Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '65.##8.93.208':139
- '65.##8.83.246':139
- '65.##8.11.181':139
- '65.##8.110.109':139
- '65.##8.224.65':139
- '65.##8.2.152':139
- '65.##8.133.64':139
- '65.##8.56.29':139
- '65.##8.100.137':139
- '65.##8.229.249':139
- '65.##8.234.251':139
- '65.##8.242.49':139
- '65.##8.5.195':139
- '65.##8.36.226':139
- '65.##8.38.203':139
- '65.##8.227.113':139
- '65.##8.129.123':139
- '65.##8.19.244':139
- '65.##8.47.67':139
- '65.#08.1.69':139
- '65.##8.166.73':139
- '65.##8.216.49':445
- '65.##8.36.226':445
- '65.##8.80.136':445
- '65.##8.61.53':445
- '65.##8.99.213':445
- '65.##8.242.49':445
- '65.##8.47.67':445
- '65.##8.234.251':445
- '65.##8.38.203':445
- '65.##8.5.195':445
- '65.##8.152.68':445
- '65.##8.81.186':445
- '65.##8.68.172':445
- '65.##8.183.216':139
- '65.##8.242.211':139
- '65.##8.80.103':445
- '65.##8.152.71':445
- '65.##8.71.238':445
- '65.##8.191.96':445
- '65.##8.32.154':445
- '65.##8.216.49':139
- '65.##8.88.34':139
- '65.##8.181.99':445
- '65.##8.165.20':139
- '65.##8.55.185':139
- '65.##8.139.55':139
- '65.##8.82.222':445
- '65.##8.215.171':445
- '65.##8.251.52':445
- '65.##8.204.78':445
- '65.##8.105.210':445
- '65.##8.215.171':139
- '65.##8.209.158':139
- '65.##8.82.222':139
- '65.##8.105.210':139
- '65.##8.251.52':139
- '65.##8.231.237':139
- '65.##8.185.231':139
- '65.##8.105.25':139
- '65.##8.98.210':139
- '65.##8.166.98':139
- '65.##8.209.158':445
- '65.##8.32.154':139
- '65.##8.71.238':139
- '65.##8.191.96':139
- '65.##8.152.68':139
- '65.##8.81.186':139
- '65.##8.99.213':139
- '65.##8.80.136':139
- '65.##8.61.53':139
- '65.##8.80.103':139
- '65.##8.152.71':139
- '65.##8.231.237':445
- '65.##8.185.231':445
- '65.##8.105.25':445
- '65.##8.98.210':445
- '65.##8.166.98':445
- '65.##8.88.34':445
- '65.##8.68.172':139
- '65.##8.165.20':445
- '65.##8.55.185':445
- '65.##8.139.55':445
- '65.#08.1.69':445
- '65.##8.162.107':139
- '65.##8.101.23':139
- '65.##8.47.178':139
- '65.##8.199.161':139
- '65.##8.34.69':139
- '65.##8.28.241':139
- '65.##8.19.190':139
- '65.##8.182.83':139
- '65.##8.94.209':139
- '65.##8.103.224':139
- '65.##8.20.224':445
- '65.##8.31.179':445
- '65.#08.7.42':445
- '65.##8.181.195':445
- '65.##8.10.21':445
- '65.##8.209.10':139
- '65.##8.161.209':139
- '65.##8.207.240':139
- '65.##8.89.93':445
- '65.##8.88.213':139
- '65.##8.208.130':139
- '65.##8.89.56':139
- '65.##8.175.12':139
- '65.##8.212.207':139
- '65.##8.197.6':139
- '65.#08.38.1':139
- '65.#08.0.8':139
- '65.##8.48.188':139
- '65.##8.211.25':139
- '65.##8.137.175':139
- '65.##8.160.137':139
- '65.##8.171.244':139
- '65.##8.110.171':139
- '65.##8.244.177':139
- '65.##8.19.170':139
- '65.##8.178.152':139
- '65.##8.243.209':139
- '65.##8.248.111':139
- '65.##8.6.135':139
- '65.#08.2.61':139
- '65.##8.189.13':139
- '65.##8.90.178':445
- '65.##8.166.73':445
- '65.##8.183.216':445
- '65.##8.133.64':445
- '65.##8.56.29':445
- '65.##8.2.152':445
- '65.##8.110.8':139
- '65.##8.246.110':139
- '65.##8.134.103':139
- '65.##8.242.211':445
- '65.##8.47.183':139
- '65.##8.110.109':445
- '65.##8.224.65':445
- '65.##8.129.123':445
- '65.##8.19.244':445
- '65.##8.227.113':445
- '65.##8.100.137':445
- '65.##8.229.249':445
- '65.##8.83.246':445
- '65.##8.11.181':445
- '65.##8.93.208':445
- '65.##8.225.246':139
- '65.##8.110.8':445
- '65.##8.246.110':445
- '65.##8.134.103':445
- '65.##8.89.93':139
- '65.##8.47.183':445
- '65.##8.189.115':445
- '65.##8.44.31':445
- '65.##8.183.233':445
- '65.##8.225.246':445
- '65.##8.83.163':445
- '65.##8.44.31':139
- '65.##8.90.178':139
- '65.##8.189.115':139
- '65.##8.83.163':139
- '65.##8.183.233':139
- '65.##8.20.224':139
- '65.##8.31.179':139
- '65.#08.7.42':139
- '65.##8.181.195':139
- '65.##8.10.21':139
- '65.##8.188.169':445
- '65.##8.24.142':445
- '65.##8.18.108':445
- '65.##8.18.175':445
- '65.##8.116.0':445
- '65.##8.193.97':445
- '65.##8.137.191':445
- '65.##8.36.167':445
- '65.##8.190.131':445
- '65.##8.163.143':445
- '65.##8.161.229':139
- '65.##8.63.254':139
- '65.##8.229.9':139
- '65.##8.148.57':139
- '65.##8.14.68':139
- '65.##8.243.42':139
- '65.##8.63.19':445
- '65.##8.85.167':139
- '65.##8.53.229':139
- '65.##8.167.53':139
- '65.##8.76.131':445
- '65.##8.36.173':445
- '65.##8.104.195':445
- '65.##8.9.106':445
- '65.##8.46.58':445
- '65.##8.167.11':445
- '65.##8.123.24':445
- '65.##8.175.68':445
- '65.#08.9.12':445
- '65.##8.66.61':445
- '65.#08.22.1':445
- '65.##8.2.191':445
- '65.##8.76.107':445
- '65.##8.211.78':445
- '65.##8.97.23':445
- '65.##8.27.51':445
- '65.##8.153.124':445
- '65.##8.25.89':445
- '65.##8.146.204':445
- '65.##8.196.188':445
- '65.##8.63.26':445
- '65.##8.156.198':139
- '65.##8.27.51':139
- '65.##8.211.78':139
- '65.##8.97.23':139
- '65.##8.137.191':139
- '65.##8.76.131':139
- '65.##8.63.26':139
- '65.##8.146.204':139
- '65.##8.196.188':139
- '65.##8.2.191':139
- '65.##8.76.107':139
- '65.##8.18.108':139
- '65.##8.188.169':139
- '65.##8.116.0':139
- '65.##8.63.19':139
- '65.##8.18.175':139
- '65.##8.36.167':139
- '65.##8.193.97':139
- '65.##8.163.143':139
- '65.##8.24.142':139
- '65.##8.190.131':139
- '65.##8.167.11':139
- '65.##8.72.179':139
- '65.##8.52.73':139
- '65.##8.239.1':139
- '65.##8.175.68':139
- '65.##8.112.23':139
- '65.##8.41.252':139
- '65.##8.199.42':139
- '65.##8.44.152':139
- '65.##8.148.125':139
- '65.##8.2.113':139
- '65.##8.25.89':139
- '65.##8.36.173':139
- '65.##8.153.124':139
- '65.##8.46.58':139
- '65.##8.9.106':139
- '65.#08.9.12':139
- '65.##8.123.24':139
- '65.#08.22.1':139
- '65.##8.104.195':139
- '65.##8.66.61':139
- '65.##8.112.23':445
- '65.##8.162.140':139
- '65.##8.128.76':445
- '65.##8.253.21':139
- '65.##8.106.252':139
- '65.##8.103.128':139
- '65.##8.31.135':445
- '65.##8.14.230':445
- '65.##8.241.223':445
- '65.##8.111.250':445
- '65.##8.42.236':445
- '65.##8.132.220':139
- '65.##8.129.10':139
- '65.##8.220.149':139
- '65.##8.25.107':139
- '65.##8.51.74':139
- '65.##8.240.224':139
- '65.##8.25.44':139
- '65.##8.67.94':139
- '65.##8.224.96':139
- '65.##8.39.171':139
- '65.##8.67.36':445
- '65.##8.25.44':445
- '65.##8.106.252':445
- '65.##8.240.224':445
- '65.##8.39.171':445
- '65.##8.67.94':445
- '65.##8.181.99':139
- '65.##8.204.78':139
- '65.##8.162.140':445
- '65.##8.103.128':445
- '65.##8.253.21':445
- '65.##8.24.39':445
- '65.##8.25.107':445
- '65.##8.94.169':445
- '65.##8.220.208':445
- '65.##8.168.154':445
- '65.##8.129.10':445
- '65.##8.224.96':445
- '65.##8.132.220':445
- '65.##8.51.74':445
- '65.##8.220.149':445
- '65.##8.24.39':139
- '65.##8.63.254':445
- '65.##8.53.229':445
- '65.##8.161.229':445
- '65.##8.14.68':445
- '65.##8.229.9':445
- '65.##8.188.169':9988
- '65.##8.18.175':9988
- '65.##8.243.42':445
- '65.##8.167.53':445
- '65.##8.85.167':445
- '65.##8.148.125':445
- '65.##8.2.113':445
- '65.##8.52.73':445
- '65.##8.239.1':445
- '65.##8.72.179':445
- '65.##8.156.198':445
- '65.##8.148.57':445
- '65.##8.199.42':445
- '65.##8.44.152':445
- '65.##8.41.252':445
- '65.##8.163.143':9988
- '65.##8.241.223':139
- '65.##8.31.135':139
- '65.##8.42.236':139
- '65.##8.128.76':139
- '65.##8.111.250':139
- '65.##8.168.154':139
- '65.##8.94.169':139
- '65.##8.220.208':139
- '65.##8.14.230':139
- '65.##8.67.36':139
- '65.##8.153.124':9988
- '65.##8.104.195':9988
- '65.##8.63.26':9988
- '65.##8.193.97':9988
- '65.##8.97.23':9988
- '65.##8.41.252':9988
- '65.##8.199.42':9988
- '65.##8.72.179':9988
- '65.#08.22.1':9988
- '65.##8.112.23':9988