Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '82.##7.156.172':139
- '82.##7.218.23':139
- '82.##7.198.91':139
- '82.##7.27.50':139
- '82.##7.231.214':139
- '82.##7.153.45':139
- '82.##7.195.117':139
- '82.##7.113.222':139
- '82.##7.33.29':139
- '82.##7.15.19':139
- '82.##7.56.175':139
- '82.##7.132.106':445
- '82.##7.71.76':445
- '82.##7.76.137':445
- '82.##7.23.19':445
- '82.##7.247.121':445
- '82.##7.129.122':445
- '82.##7.44.95':445
- '82.##7.98.171':445
- '82.##7.207.113':445
- '82.##7.22.241':445
- '82.##7.195.117':445
- '82.##7.195.9':445
- '82.##7.153.45':445
- '82.##7.15.19':445
- '82.##7.113.222':445
- '82.##7.68.74':139
- '82.##7.6.111':139
- '82.##7.217.213':445
- '82.##7.20.107':445
- '82.##7.151.20':445
- '82.##7.33.29':445
- '82.##7.217.213':139
- '82.##7.56.175':445
- '82.##7.151.20':139
- '82.##7.195.9':139
- '82.##7.20.107':139
- '82.##7.156.172':445
- '82.##7.218.23':445
- '82.##7.198.91':445
- '82.##7.27.50':445
- '82.##7.231.214':445
- '82.##7.129.122':139
- '82.##7.44.95':139
- '82.##7.98.171':139
- '82.##7.207.113':139
- '82.##7.22.241':139
- '82.##7.196.227':445
- '82.##7.228.196':445
- '82.##7.227.127':445
- '82.##7.26.147':445
- '82.##7.127.144':445
- '82.##7.71.76':139
- '82.##7.93.40':139
- '82.##7.181.227':139
- '82.##7.69.204':139
- '82.##7.66.219':139
- '82.##7.121.232':139
- '82.##7.76.137':139
- '82.##7.132.106':139
- '82.##7.247.121':139
- '82.##7.66.102':139
- '82.##7.23.19':139
- '82.##7.86.97':445
- '82.##7.66.219':445
- '82.##7.101.87':445
- '82.##7.77.36':445
- '82.##7.77.211':445
- '82.##7.181.227':445
- '82.##7.66.102':445
- '82.##7.93.40':445
- '82.##7.121.232':445
- '82.##7.69.204':445
- '82.##7.213.159':445
- '82.##7.143.62':445
- '82.##7.168.195':445
- '82.##7.144.60':445
- '82.##7.174.162':445
- '82.##7.11.181':445
- '82.##7.193.198':445
- '82.##7.159.144':445
- '82.##7.43.254':445
- '82.##7.61.210':445
- '82.#47.9.61':445
- '82.##7.204.13':139
- '82.##7.101.43':445
- '82.##7.141.49':445
- '82.##7.19.46':445
- '82.##7.118.207':445
- '82.##7.104.66':445
- '82.##7.243.9':445
- '82.##7.192.180':445
- '82.##7.102.72':445
- '82.##7.226.77':445
- '82.##7.176.56':445
- '82.##7.213.254':445
- '82.##7.0.162':445
- '82.##7.110.11':445
- '82.##7.34.217':445
- '82.##7.113.198':445
- '82.##7.233.173':445
- '82.##7.233.108':445
- '82.##7.126.198':445
- '82.##7.108.167':445
- '82.##7.41.204':445
- '82.##7.101.116':445
- '82.##7.27.123':139
- '82.##7.135.185':139
- '82.##7.60.78':139
- '82.##7.105.150':139
- '82.##7.84.43':139
- '82.##7.228.88':139
- '82.##7.161.205':139
- '82.##7.152.44':139
- '82.##7.31.84':139
- '82.##7.38.54':139
- '82.##7.74.68':139
- '82.#47.9.79':445
- '82.##7.155.6':445
- '82.##7.81.30':445
- '82.##7.42.14':445
- '82.##7.230.3':445
- '82.##7.156.18':139
- '82.##7.250.165':139
- '82.##7.106.212':139
- '82.##7.19.19':445
- '82.##7.227.10':139
- '82.##7.233.108':139
- '82.##7.126.198':139
- '82.##7.108.167':139
- '82.##7.41.204':139
- '82.##7.101.116':139
- '82.##7.19.46':139
- '82.##7.101.43':139
- '82.##7.104.66':139
- '82.##7.213.254':139
- '82.##7.118.207':139
- '82.##7.110.11':139
- '82.##7.27.106':139
- '82.##7.187.64':139
- '82.##7.73.11':139
- '82.##7.64.76':139
- '82.##7.13.86':139
- '82.##7.34.217':139
- '82.##7.0.162':139
- '82.##7.233.173':139
- '82.##7.233.73':139
- '82.##7.113.198':139
- '82.##7.204.13':445
- '82.##7.64.76':445
- '82.##7.6.111':445
- '82.##7.19.19':139
- '82.##7.68.74':445
- '82.##7.187.64':445
- '82.##7.233.73':445
- '82.##7.27.106':445
- '82.##7.13.86':445
- '82.##7.73.11':445
- '82.##7.155.6':139
- '82.##7.102.72':139
- '82.##7.243.9':139
- '82.##7.176.56':139
- '82.##7.141.49':139
- '82.##7.226.77':139
- '82.##7.81.30':139
- '82.#47.9.79':139
- '82.##7.230.3':139
- '82.##7.192.180':139
- '82.##7.42.14':139
- '82.##7.86.97':139
- '82.##7.76.200':445
- '82.##7.23.116':445
- '82.##7.152.127':445
- '82.##7.215.225':445
- '82.##7.112.56':445
- '82.##7.118.209':445
- '82.##7.219.240':445
- '82.##7.214.146':445
- '82.##7.71.208':445
- '82.##7.80.71':445
- '82.##7.33.61':445
- '82.##7.134.217':139
- '82.##7.163.165':139
- '82.##7.93.45':139
- '82.##7.180.192':139
- '82.##7.50.185':139
- '82.#47.39.4':139
- '82.##7.80.248':445
- '82.##7.203.228':139
- '82.##7.101.72':139
- '82.##7.8.227':139
- '82.##7.159.193':445
- '82.##7.93.159':445
- '82.##7.103.151':445
- '82.##7.249.117':445
- '82.##7.203.249':445
- '82.##7.80.91':445
- '82.##7.91.225':445
- '82.##7.87.232':445
- '82.##7.174.93':445
- '82.##7.169.173':445
- '82.##7.117.57':445
- '82.##7.55.210':445
- '82.##7.8.184':445
- '82.#47.72.7':445
- '82.##7.180.54':445
- '82.##7.233.38':445
- '82.##7.172.96':445
- '82.##7.26.85':445
- '82.##7.10.77':445
- '82.##7.202.65':445
- '82.##7.161.220':445
- '82.#47.72.7':139
- '82.##7.55.210':139
- '82.##7.233.38':139
- '82.##7.219.240':139
- '82.##7.180.54':139
- '82.##7.10.77':139
- '82.##7.172.96':139
- '82.##7.161.220':139
- '82.##7.8.184':139
- '82.##7.202.65':139
- '82.##7.118.209':139
- '82.##7.112.56':139
- '82.##7.152.127':139
- '82.##7.215.225':139
- '82.##7.33.61':139
- '82.##7.80.248':139
- '82.##7.80.71':139
- '82.##7.214.146':139
- '82.##7.71.208':139
- '82.##7.76.200':139
- '82.##7.23.116':139
- '82.##7.222.62':139
- '82.##7.5.219':139
- '82.##7.158.101':139
- '82.##7.91.225':139
- '82.##7.227.146':139
- '82.##7.147.109':139
- '82.##7.114.222':139
- '82.##7.114.214':139
- '82.##7.173.109':139
- '82.##7.73.233':139
- '82.##7.80.91':139
- '82.##7.203.249':139
- '82.##7.103.151':139
- '82.##7.249.117':139
- '82.##7.26.85':139
- '82.##7.117.57':139
- '82.##7.169.173':139
- '82.##7.87.232':139
- '82.##7.174.93':139
- '82.##7.159.193':139
- '82.##7.93.159':139
- '82.##7.227.146':445
- '82.#47.8.76':445
- '82.##7.14.139':445
- '82.##7.191.86':445
- '82.##7.14.237':445
- '82.##7.178.154':445
- '82.##7.128.33':445
- '82.##7.98.176':445
- '82.##7.59.200':445
- '82.##7.143.196':445
- '82.#47.8.4':445
- '82.##7.219.246':445
- '82.##7.59.200':139
- '82.##7.98.176':139
- '82.#47.8.4':139
- '82.##7.14.139':139
- '82.##7.143.196':139
- '82.##7.45.142':445
- '82.##7.35.230':445
- '82.##7.191.9':139
- '82.##7.128.33':139
- '82.##7.84.122':139
- '82.##7.43.254':139
- '82.##7.193.198':139
- '82.#47.9.61':139
- '82.##7.168.195':139
- '82.##7.61.210':139
- '82.##7.77.211':139
- '82.##7.101.87':139
- '82.##7.77.36':139
- '82.##7.159.144':139
- '82.##7.213.159':139
- '82.##7.143.62':139
- '82.##7.191.9':445
- '82.##7.227.127':139
- '82.##7.127.144':139
- '82.##7.84.122':445
- '82.##7.26.147':139
- '82.##7.11.181':139
- '82.##7.144.60':139
- '82.##7.174.162':139
- '82.##7.196.227':139
- '82.##7.228.196':139
- '82.##7.8.227':445
- '82.##7.203.228':445
- '82.##7.101.72':445
- '82.##7.134.217':445
- '82.##7.163.165':445
- '82.##7.76.200':9988
- '82.##7.23.116':9988
- '82.##7.152.127':9988
- '82.#47.39.4':445
- '82.##7.112.56':9988
- '82.##7.93.45':445
- '82.##7.173.109':445
- '82.##7.73.233':445
- '82.##7.5.219':445
- '82.##7.158.101':445
- '82.##7.222.62':445
- '82.##7.180.192':445
- '82.##7.50.185':445
- '82.##7.114.222':445
- '82.##7.114.214':445
- '82.##7.147.109':445
- '82.##7.45.142':139
- '82.##7.35.230':139
- '82.##7.5.219':9988
- '82.##7.174.93':9988
- '82.##7.87.232':9988
- '82.##7.191.86':139
- '82.#47.8.76':139
- '82.##7.178.154':139
- '82.##7.219.246':139
- '82.##7.14.237':139
- '82.##7.249.117':9988
- '82.##7.233.38':9988
- '82.#47.72.7':9988
- '82.##7.180.54':9988
- '82.##7.71.208':9988
- '82.##7.219.240':9988
- '82.##7.26.85':9988
- '82.##7.117.57':9988
- '82.##7.172.96':9988
- '82.##7.55.210':9988
- '82.##7.8.184':9988