Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '87.##.57.111':139
- '87.##.203.208':139
- '87.#7.56.81':139
- '87.#7.52.64':139
- '87.##.52.215':139
- '87.##.211.196':445
- '87.##.195.253':445
- '87.#7.18.8':445
- '87.##.173.17':445
- '87.##.129.248':139
- '87.##.186.190':139
- '87.#7.8.186':139
- '87.##.179.126':139
- '87.#7.0.211':139
- '87.##.228.186':139
- '87.##.115.58':139
- '87.##.46.143':139
- '87.##.133.149':139
- '87.##.57.226':139
- '87.##.25.196':445
- '87.#7.4.229':445
- '87.##.51.177':445
- '87.##.47.159':445
- '87.##.144.47':445
- '87.#7.53.51':445
- '87.##.61.191':445
- '87.#7.72.58':445
- '87.##.231.169':445
- '87.##.105.144':445
- '87.#7.59.25':445
- '87.##.206.197':445
- '87.##.132.239':445
- '87.##.97.219':445
- '87.##.29.151':445
- '87.##.22.231':445
- '87.##.113.196':445
- '87.#7.24.63':445
- '87.##.128.219':445
- '87.##.175.95':445
- '87.##.22.231':139
- '87.##.128.219':139
- '87.##.206.197':139
- '87.##.132.239':139
- '87.##.175.95':139
- '87.#7.59.25':139
- '87.##.47.159':139
- '87.##.113.196':139
- '87.#7.24.63':139
- '87.##.29.151':139
- '87.#7.8.93':445
- '87.#7.18.8':139
- '87.##.134.57':445
- '87.#7.93.74':445
- '87.##.173.17':139
- '87.##.25.196':139
- '87.##.97.219':139
- '87.##.211.196':139
- '87.##.195.253':139
- '87.##.144.47':139
- '87.##.225.168':139
- '87.##.88.225':139
- '87.##.144.236':139
- '87.##.165.69':139
- '87.#7.0.206':139
- '87.##.35.108':139
- '87.##.166.143':139
- '87.##.179.232':139
- '87.##.123.48':139
- '87.##.196.117':139
- '87.#7.53.51':139
- '87.##.231.169':139
- '87.#7.4.229':139
- '87.##.51.177':139
- '87.##.105.144':139
- '87.##.83.164':139
- '87.#7.94.74':139
- '87.##.61.191':139
- '87.#7.72.58':139
- '87.##.253.37':139
- '87.##.188.77':139
- '87.##.184.178':139
- '87.#7.1.234':139
- '87.##.40.120':139
- '87.##.115.63':139
- '87.##.171.96':139
- '87.##.99.209':139
- '87.##.168.28':139
- '87.##.128.86':139
- '87.##.250.15':139
- '87.##.242.158':139
- '87.##.205.198':139
- '87.#7.98.60':139
- '87.##.212.248':139
- '87.#7.10.40':139
- '87.##.171.166':139
- '87.##.237.53':139
- '87.#7.22.90':139
- '87.##.17.135':139
- '87.##.24.146':139
- '87.##.10.109':139
- '87.#7.5.238':139
- '87.#7.132.2':139
- '87.##.54.179':139
- '87.##.236.194':139
- '87.##.229.35':139
- '87.##.114.55':139
- '87.#7.74.45':139
- '87.##.82.190':139
- '87.#7.52.34':139
- '87.##.207.137':139
- '87.##.214.171':139
- '87.##.128.132':139
- '87.#7.6.13':139
- '87.##.132.223':139
- '87.##.181.49':139
- '87.#7.17.69':139
- '87.##.142.100':139
- '87.##.179.126':445
- '87.#7.0.211':445
- '87.##.35.108':445
- '87.##.166.143':445
- '87.##.186.190':445
- '87.##.133.149':445
- '87.##.57.226':445
- '87.#7.8.186':445
- '87.##.228.186':445
- '87.##.123.48':445
- '87.##.196.117':445
- '87.##.144.236':445
- '87.##.83.164':445
- '87.#7.94.74':445
- '87.##.165.69':445
- '87.#7.0.206':445
- '87.##.179.232':445
- '87.##.225.168':445
- '87.##.88.225':445
- '87.##.115.58':445
- '87.##.222.126':139
- '87.##.101.46':139
- '87.#7.60.22':139
- '87.##.143.61':139
- '87.##.215.71':139
- '87.##.46.198':139
- '87.##.14.181':139
- '87.##.87.186':139
- '87.#7.86.87':139
- '87.##.151.153':139
- '87.#7.56.81':445
- '87.#7.52.64':445
- '87.##.46.143':445
- '87.##.129.248':445
- '87.##.57.111':445
- '87.##.250.140':139
- '87.##.112.29':139
- '87.##.203.208':445
- '87.##.52.215':445
- '87.##.53.115':445
- '87.##.167.115':445
- '87.##.15.214':139
- '87.##.61.233':139
- '87.#7.74.46':445
- '87.##.121.30':445
- '87.##.184.121':445
- '87.##.250.147':445
- '87.#7.5.158':445
- '87.##.33.121':139
- '87.##.147.98':139
- '87.##.199.57':139
- '87.##.98.223':139
- '87.##.117.220':139
- '87.##.31.173':139
- '87.##.95.112':139
- '87.##.222.61':139
- '87.##.24.187':139
- '87.##.254.24':139
- '87.##.159.79':445
- '87.##.107.33':445
- '87.#7.27.34':445
- '87.##.160.203':445
- '87.##.106.187':445
- '87.##.50.152':445
- '87.##.204.134':445
- '87.##.141.56':445
- '87.##.183.171':445
- '87.##.55.184':445
- '87.##.180.133':445
- '87.#7.0.161':445
- '87.##.250.191':445
- '87.##.108.60':445
- '87.##.48.208':445
- '87.##.35.202':445
- '87.##.238.20':445
- '87.##.45.238':445
- '87.##.214.35':445
- '87.##.182.167':445
- '87.##.35.202':139
- '87.##.214.35':139
- '87.#7.0.161':139
- '87.##.250.191':139
- '87.##.182.167':139
- '87.##.180.133':139
- '87.##.160.203':139
- '87.##.238.20':139
- '87.##.45.238':139
- '87.##.48.208':139
- '87.#7.5.158':139
- '87.##.53.115':139
- '87.##.250.147':139
- '87.#7.74.46':139
- '87.##.167.115':139
- '87.##.159.79':139
- '87.##.108.60':139
- '87.##.121.30':139
- '87.##.184.121':139
- '87.##.106.187':139
- '87.#7.6.154':139
- '87.##.232.139':139
- '87.#7.5.106':139
- '87.#7.28.96':139
- '87.#7.4.193':139
- '87.##.103.246':139
- '87.##.223.103':139
- '87.##.156.150':139
- '87.#7.55.65':139
- '87.##.162.182':139
- '87.##.50.152':139
- '87.##.183.171':139
- '87.##.107.33':139
- '87.#7.27.34':139
- '87.##.55.184':139
- '87.##.144.215':139
- '87.#7.48.46':139
- '87.##.204.134':139
- '87.##.141.56':139
- '87.##.137.131':139
- '87.##.36.224':139
- '87.##.253.30':139
- '87.#7.20.33':139
- '87.##.124.37':139
- '87.##.22.225':139
- '87.##.134.57':139
- '87.##.29.237':139
- '87.##.90.218':139
- '87.#7.187.5':139
- '87.##.228.47':139
- '87.#7.85.98':139
- '87.##.75.141':139
- '87.##.134.130':139
- '87.##.238.16':139
- '87.##.107.31':139
- '87.##.209.17':139
- '87.#7.62.14':139
- '87.#7.23.86':139
- '87.#7.93.74':139
- '87.#7.20.33':445
- '87.##.137.131':445
- '87.#7.187.5':445
- '87.##.253.30':445
- '87.##.36.224':445
- '87.##.90.218':445
- '87.##.22.225':445
- '87.##.124.37':445
- '87.##.29.237':445
- '87.##.209.17':445
- '87.##.134.130':445
- '87.##.228.47':445
- '87.#7.8.93':139
- '87.##.75.141':445
- '87.#7.85.98':445
- '87.#7.23.86':445
- '87.##.107.31':445
- '87.##.238.16':445
- '87.#7.62.14':445
- '87.##.98.223':445
- '87.##.117.220':445
- '87.##.103.246':445
- '87.##.223.103':445
- '87.##.147.98':445
- '87.##.24.187':445
- '87.##.254.24':445
- '87.##.199.57':445
- '87.##.31.173':445
- '87.#7.55.65':445
- '87.##.162.182':445
- '87.#7.5.106':445
- '87.##.144.215':445
- '87.#7.48.46':445
- '87.#7.28.96':445
- '87.#7.4.193':445
- '87.##.156.150':445
- '87.#7.6.154':445
- '87.##.232.139':445
- '87.##.95.112':445
- '87.##.183.171':9988
- '87.##.55.184':9988
- '87.##.106.187':9988
- '87.##.107.33':9988
- '87.##.141.56':9988
- '87.##.31.173':9988
- '87.##.232.139':9988
- '87.##.162.182':9988
- '87.#7.28.96':9988
- '87.##.160.203':9988
- '87.##.15.214':445
- '87.##.61.233':445
- '87.##.222.61':445
- '87.##.33.121':445
- '87.#7.74.46':9988
- '87.##.48.208':9988
- '87.##.35.202':9988
- '87.##.159.79':9988
- '87.##.108.60':9988