68':139
- '88.##8.145.199':139
- '88.##8.24.40':139
- '88.##8.211.55':139
- '88.##8.27.216':139
- '88.##8.40.145':139
- '88.##8.80.117':139
- '88.##8.197.80':139
- '88.##8.149.216':139
- '88.##8.200.67':139
- '88.##8.165.39':139
- '88.##8.117.250':139
- '88.##8.118.103':139
- '88.##8.246.188':139
- '88.##8.132.246':139
- '88.##8.30.99':139
- '88.##8.159.202':139
- '88.#88.87.6':139
- '88.##8.74.216':139
- '88.#88.9.5':139
- '88.##8.102.9':139
- '88.##8.83.144':139
- '88.##8.49.73':139
- '88.##8.36.251':139
- '88.#88.5.37':139
- '88.##8.167.234':139
- '88.##8.34.237':139
- '88.##8.123.69':139
- '88.##8.164.248':139
- '88.##8.209.57':139
- '88.##8.224.43':139
- '88.##8.60.27':139
- '88.##8.27.204':139
- '88.##8.64.21':139
- '88.##8.234.65':139
- '88.##8.64.128':139
- '88.#88.9.46':139
- '88.##8.204.8':139
- '88.##8.58.177':9988
- '88.##8.183.77':445
- '88.##8.225.224':445
- '88.##8.187.138':445
- '88.##8.218.2':445
- '88.##8.195.14':445
- '88.#88.3.31':445
- '88.##8.83.221':445
- '88.##8.10.245':445
- '88.##8.35.95':445
- '88.##8.111.140':445
- '88.##8.168.66':445
- '88.##8.204.88':445
- '88.##8.153.107':445
- '88.##8.160.203':445
- '88.##8.19.63':445
- '88.##8.82.244':445
- '88.##8.98.51':139
- '88.##8.85.72':445
- '88.##8.62.110':445
- '88.##8.22.120':445
- '88.##8.87.22':445
- '88.##8.197.95':445
- '88.##8.185.82':445
- '88.##8.129.142':445
- '88.##8.227.84':445
- '88.#88.43.0':445
- '88.##8.19.225':445
- '88.##8.215.158':445
- '88.##8.249.117':445
- '88.##8.23.198':445
- '88.##8.76.91':445
- '88.##8.74.81':445
- '88.##8.165.125':139
- '88.##8.164.191':139
- '88.##8.54.140':139
- '88.##8.15.249':445
- '88.##8.252.232':445
- '88.##8.98.51':445
- '88.##8.55.96':445
- '88.##8.68.114':445
- '88.##8.67.47':445
- '88.#88.1.57':445
- '88.##8.167.88':445
- '88.##8.36.19':445
- '88.##8.143.240':445
- '88.##8.138.104':445
- '88.##8.103.138':445
- '88.##8.205.103':445
- '88.##8.166.91':445
- '88.##8.217.30':445
- '88.##8.75.170':445
- '88.##8.153.107':139
- '88.##8.218.2':139
- '88.##8.195.14':139
- '88.##8.22.120':139
- '88.##8.87.22':139
- '88.##8.197.95':139
- '88.##8.187.138':139
- '88.##8.111.140':139
- '88.##8.168.66':139
- '88.#88.3.31':139
- '88.##8.183.77':139
- '88.##8.225.224':139
- '88.##8.227.84':139
- '88.##8.36.251':9988
- '88.##8.83.144':9988
- '88.##8.85.72':139
- '88.##8.200.67':9988
- '88.##8.175.254':9988
- '88.##8.224.43':9988
- '88.##8.82.244':139
- '88.##8.185.82':139
- '88.##8.129.142':139
- '88.##8.62.110':139
- '88.##8.160.203':139
- '88.##8.19.63':139
- '88.##8.204.88':139
- '88.##8.55.96':139
- '88.##8.23.198':139
- '88.##8.76.91':139
- '88.##8.138.104':139
- '88.##8.103.138':139
- '88.##8.205.103':139
- '88.##8.249.117':139
- '88.##8.15.249':139
- '88.##8.252.232':139
- '88.##8.74.81':139
- '88.##8.19.225':139
- '88.##8.215.158':139
- '88.##8.75.170':139
- '88.#88.43.0':139
- '88.##8.167.88':139
- '88.##8.36.19':139
- '88.##8.83.221':139
- '88.##8.10.245':139
- '88.##8.35.95':139
- '88.#88.1.57':139
- '88.##8.166.91':139
- '88.##8.217.30':139
- '88.##8.143.240':139
- '88.##8.68.114':139
- '88.##8.67.47':139