Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.##4.93.175':445
- '82.##4.20.154':445
- '82.##4.238.40':445
- '82.##4.188.19':445
- '82.##4.93.132':445
- '82.##4.154.65':445
- '82.##4.52.97':445
- '82.##4.238.134':445
- '82.##4.178.126':445
- '82.##4.25.163':445
- '82.##4.69.25':445
- '82.##4.114.85':139
- '82.##4.157.32':139
- '82.##4.92.43':445
- '82.##4.61.84':445
- '82.#24.41.8':445
- '82.##4.8.239':445
- '82.##4.250.96':445
- '82.##4.225.25':445
- '82.##4.90.225':445
- '82.##4.187.58':445
- '82.##4.37.122':445
- '82.##4.106.75':445
- '82.##4.92.139':445
- '82.##4.201.42':445
- '82.##4.114.89':445
- '82.##4.181.117':445
- '82.##4.187.20':445
- '82.##4.205.178':445
- '82.##4.46.52':445
- '82.##4.112.45':445
- '82.##4.131.214':445
- '82.##4.53.151':445
- '82.##4.59.28':445
- '82.##4.132.243':445
- '82.##4.154.6':445
- '82.##4.59.28':139
- '82.##4.187.58':139
- '82.##4.154.6':139
- '82.##4.53.151':139
- '82.##4.37.122':139
- '82.##4.106.75':139
- '82.##4.114.89':139
- '82.##4.225.25':139
- '82.##4.90.225':139
- '82.##4.52.97':139
- '82.##4.46.52':139
- '82.##4.178.126':139
- '82.##4.154.65':139
- '82.##4.112.45':139
- '82.##4.131.214':139
- '82.##4.132.243':139
- '82.##4.187.20':139
- '82.##4.205.178':139
- '82.##4.76.105':139
- '82.##4.111.76':139
- '82.##4.0.208':139
- '82.##4.34.117':139
- '82.##4.243.22':139
- '82.##4.131.119':139
- '82.##4.85.131':139
- '82.##4.141.58':139
- '82.##4.164.165':139
- '82.##4.201.42':139
- '82.#24.0.7':139
- '82.##4.181.117':139
- '82.##4.92.139':139
- '82.##4.18.103':139
- '82.##4.240.82':139
- '82.##4.202.210':139
- '82.##4.138.215':139
- '82.##4.22.111':139
- '82.##4.129.194':139
- '82.##4.156.218':139
- '82.#24.0.6':139
- '82.##4.113.191':139
- '82.##4.212.156':139
- '82.##4.184.43':139
- '82.##4.114.194':139
- '82.##4.24.124':139
- '82.##4.43.145':139
- '82.##4.58.129':139
- '82.##4.42.121':139
- '82.##4.233.229':139
- '82.##4.20.156':139
- '82.##4.235.44':139
- '82.##4.49.178':139
- '82.##4.31.49':139
- '82.##4.210.77':139
- '82.##4.155.103':139
- '82.##4.77.134':139
- '82.##4.103.79':139
- '82.##4.249.228':139
- '82.##4.15.151':139
- '82.##4.220.108':139
- '82.##4.116.245':445
- '82.#24.16.3':445
- '82.##4.53.19':445
- '82.##4.12.55':445
- '82.##4.62.50':139
- '82.##4.186.185':139
- '82.##4.157.166':139
- '82.##4.153.136':139
- '82.#24.4.79':139
- '82.##4.46.43':139
- '82.##4.4.105':139
- '82.##4.140.4':139
- '82.##4.63.226':139
- '82.##4.141.58':445
- '82.##4.164.165':445
- '82.##4.111.76':445
- '82.##4.243.22':445
- '82.##4.131.119':445
- '82.##4.157.32':445
- '82.##4.53.19':139
- '82.##4.85.131':445
- '82.##4.114.85':445
- '82.##4.138.215':445
- '82.##4.22.111':445
- '82.#24.0.7':445
- '82.##4.18.103':445
- '82.##4.240.82':445
- '82.##4.34.117':445
- '82.##4.76.105':445
- '82.##4.202.210':445
- '82.##4.0.208':445
- '82.##4.51.130':139
- '82.##4.231.56':139
- '82.##4.79.52':139
- '82.##4.96.177':139
- '82.##4.62.66':139
- '82.#24.6.34':139
- '82.##4.204.138':139
- '82.##4.198.177':139
- '82.##4.57.155':139
- '82.#24.16.3':139
- '82.##4.15.166':139
- '82.##4.12.55':139
- '82.##4.116.245':139
- '82.##4.52.172':139
- '82.##4.171.74':139
- '82.##4.108.3':139
- '82.##4.66.164':139
- '82.##4.75.149':139
- '82.##4.238.134':139
- '82.##4.6.115':139
- '82.##4.12.12':139
- '82.##4.241.221':139
- '82.##4.174.41':139
- '82.##4.200.246':139
- '82.##4.19.184':445
- '82.##4.58.143':445
- '82.##4.173.207':139
- '82.##4.15.122':445
- '82.##4.31.127':139
- '82.##4.107.88':139
- '82.##4.90.49':139
- '82.##4.1.206':139
- '82.##4.232.91':139
- '82.##4.229.128':139
- '82.##4.55.36':139
- '82.##4.45.107':139
- '82.##4.80.16':139
- '82.##4.103.108':445
- '82.##4.137.110':445
- '82.##4.11.238':445
- '82.##4.106.226':445
- '82.##4.92.197':445
- '82.##4.144.15':445
- '82.##4.250.42':445
- '82.##4.87.165':445
- '82.##4.15.50':445
- '82.##4.62.79':445
- '82.##4.34.49':445
- '82.##4.13.13':445
- '82.##4.4.148':445
- '82.##4.45.252':445
- '82.##4.120.164':445
- '82.##4.88.158':445
- '82.##4.158.4':445
- '82.##4.48.224':445
- '82.##4.88.158':139
- '82.##4.11.238':139
- '82.##4.48.224':139
- '82.##4.120.164':139
- '82.##4.106.226':139
- '82.##4.92.197':139
- '82.##4.87.165':139
- '82.##4.103.108':139
- '82.##4.137.110':139
- '82.##4.15.122':139
- '82.##4.19.184':139
- '82.##4.13.13':139
- '82.##4.4.148':139
- '82.##4.58.143':139
- '82.##4.45.252':139
- '82.##4.158.4':139
- '82.##4.62.79':139
- '82.##4.34.49':139
- '82.##4.50.220':139
- '82.##4.42.67':139
- '82.##4.241.80':139
- '82.##4.33.123':139
- '82.##4.49.161':139
- '82.##4.74.218':139
- '82.##4.87.154':139
- '82.##4.124.32':139
- '82.##4.162.124':139
- '82.##4.250.42':139
- '82.#24.54.1':139
- '82.##4.15.50':139
- '82.##4.144.15':139
- '82.##4.13.54':139
- '82.##4.44.153':139
- '82.##4.81.77':139
- '82.##4.189.12':139
- '82.##4.91.188':139
- '82.##4.162.124':9988
- '82.##4.74.218':9988
- '82.##4.42.67':9988
- '82.##4.49.161':9988
- '82.##4.87.154':9988
- '82.##4.241.221':9988
- '82.##4.12.12':9988
- '82.##4.45.107':9988
- '82.##4.229.128':9988
- '82.##4.88.158':9988
- '82.##4.106.226':9988
- '82.##4.48.224':9988
- '82.##4.120.164':9988
- '82.##4.137.110':9988
- '82.##4.189.12':9988
- '82.##4.44.153':9988
- '82.##4.15.50':9988
- '82.#24.54.1':9988
- '82.##4.61.84':139
- '82.#24.41.8':139
- '82.##4.8.239':139
- '82.##4.250.96':139
- '82.##4.238.40':139
- '82.##4.20.154':139
- '82.##4.93.132':139
- '82.##4.188.19':139
- '82.##4.93.175':139
- '82.##4.31.119':139
- '82.##4.63.151':445
- '82.##4.63.151':139
- '82.##4.111.163':139
- '82.##4.111.163':445
- '82.##4.69.25':139
- '82.##4.92.43':139
- '82.##4.31.119':445
- '82.##4.25.163':139
- '82.##4.124.32':445
- '82.##4.162.124':445
- '82.##4.42.67':445
- '82.##4.49.161':445
- '82.##4.74.218':445
- '82.##4.1.206':445
- '82.##4.31.127':445
- '82.##4.87.154':445
- '82.##4.90.49':445
- '82.##4.189.12':445
- '82.##4.91.188':445
- '82.#24.54.1':445
- '82.##4.13.54':445
- '82.##4.44.153':445
- '82.##4.33.123':445
- '82.##4.50.220':445
- '82.##4.81.77':445
- '82.##4.241.80':445
- '82.##4.173.207':445
- '82.##4.58.143':9988
- '82.##4.12.12':445
- '82.##4.200.246':445
- '82.##4.4.148':9988
- '82.##4.34.49':9988
- '82.##4.158.4':9988
- '82.##4.19.184':9988
- '82.##4.45.252':9988
- '82.##4.45.107':445
- '82.##4.80.16':445
- '82.##4.107.88':445
- '82.##4.232.91':445
- '82.##4.229.128':445
- '82.##4.174.41':445
- '82.##4.6.115':445
- '82.##4.55.36':445
- '82.##4.241.221':445