Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '62.##9.77.117':139
- '62.##9.57.73':139
- '62.##9.57.124':139
- '62.##9.59.92':139
- '62.##9.47.227':139
- '62.##9.226.186':139
- '62.##9.115.26':139
- '62.##9.187.14':139
- '62.##9.15.132':139
- '62.##9.14.149':139
- '62.##9.47.249':139
- '62.##9.220.47':139
- '62.##9.34.95':139
- '62.##9.47.206':139
- '62.##9.211.45':139
- '62.##9.45.178':139
- '62.##9.194.111':139
- '62.##9.130.221':139
- '62.##9.129.39':139
- '62.##9.166.223':139
- '62.##9.223.161':139
- '62.##9.107.144':139
- '62.##9.223.161':445
- '62.##9.129.39':445
- '62.##9.166.223':445
- '62.##9.220.47':445
- '62.##9.34.95':445
- '62.##9.59.92':445
- '62.##9.47.227':445
- '62.##9.47.249':445
- '62.##9.194.111':445
- '62.##9.130.221':445
- '62.##9.47.206':445
- '62.##9.115.177':139
- '62.##9.8.221':139
- '62.##9.177.93':139
- '62.##9.34.193':139
- '62.##9.112.119':139
- '62.##9.211.45':445
- '62.##9.45.178':445
- '62.##9.227.127':445
- '62.##9.218.71':445
- '62.##9.127.218':445
- '62.##9.3.223':139
- '62.##9.144.65':139
- '62.##9.11.90':139
- '62.##9.126.14':139
- '62.##9.159.73':139
- '62.##9.165.147':445
- '62.##9.14.52':445
- '62.#09.2.93':139
- '62.##9.115.44':139
- '62.##9.98.131':139
- '62.##9.44.47':139
- '62.##9.30.38':139
- '62.##9.82.22':139
- '62.##9.237.122':139
- '62.##9.64.229':139
- '62.##9.43.169':139
- '62.##9.74.148':139
- '62.##9.19.246':139
- '62.##9.189.203':139
- '62.##9.9.214':139
- '62.##9.183.43':139
- '62.##9.64.229':445
- '62.##9.144.65':445
- '62.##9.115.44':445
- '62.##9.3.223':445
- '62.##9.159.73':445
- '62.##9.11.90':445
- '62.##9.127.218':139
- '62.##9.227.127':139
- '62.##9.218.71':139
- '62.##9.98.131':445
- '62.#09.2.93':445
- '62.##9.126.14':445
- '62.##9.82.22':445
- '62.##9.9.214':445
- '62.##9.30.38':445
- '62.##9.43.169':445
- '62.##9.237.122':445
- '62.##9.19.246':445
- '62.##9.44.47':445
- '62.##9.74.148':445
- '62.##9.183.43':445
- '62.##9.189.203':445
- '62.##9.217.94':139
- '62.##9.104.217':139
- '62.##9.15.125':139
- '62.##9.16.179':445
- '62.##9.196.145':445
- '62.##9.59.198':139
- '62.##9.70.38':139
- '62.##9.144.156':139
- '62.##9.26.66':139
- '62.##9.106.22':139
- '62.##9.18.252':445
- '62.##9.244.213':445
- '62.##9.64.57':445
- '62.##9.41.65':445
- '62.##9.1.186':445
- '62.##9.157.235':445
- '62.##9.66.66':445
- '62.##9.196.160':445
- '62.##9.39.186':445
- '62.##9.126.26':445
- '62.##9.186.11':445
- '62.##9.185.162':139
- '62.##9.108.197':139
- '62.##9.245.104':139
- '62.##9.185.46':139
- '62.##9.28.204':139
- '62.#09.75.1':139
- '62.##9.25.33':139
- '62.##9.217.101':139
- '62.##9.86.35':139
- '62.##9.225.244':139
- '62.##9.223.226':139
- '62.##9.86.94':139
- '62.##9.7.152':139
- '62.##9.21.234':139
- '62.##9.29.32':139
- '62.##9.243.199':139
- '62.##9.245.124':139
- '62.##9.161.13':139
- '62.##9.106.169':139
- '62.##9.120.132':139
- '62.##9.239.11':139
- '62.##9.125.207':139
- '62.##9.115.101':139
- '62.##9.214.26':139
- '62.##9.8.221':445
- '62.##9.177.93':445
- '62.##9.115.177':445
- '62.##9.14.72':139
- '62.##9.169.14':139
- '62.##9.116.10':139
- '62.##9.89.178':139
- '62.##9.184.222':139
- '62.##9.112.119':445
- '62.##9.15.132':445
- '62.##9.14.149':445
- '62.##9.57.73':445
- '62.##9.57.124':445
- '62.##9.77.117':445
- '62.##9.107.144':445
- '62.##9.34.193':445
- '62.##9.115.26':445
- '62.##9.187.14':445
- '62.##9.226.186':445
- '62.##9.25.54':139
- '62.##9.214.26':445
- '62.##9.89.178':445
- '62.##9.115.101':445
- '62.##9.16.179':139
- '62.##9.196.145':139
- '62.##9.169.14':445
- '62.##9.25.54':445
- '62.##9.14.72':445
- '62.##9.184.222':445
- '62.##9.116.10':445
- '62.##9.18.252':139
- '62.##9.244.213':139
- '62.##9.64.57':139
- '62.##9.41.65':139
- '62.##9.1.186':139
- '62.##9.157.235':139
- '62.##9.66.66':139
- '62.##9.196.160':139
- '62.##9.39.186':139
- '62.##9.126.26':139
- '62.##9.186.11':139
- '62.##9.64.199':445
- '62.##9.85.64':445
- '62.##9.199.244':445
- '62.##9.15.43':445
- '62.##9.15.21':445
- '62.##9.127.143':445
- '62.##9.242.126':445
- '62.##9.7.208':445
- '62.##9.222.85':445
- '62.##9.106.222':445
- '62.##9.165.62':445
- '62.##9.218.221':139
- '62.##9.23.154':139
- '62.##9.221.59':139
- '62.##9.197.74':139
- '62.##9.129.102':139
- '62.##9.167.165':445
- '62.##9.247.33':445
- '62.##9.74.64':139
- '62.##9.209.174':139
- '62.##9.255.38':139
- '62.##9.71.203':445
- '62.##9.219.177':445
- '62.##9.213.185':445
- '62.##9.142.218':445
- '62.##9.16.150':445
- '62.##9.84.160':445
- '62.##9.19.66':445
- '62.##9.55.172':445
- '62.#09.8.95':445
- '62.##9.23.123':445
- '62.##9.53.254':445
- '62.##9.140.145':445
- '62.##9.5.137':445
- '62.##9.108.162':445
- '62.##9.196.99':445
- '62.##9.71.163':445
- '62.##9.17.228':445
- '62.##9.25.48':445
- '62.##9.57.83':445
- '62.##9.195.147':445
- '62.##9.28.194':445
- '62.##9.145.41':445
- '62.##9.71.163':139
- '62.##9.17.228':139
- '62.##9.71.203':139
- '62.##9.127.143':139
- '62.##9.242.126':139
- '62.##9.28.194':139
- '62.##9.145.41':139
- '62.##9.108.162':139
- '62.##9.196.99':139
- '62.##9.5.137':139
- '62.##9.7.208':139
- '62.##9.165.62':139
- '62.##9.167.165':139
- '62.##9.247.33':139
- '62.##9.15.43':139
- '62.##9.199.244':139
- '62.##9.222.85':139
- '62.##9.106.222':139
- '62.##9.85.64':139
- '62.##9.15.21':139
- '62.##9.64.199':139
- '62.##9.195.147':139
- '62.##9.88.167':139
- '62.##9.207.247':139
- '62.##9.167.55':139
- '62.##9.19.66':139
- '62.##9.55.172':139
- '62.##9.218.236':139
- '62.##9.133.22':139
- '62.##9.204.85':139
- '62.##9.144.28':139
- '62.##9.17.162':139
- '62.#09.8.95':139
- '62.##9.16.150':139
- '62.##9.84.160':139
- '62.##9.140.145':139
- '62.##9.25.48':139
- '62.##9.57.83':139
- '62.##9.23.123':139
- '62.##9.53.254':139
- '62.##9.213.185':139
- '62.##9.142.218':139
- '62.##9.219.177':139
- '62.##9.186.168':445
- '62.##9.167.160':445
- '62.##9.36.86':445
- '62.##9.5.148':139
- '62.##9.217.83':139
- '62.##9.99.170':445
- '62.##9.215.99':445
- '62.##9.134.82':445
- '62.##9.169.119':445
- '62.##9.96.134':445
- '62.##9.148.76':139
- '62.##9.255.50':139
- '62.##9.94.50':139
- '62.##9.245.100':139
- '62.##9.244.27':139
- '62.##9.22.224':139
- '62.##9.40.153':139
- '62.##9.76.63':139
- '62.##9.73.215':139
- '62.##9.182.94':139
- '62.##9.214.182':139
- '62.##9.151.33':445
- '62.##9.40.153':445
- '62.##9.148.76':445
- '62.##9.73.215':445
- '62.##9.182.94':445
- '62.##9.214.182':445
- '62.##9.165.147':139
- '62.##9.14.52':139
- '62.##9.217.83':445
- '62.##9.76.63':445
- '62.##9.5.148':445
- '62.##9.94.50':445
- '62.##9.93.66':445
- '62.##9.2.218':445
- '62.##9.39.239':445
- '62.##9.237.13':445
- '62.##9.86.63':445
- '62.##9.245.100':445
- '62.##9.255.50':445
- '62.##9.22.224':445
- '62.##9.10.126':445
- '62.##9.244.27':445
- '62.##9.255.38':445
- '62.##9.74.64':445
- '62.##9.209.174':445
- '62.##9.218.221':445
- '62.##9.23.154':445
- '62.##9.17.228':9988
- '62.##9.71.163':9988
- '62.##9.71.203':9988
- '62.##9.167.165':9988
- '62.##9.127.143':9988
- '62.##9.221.59':445
- '62.##9.144.28':445
- '62.##9.17.162':445
- '62.##9.207.247':445
- '62.##9.167.55':445
- '62.##9.88.167':445
- '62.##9.197.74':445
- '62.##9.129.102':445
- '62.##9.133.22':445
- '62.##9.204.85':445
- '62.##9.218.236':445
- '62.##9.5.137':9988
- '62.##9.151.33':139
- '62.##9.237.13':139
- '62.##9.215.99':139
- '62.##9.134.82':139
- '62.##9.99.170':139
- '62.##9.2.218':139
- '62.##9.10.126':139
- '62.##9.93.66':139
- '62.##9.86.63':139
- '62.##9.39.239':139
- '62.##9.96.134':139
- '62.##9.55.172':9988
- '62.##9.207.247':9988
- '62.##9.142.218':9988
- '62.##9.108.162':9988
- '62.##9.84.160':9988
- '62.##9.167.160':139
- '62.##9.169.119':139
- '62.##9.186.168':139
- '62.##9.144.28':9988
- '62.##9.36.86':139