Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '62.##5.117.230':445
- '62.##5.47.250':445
- '62.##5.32.190':445
- '62.##5.104.149':445
- '62.##5.82.213':445
- '62.##5.77.159':445
- '62.##5.126.220':445
- '62.##5.228.36':445
- '62.##5.113.14':445
- '62.##5.133.42':445
- '62.##5.81.67':445
- '62.##5.145.72':445
- '62.##5.252.20':445
- '62.##5.235.87':445
- '62.##5.48.67':445
- '62.##5.24.214':445
- '62.##5.198.115':445
- '62.##5.78.131':445
- '62.##5.11.73':445
- '62.##5.235.176':445
- '62.##5.139.74':445
- '62.##5.143.244':445
- '62.##5.114.82':445
- '62.##5.105.108':445
- '62.##5.200.98':445
- '62.##5.24.182':445
- '62.##5.38.183':445
- '62.##5.42.108':445
- '62.##5.205.243':445
- '62.##5.82.191':445
- '62.##5.167.147':445
- '62.##5.160.166':445
- '62.##5.15.193':445
- '62.##5.148.98':445
- '62.##5.44.161':445
- '62.##5.178.123':445
- '62.##5.24.68':445
- '62.##5.64.96':445
- '62.##5.234.109':445
- '62.##5.65.44':445
- '62.##5.160.166':139
- '62.##5.44.161':139
- '62.##5.148.98':139
- '62.##5.167.147':139
- '62.##5.64.96':139
- '62.##5.24.68':139
- '62.##5.82.191':139
- '62.##5.234.109':139
- '62.##5.178.123':139
- '62.##5.15.193':139
- '62.##5.47.250':139
- '62.##5.82.213':139
- '62.##5.104.149':139
- '62.##5.117.230':139
- '62.##5.228.36':139
- '62.##5.126.220':139
- '62.##5.235.176':139
- '62.##5.113.14':139
- '62.##5.77.159':139
- '62.##5.114.82':139
- '62.##5.45.163':139
- '62.##5.252.247':139
- '62.##5.74.233':139
- '62.##5.248.34':139
- '62.##5.97.32':139
- '62.##5.24.230':139
- '62.##5.98.222':445
- '62.#85.6.97':139
- '62.#85.25.6':139
- '62.##5.17.218':139
- '62.##5.143.244':139
- '62.##5.200.98':139
- '62.##5.105.108':139
- '62.##5.139.74':139
- '62.##5.42.108':139
- '62.##5.38.183':139
- '62.##5.203.98':139
- '62.##5.205.243':139
- '62.##5.24.182':139
- '62.##5.203.98':445
- '62.##5.22.235':139
- '62.##5.17.28':139
- '62.##5.135.14':139
- '62.##5.38.66':139
- '62.##5.27.95':139
- '62.##5.165.172':139
- '62.##5.71.29':139
- '62.##5.130.98':139
- '62.##5.172.199':139
- '62.##5.186.43':139
- '62.##5.149.122':139
- '62.##5.30.107':139
- '62.##5.17.131':139
- '62.##5.133.206':139
- '62.##5.174.248':139
- '62.##5.226.96':139
- '62.##5.169.106':139
- '62.##5.95.220':139
- '62.##5.77.179':139
- '62.##5.123.134':139
- '62.##5.87.101':445
- '62.##5.34.187':445
- '62.##5.243.101':445
- '62.##5.133.227':445
- '62.##5.207.238':445
- '62.##5.87.219':445
- '62.##5.175.124':445
- '62.##5.192.12':445
- '62.##5.219.24':445
- '62.##5.10.210':445
- '62.##5.73.178':445
- '62.#85.3.89':445
- '62.##5.32.204':445
- '62.##5.190.235':445
- '62.##5.129.3':445
- '62.##5.149.96':445
- '62.##5.195.79':445
- '62.##5.76.23':445
- '62.##5.71.225':445
- '62.##5.13.152':139
- '62.#85.3.89':139
- '62.##5.129.3':139
- '62.##5.190.235':139
- '62.##5.73.178':139
- '62.##5.76.23':139
- '62.##5.195.79':139
- '62.##5.10.210':139
- '62.##5.71.225':139
- '62.##5.149.96':139
- '62.##5.32.204':139
- '62.##5.248.34':445
- '62.##5.45.163':445
- '62.##5.17.218':445
- '62.##5.74.233':445
- '62.##5.252.247':445
- '62.#85.25.6':445
- '62.##5.24.230':445
- '62.##5.97.32':445
- '62.#85.6.97':445
- '62.##5.243.101':139
- '62.##5.207.181':139
- '62.##5.43.105':139
- '62.##5.39.219':139
- '62.##5.17.39':139
- '62.##5.119.192':139
- '62.##5.154.136':139
- '62.##5.64.114':139
- '62.##5.43.242':139
- '62.##5.233.61':139
- '62.##5.51.74':139
- '62.##5.34.187':139
- '62.##5.207.238':139
- '62.##5.133.227':139
- '62.##5.87.101':139
- '62.##5.192.12':139
- '62.##5.175.124':139
- '62.##5.190.86':139
- '62.##5.219.24':139
- '62.##5.87.219':139
- '62.##5.32.190':139
- '62.##5.185.225':445
- '62.##5.87.175':445
- '62.##5.160.65':139
- '62.##5.119.193':445
- '62.##5.81.156':445
- '62.##5.190.139':445
- '62.##5.193.236':445
- '62.##5.211.120':445
- '62.##5.14.168':445
- '62.##5.5.243':139
- '62.##5.29.96':139
- '62.#85.54.3':139
- '62.##5.241.25':139
- '62.##5.151.45':139
- '62.##5.235.218':139
- '62.##5.51.240':139
- '62.##5.87.211':139
- '62.##5.146.233':139
- '62.##5.74.149':139
- '62.##5.17.105':445
- '62.##5.65.254':445
- '62.##5.115.54':445
- '62.##5.216.109':445
- '62.##5.36.217':445
- '62.##5.225.138':445
- '62.##5.26.218':445
- '62.##5.218.177':445
- '62.##5.228.94':445
- '62.##5.210.158':445
- '62.##5.111.158':445
- '62.##5.56.97':445
- '62.##5.27.41':445
- '62.##5.104.7':445
- '62.##5.24.207':445
- '62.##5.174.73':445
- '62.##5.58.67':445
- '62.##5.81.246':445
- '62.##5.216.166':445
- '62.##5.46.215':445
- '62.##5.132.127':139
- '62.##5.27.41':139
- '62.##5.174.73':139
- '62.##5.24.207':139
- '62.##5.56.97':139
- '62.##5.216.166':139
- '62.##5.81.246':139
- '62.##5.111.158':139
- '62.##5.46.215':139
- '62.##5.58.67':139
- '62.##5.104.7':139
- '62.##5.87.175':139
- '62.##5.81.156':139
- '62.##5.185.225':139
- '62.##5.119.193':139
- '62.##5.211.120':139
- '62.##5.193.236':139
- '62.##5.17.105':139
- '62.##5.14.168':139
- '62.##5.190.139':139
- '62.##5.216.109':139
- '62.##5.118.213':139
- '62.##5.161.118':139
- '62.##5.39.109':139
- '62.##5.213.85':139
- '62.##5.1.172':139
- '62.##5.12.21':139
- '62.##5.205.12':139
- '62.##5.62.117':139
- '62.#85.15.5':139
- '62.##5.219.220':139
- '62.##5.115.54':139
- '62.##5.225.138':139
- '62.##5.36.217':139
- '62.##5.65.254':139
- '62.##5.228.94':139
- '62.##5.218.177':139
- '62.##5.220.247':139
- '62.##5.210.158':139
- '62.##5.26.218':139
- '62.##5.220.247':445
- '62.##5.142.253':139
- '62.##5.252.147':139
- '62.##5.121.80':139
- '62.##5.12.193':139
- '62.##5.225.172':445
- '62.##5.134.253':445
- '62.##5.72.30':445
- '62.##5.191.254':445
- '62.##5.6.249':445
- '62.##5.40.15':139
- '62.##5.191.254':139
- '62.##5.6.249':139
- '62.##5.29.96':9988
- '62.##5.225.172':139
- '62.##5.134.253':139
- '62.##5.161.159':139
- '62.##5.26.47':139
- '62.##5.72.30':139
- '62.##5.164.210':139
- '62.##5.164.210':445
- '62.##5.145.72':139
- '62.##5.48.67':139
- '62.##5.235.87':139
- '62.##5.81.67':139
- '62.##5.78.131':139
- '62.##5.198.115':139
- '62.##5.133.42':139
- '62.##5.11.73':139
- '62.##5.24.214':139
- '62.##5.252.20':139
- '62.##5.40.15':445
- '62.##5.121.80':445
- '62.##5.161.159':445
- '62.##5.26.47':445
- '62.##5.12.193':445
- '62.##5.98.222':139
- '62.##5.65.44':139
- '62.##5.142.253':445
- '62.##5.252.147':445
- '62.##5.218.177':9988
- '62.##5.151.45':445
- '62.##5.29.96':445
- '62.##5.132.127':445
- '62.##5.241.25':445
- '62.#85.54.3':445
- '62.##5.74.149':445
- '62.##5.51.240':445
- '62.##5.235.218':445
- '62.##5.146.233':445
- '62.##5.205.12':445
- '62.##5.213.85':445
- '62.##5.118.213':445
- '62.##5.219.220':445
- '62.##5.39.109':445
- '62.##5.161.118':445
- '62.#85.15.5':445
- '62.##5.12.21':445
- '62.##5.1.172':445
- '62.##5.62.117':445
- '62.##5.87.211':445
- '62.##5.36.217':9988
- '62.##5.65.254':9988
- '62.##5.46.215':9988
- '62.##5.111.158':9988
- '62.##5.115.54':9988
- '62.##5.26.218':9988
- '62.#85.54.3':9988
- '62.##5.228.94':9988
- '62.##5.39.109':9988
- '62.##5.174.73':9988
- '62.##5.119.193':9988
- '62.##5.211.120':9988
- '62.##5.5.243':445
- '62.##5.160.65':445
- '62.##5.14.168':9988
- '62.##5.24.207':9988
- '62.##5.56.97':9988
- '62.##5.190.139':9988
- '62.##5.193.236':9988