Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '66.##8.173.143':139
- '66.##8.144.144':139
- '66.##8.151.107':139
- '66.##8.76.178':139
- '66.##8.242.49':139
- '66.##8.164.74':139
- '66.##8.74.31':139
- '66.##8.73.65':139
- '66.##8.198.144':139
- '66.##8.82.170':139
- '66.##8.41.121':139
- '66.##8.66.224':139
- '66.##8.110.25':139
- '66.##8.225.35':445
- '66.##8.51.11':445
- '66.##8.239.50':445
- '66.##8.52.254':139
- '66.##8.102.106':139
- '66.##8.44.76':139
- '66.##8.241.192':139
- '66.##8.234.214':139
- '66.##8.242.49':445
- '66.##8.151.107':445
- '66.##8.76.178':445
- '66.##8.102.106':445
- '66.##8.41.121':445
- '66.##8.82.170':445
- '66.##8.73.65':445
- '66.##8.198.144':445
- '66.##8.173.143':445
- '66.##8.144.144':445
- '66.##8.52.254':445
- '66.##8.248.195':139
- '66.##8.148.248':139
- '66.##8.196.116':139
- '66.##8.68.94':139
- '66.##8.116.159':139
- '66.##8.234.214':445
- '66.##8.44.76':445
- '66.##8.241.192':445
- '66.##8.66.224':445
- '66.##8.110.25':445
- '66.##8.11.114':445
- '66.##8.11.114':139
- '66.##8.51.11':139
- '66.##8.55.170':139
- '66.##8.169.186':139
- '66.##8.136.181':139
- '66.##8.100.77':445
- '66.##8.214.123':445
- '66.##8.36.202':445
- '66.##8.239.50':139
- '66.##8.225.35':139
- '66.##8.33.183':139
- '66.##8.160.121':139
- '66.##8.111.224':139
- '66.##8.250.91':139
- '66.#28.8.2':139
- '66.##8.37.70':139
- '66.##8.75.254':139
- '66.##8.34.72':139
- '66.##8.115.17':139
- '66.##8.173.27':139
- '66.##8.215.207':139
- '66.##8.115.17':445
- '66.##8.75.254':445
- '66.##8.215.207':445
- '66.##8.111.224':445
- '66.##8.173.27':445
- '66.##8.136.181':445
- '66.##8.55.170':445
- '66.##8.169.186':445
- '66.##8.34.72':445
- '66.##8.33.183':445
- '66.##8.160.121':445
- '66.##8.38.10':445
- '66.##8.37.168':445
- '66.##8.118.12':445
- '66.##8.236.204':445
- '66.##8.12.193':445
- '66.##8.37.70':445
- '66.##8.250.91':445
- '66.#28.8.2':445
- '66.##8.185.163':445
- '66.##8.115.100':445
- '66.##8.164.74':445
- '66.##8.108.17':445
- '66.##8.182.108':445
- '66.##8.107.11':445
- '66.##8.31.209':445
- '66.##8.173.60':445
- '66.##8.235.16':139
- '66.##8.130.24':139
- '66.##8.178.106':445
- '66.##8.75.199':445
- '66.##8.165.111':445
- '66.##8.208.231':445
- '66.##8.30.15':445
- '66.#28.15.7':445
- '66.##8.43.103':445
- '66.##8.138.15':445
- '66.#28.29.6':445
- '66.##8.54.196':445
- '66.##8.50.16':445
- '66.##8.10.163':445
- '66.##8.236.14':445
- '66.##8.130.235':445
- '66.##8.29.13':139
- '66.##8.32.29':139
- '66.##8.56.185':139
- '66.##8.49.198':139
- '66.##8.211.4':139
- '66.##8.252.49':139
- '66.##8.118.192':139
- '66.##8.216.64':139
- '66.#28.3.32':139
- '66.##8.80.254':139
- '66.##8.77.118':139
- '66.##8.58.174':139
- '66.##8.98.249':139
- '66.##8.104.26':139
- '66.##8.38.61':139
- '66.##8.108.61':139
- '66.##8.121.183':139
- '66.##8.70.25':139
- '66.##8.110.133':139
- '66.##8.224.209':139
- '66.##8.87.225':139
- '66.##8.49.254':445
- '66.##8.49.254':139
- '66.##8.138.15':139
- '66.##8.206.171':139
- '66.##8.50.229':139
- '66.##8.176.50':139
- '66.#28.15.7':139
- '66.##8.236.14':139
- '66.##8.30.15':139
- '66.#28.29.6':139
- '66.##8.43.103':139
- '66.##8.28.88':139
- '66.##8.196.116':445
- '66.##8.248.195':445
- '66.##8.116.159':445
- '66.##8.74.31':445
- '66.##8.68.94':445
- '66.##8.155.157':139
- '66.##8.165.11':139
- '66.#28.24.8':139
- '66.##8.148.248':445
- '66.##8.147.148':139
- '66.#28.24.8':445
- '66.##8.155.157':445
- '66.##8.147.148':445
- '66.##8.165.111':139
- '66.##8.178.106':139
- '66.##8.176.50':445
- '66.##8.206.171':445
- '66.##8.50.229':445
- '66.##8.165.11':445
- '66.##8.28.88':445
- '66.##8.75.199':139
- '66.##8.50.16':139
- '66.##8.208.231':139
- '66.##8.54.196':139
- '66.##8.130.235':139
- '66.##8.10.163':139
- '66.##8.108.17':139
- '66.##8.182.108':139
- '66.##8.107.11':139
- '66.##8.31.209':139
- '66.##8.173.60':139
- '66.##8.115.100':139
- '66.##8.43.17':445
- '66.#28.3.99':445
- '66.##8.168.14':445
- '66.##8.249.70':445
- '66.##8.14.89':445
- '66.##8.57.57':445
- '66.##8.60.18':445
- '66.##8.92.119':445
- '66.##8.10.97':445
- '66.##8.35.12':445
- '66.##8.71.46':445
- '66.##8.223.242':139
- '66.##8.15.29':139
- '66.##8.226.223':139
- '66.##8.215.224':139
- '66.##8.113.72':139
- '66.##8.109.243':445
- '66.##8.6.125':445
- '66.##8.131.176':139
- '66.##8.20.122':139
- '66.##8.176.15':139
- '66.##8.39.108':445
- '66.##8.196.91':445
- '66.##8.238.111':445
- '66.##8.96.222':445
- '66.##8.112.118':445
- '66.##8.29.252':445
- '66.##8.184.29':445
- '66.##8.78.166':445
- '66.##8.40.15':445
- '66.##8.165.104':445
- '66.##8.43.200':445
- '66.##8.118.97':445
- '66.##8.221.225':445
- '66.#28.69.9':445
- '66.##8.55.88':445
- '66.##8.219.8':445
- '66.##8.150.124':445
- '66.##8.60.150':445
- '66.##8.124.174':445
- '66.##8.215.139':445
- '66.##8.174.21':445
- '66.##8.186.96':139
- '66.##8.219.8':139
- '66.#28.69.9':139
- '66.##8.55.88':139
- '66.##8.57.57':139
- '66.##8.60.18':139
- '66.##8.174.21':139
- '66.##8.124.174':139
- '66.##8.215.139':139
- '66.##8.118.97':139
- '66.##8.221.225':139
- '66.##8.92.119':139
- '66.##8.249.70':139
- '66.##8.109.243':139
- '66.##8.14.89':139
- '66.##8.71.46':139
- '66.##8.6.125':139
- '66.##8.10.97':139
- '66.##8.35.12':139
- '66.#28.3.99':139
- '66.##8.168.14':139
- '66.##8.43.17':139
- '66.##8.100.75':139
- '66.##8.0.249':139
- '66.##8.175.121':139
- '66.##8.29.252':139
- '66.##8.184.29':139
- '66.##8.183.240':139
- '66.##8.53.197':139
- '66.##8.198.187':139
- '66.##8.59.59':139
- '66.##8.29.120':139
- '66.##8.78.166':139
- '66.##8.96.222':139
- '66.##8.112.118':139
- '66.##8.43.200':139
- '66.##8.150.124':139
- '66.##8.60.150':139
- '66.##8.40.15':139
- '66.##8.165.104':139
- '66.##8.196.91':139
- '66.##8.238.111':139
- '66.##8.39.108':139
- '66.##8.175.121':445
- '66.##8.45.101':445
- '66.##8.21.180':445
- '66.##8.101.75':445
- '66.##8.113.180':445
- '66.##8.4.189':445
- '66.##8.253.5':445
- '66.##8.74.133':445
- '66.##8.144.183':445
- '66.##8.200.21':445
- '66.##8.74.243':445
- '66.##8.188.40':445
- '66.##8.27.237':139
- '66.##8.77.50':139
- '66.##8.59.241':139
- '66.##8.189.227':139
- '66.##8.217.200':139
- '66.##8.30.11':139
- '66.##8.249.30':139
- '66.##8.246.61':139
- '66.##8.43.207':139
- '66.##8.219.47':139
- '66.##8.214.123':139
- '66.##8.236.204':139
- '66.##8.100.77':139
- '66.##8.249.30':445
- '66.##8.36.202':139
- '66.##8.37.168':139
- '66.##8.185.163':139
- '66.##8.38.10':139
- '66.##8.12.193':139
- '66.##8.118.12':139
- '66.##8.30.11':445
- '66.##8.217.200':445
- '66.##8.59.241':445
- '66.##8.189.227':445
- '66.##8.162.221':445
- '66.##8.43.142':445
- '66.##8.219.47':445
- '66.##8.246.61':445
- '66.##8.43.207':445
- '66.##8.27.237':445
- '66.##8.77.50':445
- '66.##8.43.142':139
- '66.##8.176.15':445
- '66.##8.131.176':445
- '66.##8.20.122':445
- '66.##8.223.242':445
- '66.##8.15.29':445
- '66.##8.35.12':9988
- '66.##8.57.57':9988
- '66.##8.92.119':9988
- '66.##8.168.14':9988
- '66.##8.43.17':9988
- '66.##8.226.223':445
- '66.##8.29.120':445
- '66.##8.198.187':445
- '66.##8.59.59':445
- '66.##8.100.75':445
- '66.##8.0.249':445
- '66.##8.215.224':445
- '66.##8.113.72':445
- '66.##8.186.96':445
- '66.##8.183.240':445
- '66.##8.53.197':445
- '66.##8.21.180':139
- '66.##8.200.21':139
- '66.##8.45.101':139
- '66.##8.4.189':139
- '66.##8.101.75':139
- '66.##8.74.133':139
- '66.##8.162.221':139
- '66.##8.253.5':139
- '66.##8.74.243':139
- '66.##8.144.183':139
- '66.##8.113.180':139
- '66.##8.118.97':9988
- '66.##8.174.21':9988
- '66.#28.69.9':9988
- '66.##8.55.88':9988
- '66.##8.219.8':9988
- '66.##8.196.91':9988
- '66.##8.188.40':139
- '66.##8.238.111':9988
- '66.##8.215.139':9988
- '66.##8.60.150':9988