Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.##3.24.54':445
- '59.##3.149.24':445
- '59.##3.106.34':445
- '59.##3.53.221':445
- '59.##3.112.92':445
- '59.##3.184.68':445
- '59.##3.200.216':445
- '59.##3.121.100':445
- '59.##3.5.242':445
- '59.##3.31.49':445
- '59.##3.85.50':445
- '59.##3.216.239':445
- '59.##3.241.2':445
- '59.##3.72.253':445
- '59.##3.47.14':445
- '59.##3.189.110':445
- '59.##3.224.89':445
- '59.##3.229.89':445
- '59.##3.183.17':445
- '59.##3.139.139':445
- '59.##3.47.47':445
- '59.##3.117.171':445
- '59.##3.214.171':445
- '59.##3.34.254':445
- '59.##3.8.254':445
- '59.##3.174.109':139
- '59.##3.23.247':445
- '59.##3.141.245':445
- '59.##3.100.156':445
- '59.##3.86.167':445
- '59.##3.150.164':445
- '59.##3.141.237':445
- '59.##3.170.216':445
- '59.##3.69.63':445
- '59.##3.192.37':445
- '59.##3.115.123':445
- '59.##3.77.85':445
- '59.##3.240.192':445
- '59.##3.200.216':139
- '59.##3.183.17':139
- '59.##3.5.242':139
- '59.##3.184.68':139
- '59.##3.150.164':139
- '59.##3.86.167':139
- '59.##3.170.216':139
- '59.##3.141.237':139
- '59.##3.100.156':139
- '59.##3.189.110':139
- '59.##3.106.34':139
- '59.##3.229.89':139
- '59.##3.47.14':139
- '59.##3.53.221':139
- '59.##3.112.92':139
- '59.##3.121.100':139
- '59.##3.24.54':139
- '59.##3.149.24':139
- '59.##3.115.123':139
- '59.##3.29.138':445
- '59.##3.162.4':445
- '59.##3.141.245':139
- '59.##3.8.254':139
- '59.##3.43.224':445
- '59.##3.128.82':445
- '59.##3.193.128':445
- '59.##3.37.69':445
- '59.##3.174.143':445
- '59.##3.192.37':139
- '59.##3.117.171':139
- '59.##3.77.85':139
- '59.##3.69.63':139
- '59.##3.214.171':139
- '59.##3.34.254':139
- '59.##3.23.247':139
- '59.##3.139.139':139
- '59.##3.47.47':139
- '59.##3.124.223':139
- '59.##3.29.42':139
- '59.##3.163.109':139
- '59.##3.212.91':139
- '59.##3.105.86':139
- '59.##3.80.147':139
- '59.##3.241.185':139
- '59.##3.165.241':139
- '59.##3.31.228':139
- '59.##3.72.128':139
- '59.##3.98.99':139
- '59.##3.40.69':139
- '59.##3.157.70':139
- '59.##3.156.157':139
- '59.##3.234.37':139
- '59.##3.0.220':139
- '59.##3.100.73':139
- '59.##3.107.233':139
- '59.##3.234.96':139
- '59.##3.120.127':445
- '59.##3.41.219':445
- '59.##3.12.28':445
- '59.##3.83.227':445
- '59.##3.91.161':445
- '59.##3.72.118':445
- '59.##3.34.45':445
- '59.##3.145.114':445
- '59.##3.124.1':445
- '59.##3.31.227':445
- '59.##3.33.192':445
- '59.##3.49.114':445
- '59.##3.43.226':445
- '59.##3.59.88':445
- '59.##3.89.13':445
- '59.##3.228.190':445
- '59.##3.124.149':445
- '59.##3.9.214':445
- '59.##3.225.67':445
- '59.##3.44.71':139
- '59.##3.97.204':445
- '59.##3.120.127':139
- '59.##3.203.80':445
- '59.##3.225.199':445
- '59.##3.43.226':139
- '59.##3.49.114':139
- '59.##3.89.13':139
- '59.##3.59.88':139
- '59.##3.33.192':139
- '59.##3.203.80':139
- '59.##3.225.199':139
- '59.##3.159.125':139
- '59.##3.102.91':139
- '59.##3.97.204':139
- '59.##3.159.125':445
- '59.##3.102.91':445
- '59.##3.174.109':445
- '59.##3.124.223':445
- '59.##3.9.214':139
- '59.##3.145.114':139
- '59.##3.246.21':139
- '59.##3.31.227':139
- '59.##3.34.45':139
- '59.##3.166.245':139
- '59.##3.244.15':139
- '59.##3.112.244':139
- '59.##3.108.136':139
- '59.##3.176.233':139
- '59.##3.124.149':139
- '59.##3.83.227':139
- '59.##3.225.67':139
- '59.##3.228.190':139
- '59.##3.91.161':139
- '59.##3.72.118':139
- '59.##3.124.1':139
- '59.##3.41.219':139
- '59.##3.12.28':139
- '59.##3.224.89':139
- '59.##3.166.139':139
- '59.##3.35.167':139
- '59.#13.73.7':139
- '59.##3.87.122':139
- '59.##3.3.106':445
- '59.##3.97.234':445
- '59.##3.130.190':445
- '59.##3.31.136':445
- '59.##3.130.42':445
- '59.##3.125.40':139
- '59.##3.36.166':139
- '59.##3.40.25':139
- '59.##3.188.39':139
- '59.##3.164.190':139
- '59.##3.15.178':139
- '59.##3.131.173':139
- '59.##3.54.16':139
- '59.##3.30.230':139
- '59.##3.151.130':445
- '59.##3.208.134':445
- '59.##3.126.84':445
- '59.##3.161.160':445
- '59.##3.65.179':445
- '59.##3.164.34':445
- '59.##3.143.116':445
- '59.##3.198.56':445
- '59.##3.176.164':445
- '59.##3.19.161':445
- '59.##3.240.5':445
- '59.##3.97.62':445
- '59.##3.131.151':445
- '59.##3.12.131':445
- '59.##3.22.236':445
- '59.##3.193.113':445
- '59.##3.91.187':445
- '59.##3.6.196':445
- '59.##3.177.224':445
- '59.##3.36.108':139
- '59.##3.6.196':139
- '59.##3.177.224':139
- '59.##3.97.62':139
- '59.##3.22.236':139
- '59.##3.193.113':139
- '59.##3.65.179':139
- '59.##3.208.134':139
- '59.##3.91.187':139
- '59.##3.161.160':139
- '59.##3.130.42':139
- '59.##3.97.234':139
- '59.##3.3.106':139
- '59.##3.31.136':139
- '59.##3.130.190':139
- '59.##3.12.131':139
- '59.##3.240.5':139
- '59.##3.151.130':139
- '59.##3.131.151':139
- '59.##3.126.84':139
- '59.##3.118.2':139
- '59.##3.131.81':139
- '59.##3.12.157':139
- '59.##3.192.12':139
- '59.##3.222.14':139
- '59.##3.71.130':139
- '59.##3.209.241':139
- '59.##3.192.250':139
- '59.##3.36.146':139
- '59.##3.19.161':139
- '59.##3.143.116':139
- '59.##3.164.34':139
- '59.##3.176.164':139
- '59.##3.198.56':139
- '59.##3.221.238':139
- '59.##3.156.222':139
- '59.##3.126.129':139
- '59.##3.98.166':139
- '59.##3.126.129':445
- '59.##3.14.27':139
- '59.##3.226.227':139
- '59.##3.87.122':9988
- '59.##3.211.24':139
- '59.##3.63.234':139
- '59.##3.76.137':139
- '59.##3.211.24':445
- '59.##3.140.103':139
- '59.##3.186.209':139
- '59.##3.176.164':9988
- '59.##3.118.2':9988
- '59.##3.161.160':9988
- '59.##3.65.179':9988
- '59.##3.40.25':9988
- '59.##3.164.190':9988
- '59.#13.73.7':9988
- '59.##3.36.146':9988
- '59.##3.188.39':9988
- '59.##3.14.27':445
- '59.##3.193.128':139
- '59.##3.240.192':139
- '59.##3.174.143':139
- '59.##3.128.82':139
- '59.##3.216.239':139
- '59.##3.85.50':139
- '59.##3.72.253':139
- '59.##3.241.2':139
- '59.##3.31.49':139
- '59.##3.140.103':445
- '59.##3.186.209':445
- '59.##3.226.227':445
- '59.##3.63.234':445
- '59.##3.76.137':445
- '59.##3.43.224':139
- '59.##3.37.69':139
- '59.##3.29.138':139
- '59.##3.162.4':139
- '59.##3.193.113':9988
- '59.##3.209.241':445
- '59.##3.36.108':445
- '59.##3.36.146':445
- '59.##3.71.130':445
- '59.##3.40.25':445
- '59.##3.36.166':445
- '59.##3.164.190':445
- '59.##3.188.39':445
- '59.##3.125.40':445
- '59.##3.156.222':445
- '59.##3.12.157':445
- '59.##3.98.166':445
- '59.##3.221.238':445
- '59.##3.192.12':445
- '59.##3.222.14':445
- '59.##3.192.250':445
- '59.##3.118.2':445
- '59.##3.131.81':445
- '59.##3.54.16':445
- '59.##3.130.190':9988
- '59.##3.151.130':9988
- '59.##3.97.234':9988
- '59.##3.3.106':9988
- '59.##3.97.62':9988
- '59.##3.177.224':9988
- '59.##3.91.187':9988
- '59.##3.22.236':9988
- '59.##3.6.196':9988
- '59.##3.131.173':445
- '59.#13.73.7':445
- '59.##3.30.230':445
- '59.##3.15.178':445
- '59.##3.87.122':445
- '59.##3.130.42':9988
- '59.##3.31.136':9988
- '59.##3.166.139':445
- '59.##3.35.167':445