Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '83.##5.129.196':445
- '83.##5.137.165':139
- '83.##5.79.181':445
- '83.##5.80.133':445
- '83.##5.50.55':139
- '83.##5.218.160':139
- '83.##5.99.125':139
- '83.##5.137.165':445
- '83.##5.50.55':445
- '83.##5.71.163':445
- '83.##5.87.69':445
- '83.##5.252.41':445
- '83.##5.225.201':445
- '83.##5.15.158':445
- '83.##5.169.135':445
- '83.##5.88.235':445
- '83.##5.1.105':445
- '83.##5.16.239':445
- '83.##5.82.15':445
- '83.##5.248.182':139
- '83.##5.110.87':139
- '83.##5.103.223':139
- '83.##5.83.69':139
- '83.##5.54.237':139
- '83.##5.41.114':139
- '83.##5.115.111':139
- '83.##5.13.100':139
- '83.##5.160.169':139
- '83.##5.164.133':139
- '83.##5.117.221':139
- '83.##5.117.100':139
- '83.##5.58.106':139
- '83.##5.245.241':139
- '83.##5.222.196':139
- '83.##5.176.187':139
- '83.##5.172.116':139
- '83.##5.67.181':139
- '83.##5.116.177':139
- '83.##5.115.43':139
- '83.##5.54.141':445
- '83.##5.73.81':445
- '83.##5.196.160':445
- '83.##5.77.72':445
- '83.##5.104.73':445
- '83.##5.206.5':445
- '83.##5.39.220':445
- '83.##5.172.104':445
- '83.##5.60.199':445
- '83.##5.138.178':445
- '83.##5.129.196':139
- '83.##5.130.211':445
- '83.##5.79.181':139
- '83.##5.80.133':139
- '83.##5.157.254':445
- '83.##5.116.211':445
- '83.##5.61.40':445
- '83.##5.151.142':445
- '83.##5.197.150':445
- '83.##5.49.128':445
- '83.##5.149.224':445
- '83.##5.17.239':445
- '83.##5.213.49':445
- '83.##5.165.146':445
- '83.##5.105.42':445
- '83.##5.170.46':445
- '83.##5.202.169':445
- '83.##5.151.105':445
- '83.##5.235.253':445
- '83.##5.23.125':445
- '83.##5.170.39':445
- '83.##5.113.41':445
- '83.##5.232.18':445
- '83.##5.39.232':445
- '83.##5.40.93':445
- '83.##5.35.40':445
- '83.##5.179.34':445
- '83.##5.5.119':445
- '83.##5.211.229':445
- '83.##5.140.209':445
- '83.##5.143.186':445
- '83.##5.112.145':445
- '83.##5.53.192':445
- '83.##5.223.143':445
- '83.##5.62.245':445
- '83.##5.76.127':445
- '83.##5.95.223':445
- '83.##5.49.86':445
- '83.##5.13.100':445
- '83.##5.54.237':445
- '83.##5.110.87':445
- '83.##5.117.221':445
- '83.##5.83.69':445
- '83.##5.103.223':445
- '83.##5.164.133':445
- '83.##5.115.111':445
- '83.##5.41.114':445
- '83.##5.160.169':445
- '83.##5.12.212':445
- '83.#25.0.81':445
- '83.##5.92.176':445
- '83.##5.92.134':445
- '83.##5.146.123':445
- '83.##5.23.214':445
- '83.##5.206.189':139
- '83.##5.25.163':139
- '83.##5.10.184':445
- '83.#25.2.10':445
- '83.##5.255.149':445
- '83.##5.149.153':445
- '83.##5.181.194':445
- '83.##5.78.231':445
- '83.##5.99.189':445
- '83.##5.91.58':445
- '83.##5.147.250':445
- '83.##5.223.252':445
- '83.##5.217.146':445
- '83.##5.44.57':445
- '83.##5.149.153':139
- '83.##5.181.194':139
- '83.##5.78.231':139
- '83.##5.99.189':139
- '83.##5.91.58':139
- '83.##5.147.250':139
- '83.##5.223.252':139
- '83.##5.217.146':139
- '83.##5.44.57':139
- '83.##5.12.212':139
- '83.##5.140.209':139
- '83.##5.143.186':139
- '83.##5.112.145':139
- '83.##5.53.192':139
- '83.##5.223.143':139
- '83.##5.62.245':139
- '83.##5.76.127':139
- '83.##5.95.223':139
- '83.##5.49.86':139
- '83.##5.255.149':139
- '83.##5.117.100':445
- '83.##5.58.106':445
- '83.##5.245.241':445
- '83.##5.222.196':445
- '83.##5.176.187':445
- '83.##5.172.116':445
- '83.##5.67.181':445
- '83.##5.116.177':445
- '83.##5.115.43':445
- '83.##5.248.182':445
- '83.#25.0.81':139
- '83.##5.92.176':139
- '83.##5.92.134':139
- '83.##5.146.123':139
- '83.##5.23.214':139
- '83.##5.218.160':445
- '83.##5.99.125':445
- '83.##5.10.184':139
- '83.#25.2.10':139
- '83.##5.71.163':139
- '83.##5.72.117':445
- '83.##5.172.158':445
- '83.##5.214.46':139
- '83.##5.176.33':139
- '83.##5.4.137':445
- '83.##5.248.30':445
- '83.##5.28.248':445
- '83.##5.14.78':445
- '83.##5.96.166':445
- '83.##5.46.225':139
- '83.##5.249.232':139
- '83.##5.192.19':139
- '83.##5.146.202':139
- '83.##5.55.165':139
- '83.##5.195.191':139
- '83.##5.40.205':139
- '83.##5.165.117':139
- '83.##5.30.196':139
- '83.##5.61.30':139
- '83.##5.20.29':445
- '83.##5.101.152':445
- '83.##5.195.82':445
- '83.##5.108.51':445
- '83.##5.163.215':445
- '83.##5.27.183':445
- '83.##5.208.49':445
- '83.##5.21.246':445
- '83.##5.111.16':445
- '83.##5.239.110':445
- '83.##5.51.168':445
- '83.##5.25.83':445
- '83.##5.242.61':445
- '83.##5.43.230':445
- '83.##5.39.101':445
- '83.##5.46.221':445
- '83.##5.110.252':445
- '83.##5.178.133':445
- '83.##5.22.44':445
- '83.##5.229.220':445
- '83.##5.46.221':139
- '83.##5.22.44':139
- '83.##5.25.83':139
- '83.##5.242.61':139
- '83.##5.229.220':139
- '83.##5.51.168':139
- '83.##5.108.51':139
- '83.##5.110.252':139
- '83.##5.178.133':139
- '83.##5.39.101':139
- '83.##5.4.137':139
- '83.##5.14.78':139
- '83.##5.72.117':139
- '83.##5.172.158':139
- '83.##5.96.166':139
- '83.##5.20.29':139
- '83.##5.43.230':139
- '83.##5.248.30':139
- '83.##5.28.248':139
- '83.##5.163.215':139
- '83.##5.145.225':139
- '83.##5.54.162':139
- '83.##5.154.176':139
- '83.##5.111.199':139
- '83.##5.151.119':139
- '83.##5.180.239':139
- '83.##5.10.67':139
- '83.##5.146.151':139
- '83.##5.187.16':139
- '83.##5.49.48':139
- '83.##5.27.183':139
- '83.##5.111.16':139
- '83.##5.101.152':139
- '83.##5.195.82':139
- '83.##5.239.110':139
- '83.##5.36.212':139
- '83.##5.200.87':139
- '83.##5.208.49':139
- '83.##5.21.246':139
- '83.##5.39.232':139
- '83.##5.170.39':139
- '83.##5.49.128':139
- '83.##5.232.18':139
- '83.##5.113.41':139
- '83.##5.211.229':139
- '83.##5.35.40':139
- '83.##5.40.93':139
- '83.##5.5.119':139
- '83.##5.39.220':139
- '83.##5.77.72':139
- '83.##5.54.141':139
- '83.##5.138.178':139
- '83.##5.196.160':139
- '83.##5.73.81':139
- '83.##5.60.199':139
- '83.##5.206.5':139
- '83.##5.104.73':139
- '83.##5.172.104':139
- '83.##5.179.34':139
- '83.##5.87.69':139
- '83.##5.252.41':139
- '83.##5.225.201':139
- '83.##5.15.158':139
- '83.##5.169.135':139
- '83.##5.88.235':139
- '83.##5.1.105':139
- '83.##5.16.239':139
- '83.##5.82.15':139
- '83.##5.202.169':139
- '83.##5.165.146':139
- '83.##5.149.224':139
- '83.##5.23.125':139
- '83.##5.213.49':139
- '83.##5.17.239':139
- '83.##5.235.253':139
- '83.##5.170.46':139
- '83.##5.105.42':139
- '83.##5.151.105':139
- '83.##5.146.202':445
- '83.##5.55.165':445
- '83.##5.180.239':445
- '83.##5.10.67':445
- '83.##5.249.232':445
- '83.##5.30.196':445
- '83.##5.61.30':445
- '83.##5.192.19':445
- '83.##5.195.191':445
- '83.##5.187.16':445
- '83.##5.49.48':445
- '83.##5.154.176':445
- '83.##5.36.212':445
- '83.##5.200.87':445
- '83.##5.111.199':445
- '83.##5.151.119':445
- '83.##5.146.151':445
- '83.##5.145.225':445
- '83.##5.54.162':445
- '83.##5.40.205':445
- '83.##5.180.239':9988
- '83.##5.130.211':139
- '83.##5.108.51':9988
- '83.##5.200.87':9988
- '83.##5.157.254':139
- '83.##5.116.211':139
- '83.##5.61.40':139
- '83.##5.151.142':139
- '83.##5.197.150':139
- '83.##5.110.252':9988
- '83.##5.214.46':445
- '83.##5.176.33':445
- '83.##5.165.117':445
- '83.##5.46.225':445
- '83.##5.4.137':9988
- '83.##5.28.248':9988
- '83.##5.20.29':9988
- '83.##5.96.166':9988
- '83.##5.248.30':9988