Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '63.##3.60.173':139
- '63.##3.241.131':445
- '63.##3.218.132':139
- '63.##3.229.218':139
- '63.##3.207.251':445
- '63.##3.87.246':445
- '63.##3.122.225':445
- '63.##3.191.78':445
- '63.##3.0.239':445
- '63.##3.132.252':139
- '63.##3.221.143':139
- '63.##3.145.11':139
- '63.##3.23.231':139
- '63.##3.231.136':139
- '63.##3.171.250':139
- '63.##3.138.115':139
- '63.##3.18.27':139
- '63.##3.26.201':139
- '63.##3.252.164':139
- '63.##3.236.116':445
- '63.##3.96.80':445
- '63.##3.76.107':445
- '63.##3.91.150':445
- '63.##3.32.150':445
- '63.##3.42.208':445
- '63.##3.215.5':445
- '63.##3.53.103':445
- '63.##3.19.145':445
- '63.##3.126.146':445
- '63.#83.42.2':445
- '63.##3.138.0':445
- '63.##3.138.72':445
- '63.##3.95.50':445
- '63.##3.195.55':445
- '63.##3.185.46':445
- '63.##3.198.184':445
- '63.##3.36.124':445
- '63.##3.46.118':445
- '63.##3.46.118':139
- '63.##3.185.46':139
- '63.##3.195.55':139
- '63.##3.36.124':139
- '63.##3.198.184':139
- '63.##3.91.150':139
- '63.##3.236.116':139
- '63.##3.126.146':139
- '63.##3.76.107':139
- '63.##3.138.0':139
- '63.##3.191.78':139
- '63.##3.0.239':139
- '63.##3.241.131':139
- '63.##3.207.251':139
- '63.##3.87.246':139
- '63.##3.95.50':139
- '63.#83.42.2':139
- '63.##3.122.225':139
- '63.##3.138.72':139
- '63.##3.155.203':139
- '63.##3.105.78':139
- '63.##3.223.107':139
- '63.##3.203.223':139
- '63.##3.24.80':139
- '63.##3.143.139':139
- '63.##3.11.88':139
- '63.##3.246.34':139
- '63.##3.170.123':139
- '63.##3.64.220':139
- '63.##3.53.103':139
- '63.##3.19.145':139
- '63.##3.96.80':139
- '63.##3.32.150':139
- '63.##3.42.208':139
- '63.##3.214.192':139
- '63.##3.224.4':139
- '63.##3.215.5':139
- '63.##3.113.233':139
- '63.##3.113.233':445
- '63.##3.186.142':139
- '63.##3.253.180':139
- '63.##3.103.114':139
- '63.##3.205.103':139
- '63.##3.133.90':139
- '63.##3.67.226':139
- '63.##3.28.57':139
- '63.##3.93.161':139
- '63.##3.131.3':139
- '63.##3.94.34':139
- '63.##3.154.230':139
- '63.##3.110.154':139
- '63.##3.96.223':139
- '63.##3.25.225':139
- '63.##3.34.110':139
- '63.##3.192.65':139
- '63.##3.179.192':139
- '63.##3.215.34':139
- '63.##3.47.195':139
- '63.##3.220.89':139
- '63.##3.239.127':139
- '63.##3.243.223':139
- '63.##3.214.37':139
- '63.##3.51.36':139
- '63.##3.120.179':139
- '63.##3.168.231':139
- '63.##3.174.51':139
- '63.##3.17.91':139
- '63.##3.87.90':139
- '63.##3.49.23':139
- '63.##3.153.170':139
- '63.##3.81.155':139
- '63.##3.211.165':139
- '63.##3.231.223':139
- '63.##3.36.235':139
- '63.##3.32.191':139
- '63.#83.7.95':139
- '63.##3.194.155':139
- '63.##3.23.231':445
- '63.##3.231.136':445
- '63.##3.143.139':445
- '63.##3.11.88':445
- '63.##3.221.143':445
- '63.##3.26.201':445
- '63.##3.252.164':445
- '63.##3.145.11':445
- '63.##3.171.250':445
- '63.##3.170.123':445
- '63.##3.64.220':445
- '63.##3.223.107':445
- '63.##3.214.192':445
- '63.##3.224.4':445
- '63.##3.203.223':445
- '63.##3.24.80':445
- '63.##3.246.34':445
- '63.##3.155.203':445
- '63.##3.105.78':445
- '63.##3.24.39':139
- '63.##3.204.52':139
- '63.##3.89.82':139
- '63.##3.81.136':139
- '63.##3.129.174':139
- '63.##3.79.47':139
- '63.##3.223.79':139
- '63.##3.93.129':139
- '63.##3.32.229':139
- '63.##3.238.237':139
- '63.##3.132.252':445
- '63.##3.218.132':445
- '63.##3.138.115':445
- '63.##3.18.27':445
- '63.##3.229.218':445
- '63.##3.70.25':139
- '63.##3.16.120':139
- '63.##3.60.173':445
- '63.##3.25.133':139
- '63.##3.164.208':139
- '63.##3.238.64':445
- '63.##3.56.217':139
- '63.##3.162.161':139
- '63.##3.58.128':445
- '63.##3.36.206':445
- '63.##3.20.111':445
- '63.##3.214.84':445
- '63.##3.197.78':445
- '63.##3.49.213':139
- '63.##3.66.12':139
- '63.##3.12.122':139
- '63.##3.180.113':139
- '63.##3.12.180':139
- '63.##3.2.162':139
- '63.##3.193.178':139
- '63.##3.17.39':139
- '63.##3.195.115':139
- '63.##3.137.204':139
- '63.##3.54.172':445
- '63.##3.1.228':445
- '63.##3.116.106':445
- '63.#83.98.3':445
- '63.##3.58.29':445
- '63.##3.31.115':445
- '63.##3.219.103':445
- '63.##3.40.58':445
- '63.##3.79.218':445
- '63.##3.93.222':445
- '63.##3.115.142':445
- '63.##3.247.238':445
- '63.##3.69.243':445
- '63.##3.196.209':445
- '63.##3.61.137':445
- '63.##3.4.245':445
- '63.##3.121.213':445
- '63.##3.41.62':445
- '63.##3.139.41':445
- '63.##3.139.41':139
- '63.##3.4.245':139
- '63.##3.61.137':139
- '63.##3.41.62':139
- '63.##3.121.213':139
- '63.#83.98.3':139
- '63.##3.54.172':139
- '63.##3.93.222':139
- '63.##3.116.106':139
- '63.##3.247.238':139
- '63.##3.214.84':139
- '63.##3.238.64':139
- '63.##3.58.128':139
- '63.##3.36.206':139
- '63.##3.197.78':139
- '63.##3.196.209':139
- '63.##3.115.142':139
- '63.##3.20.111':139
- '63.##3.69.243':139
- '63.#83.26.3':139
- '63.##3.124.74':139
- '63.##3.207.56':139
- '63.##3.100.187':139
- '63.##3.118.219':139
- '63.##3.203.163':139
- '63.##3.112.203':139
- '63.##3.227.118':139
- '63.##3.47.178':139
- '63.##3.109.89':139
- '63.##3.40.58':139
- '63.##3.79.218':139
- '63.##3.1.228':139
- '63.##3.58.29':139
- '63.##3.31.115':139
- '63.##3.122.179':139
- '63.##3.88.123':139
- '63.##3.219.103':139
- '63.##3.179.219':139
- '63.##3.179.219':445
- '63.##3.136.228':139
- '63.##3.144.185':139
- '63.##3.94.60':139
- '63.##3.149.110':139
- '63.##3.201.77':139
- '63.##3.238.183':139
- '63.#83.6.89':139
- '63.##3.78.133':139
- '63.##3.183.77':139
- '63.##3.147.40':139
- '63.##3.118.219':9988
- '63.##3.124.74':9988
- '63.##3.100.187':9988
- '63.##3.122.179':9988
- '63.##3.219.164':139
- '63.##3.79.247':139
- '63.##3.168.149':139
- '63.##3.127.219':139
- '63.##3.72.128':139
- '63.##3.201.77':445
- '63.##3.78.133':445
- '63.##3.136.228':445
- '63.##3.144.185':445
- '63.##3.183.77':445
- '63.##3.217.127':445
- '63.##3.11.62':445
- '63.##3.238.183':445
- '63.#83.6.89':445
- '63.##3.149.110':445
- '63.##3.219.164':445
- '63.##3.127.219':445
- '63.##3.217.127':139
- '63.##3.11.62':139
- '63.##3.72.128':445
- '63.##3.147.40':445
- '63.##3.94.60':445
- '63.##3.79.247':445
- '63.##3.168.149':445
- '63.##3.180.113':445
- '63.##3.12.180':445
- '63.##3.203.163':445
- '63.##3.112.203':445
- '63.##3.66.12':445
- '63.##3.195.115':445
- '63.##3.137.204':445
- '63.##3.12.122':445
- '63.##3.2.162':445
- '63.##3.47.178':445
- '63.##3.109.89':445
- '63.##3.207.56':445
- '63.##3.122.179':445
- '63.##3.88.123':445
- '63.##3.100.187':445
- '63.##3.118.219':445
- '63.##3.227.118':445
- '63.#83.26.3':445
- '63.##3.124.74':445
- '63.##3.121.213':9988
- '63.##3.93.222':9988
- '63.##3.139.41':9988
- '63.##3.4.245':9988
- '63.##3.116.106':9988
- '63.##3.207.56':9988
- '63.##3.219.103':9988
- '63.#83.98.3':9988
- '63.##3.40.58':9988
- '63.##3.61.137':9988
- '63.##3.49.213':445
- '63.##3.56.217':445
- '63.##3.193.178':445
- '63.##3.17.39':445
- '63.##3.162.161':445
- '63.##3.197.78':9988
- '63.##3.115.142':9988
- '63.##3.164.208':445
- '63.##3.238.64':9988