Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '80.##5.227.111':445
- '80.##5.178.91':445
- '80.##5.25.204':445
- '80.##5.247.189':445
- '80.##5.18.64':445
- '80.##5.111.18':445
- '80.##5.237.195':445
- '80.##5.89.126':445
- '80.##5.157.41':445
- '80.##5.253.115':445
- '80.##5.98.186':445
- '80.##5.204.148':445
- '80.##5.23.101':445
- '80.##5.60.108':445
- '80.##5.94.60':445
- '80.##5.10.110':445
- '80.##5.193.183':445
- '80.##5.30.183':445
- '80.##5.227.58':445
- '80.##5.210.179':445
- '80.##5.97.210':445
- '80.##5.33.184':445
- '80.##5.224.25':445
- '80.##5.95.224':445
- '80.##5.53.31':445
- '80.##5.0.247':445
- '80.##5.169.159':445
- '80.##5.137.109':445
- '80.##5.251.217':445
- '80.##5.138.251':445
- '80.##5.35.27':445
- '80.##5.79.157':445
- '80.##5.240.247':445
- '80.##5.123.26':139
- '80.##5.22.82':445
- '80.##5.38.103':445
- '80.##5.77.22':445
- '80.##5.218.122':445
- '80.##5.230.140':445
- '80.##5.212.230':445
- '80.##5.18.56':445
- '80.##5.227.156':445
- '80.##5.206.227':445
- '80.##5.146.105':445
- '80.##5.22.197':445
- '80.##5.149.122':445
- '80.##5.123.115':445
- '80.##5.45.231':445
- '80.##5.157.45':445
- '80.##5.209.252':445
- '80.##5.240.247':139
- '80.##5.18.64':139
- '80.##5.111.18':139
- '80.##5.227.111':139
- '80.##5.33.184':139
- '80.##5.23.101':139
- '80.##5.247.189':139
- '80.##5.98.186':139
- '80.##5.204.148':139
- '80.##5.237.195':139
- '80.##5.178.91':139
- '80.##5.25.204':139
- '80.##5.253.115':139
- '80.##5.97.210':139
- '80.##5.30.183':139
- '80.##5.227.58':139
- '80.##5.60.108':139
- '80.##5.93.181':445
- '80.##5.1.157':445
- '80.##5.193.183':139
- '80.##5.95.224':139
- '80.##5.53.31':139
- '80.##5.210.179':139
- '80.##5.94.60':139
- '80.##5.10.110':139
- '80.##5.224.25':139
- '80.##5.138.251':139
- '80.##5.35.27':139
- '80.##5.0.247':139
- '80.##5.123.115':139
- '80.##5.218.122':139
- '80.##5.251.217':139
- '80.##5.38.103':139
- '80.##5.77.22':139
- '80.##5.79.157':139
- '80.##5.169.159':139
- '80.##5.137.109':139
- '80.##5.22.82':139
- '80.##5.149.122':139
- '80.##5.206.227':139
- '80.##5.146.105':139
- '80.##5.230.140':139
- '80.##5.89.126':139
- '80.##5.157.41':139
- '80.##5.227.156':139
- '80.##5.157.45':139
- '80.##5.209.252':139
- '80.##5.22.197':139
- '80.##5.212.230':139
- '80.##5.18.56':139
- '80.##5.45.231':139
- '80.##5.12.197':445
- '80.#75.7.26':445
- '80.##5.68.41':445
- '80.##5.184.21':445
- '80.##5.83.21':445
- '80.##5.146.61':445
- '80.##5.10.20':445
- '80.##5.15.121':445
- '80.##5.215.47':445
- '80.##5.190.68':445
- '80.##5.201.201':445
- '80.##5.241.245':445
- '80.##5.93.150':445
- '80.##5.170.63':445
- '80.##5.184.85':445
- '80.##5.83.40':445
- '80.##5.8.210':139
- '80.##5.12.123':445
- '80.##5.200.53':445
- '80.##5.94.164':445
- '80.##5.164.85':445
- '80.##5.8.180':445
- '80.##5.10.111':445
- '80.##5.55.55':445
- '80.##5.97.45':445
- '80.##5.236.142':445
- '80.##5.140.21':445
- '80.##5.179.139':445
- '80.##5.178.194':445
- '80.##5.193.199':445
- '80.##5.167.218':445
- '80.##5.254.222':445
- '80.##5.22.27':445
- '80.##5.8.210':445
- '80.##5.231.136':445
- '80.##5.124.165':445
- '80.##5.165.138':445
- '80.##5.255.245':445
- '80.##5.141.214':445
- '80.##5.144.141':445
- '80.##5.211.144':445
- '80.##5.108.91':445
- '80.##5.126.108':445
- '80.##5.155.36':445
- '80.#75.52.9':445
- '80.##5.114.89':445
- '80.##5.126.94':445
- '80.##5.35.208':445
- '80.##5.39.133':445
- '80.#75.9.56':445
- '80.##5.22.27':139
- '80.##5.83.21':139
- '80.##5.146.61':139
- '80.##5.12.197':139
- '80.##5.8.180':139
- '80.##5.93.150':139
- '80.##5.184.21':139
- '80.##5.201.201':139
- '80.##5.241.245':139
- '80.##5.10.20':139
- '80.#75.7.26':139
- '80.##5.68.41':139
- '80.##5.190.68':139
- '80.##5.164.85':139
- '80.##5.12.123':139
- '80.##5.200.53':139
- '80.##5.170.63':139
- '80.##5.52.219':139
- '80.##5.123.26':445
- '80.##5.52.219':445
- '80.##5.55.55':139
- '80.##5.97.45':139
- '80.##5.94.164':139
- '80.##5.184.85':139
- '80.##5.83.40':139
- '80.##5.10.111':139
- '80.##5.193.199':139
- '80.##5.167.218':139
- '80.##5.236.142':139
- '80.##5.126.94':139
- '80.##5.255.245':139
- '80.##5.178.194':139
- '80.##5.124.165':139
- '80.##5.165.138':139
- '80.##5.254.222':139
- '80.##5.140.21':139
- '80.##5.179.139':139
- '80.##5.231.136':139
- '80.##5.114.89':139
- '80.##5.126.108':139
- '80.##5.155.36':139
- '80.##5.141.214':139
- '80.##5.15.121':139
- '80.##5.215.47':139
- '80.##5.108.91':139
- '80.##5.39.133':139
- '80.#75.9.56':139
- '80.#75.52.9':139
- '80.##5.144.141':139
- '80.##5.211.144':139
- '80.##5.35.208':139
- '80.##5.1.157':139
- '80.##5.172.40':445
- '80.##5.118.253':445
- '80.##5.118.171':445
- '80.##5.141.98':445
- '80.##5.157.157':445
- '80.##5.40.228':445
- '80.##5.213.216':445
- '80.##5.236.182':445
- '80.##5.76.29':445
- '80.##5.123.69':445
- '80.##5.196.174':445
- '80.##5.216.230':445
- '80.##5.137.157':445
- '80.##5.56.231':445
- '80.##5.209.94':445
- '80.##5.210.22':445
- '80.##5.181.122':445
- '80.##5.94.165':445
- '80.##5.42.93':445
- '80.##5.26.205':445
- '80.##5.182.70':445
- '80.##5.215.227':445
- '80.##5.98.144':445
- '80.##5.88.144':445
- '80.##5.62.21':445
- '80.##5.9.155':445
- '80.##5.127.0':445
- '80.##5.36.41':445
- '80.##5.183.38':445
- '80.##5.128.224':445
- '80.##5.122.203':445
- '80.##5.52.214':445
- '80.##5.196.199':445
- '80.##5.132.196':445
- '80.##5.155.188':445
- '80.##5.59.171':445
- '80.##5.200.37':445
- '80.##5.8.160':445
- '80.##5.80.151':445
- '80.##5.88.54':445
- '80.##5.32.191':445
- '80.##5.52.31':445
- '80.##5.18.191':445
- '80.##5.59.84':445
- '80.##5.20.171':445
- '80.##5.171.123':445
- '80.##5.35.240':445
- '80.##5.220.35':445
- '80.##5.222.219':445
- '80.##5.133.239':445
- '80.##5.6.133':139
- '80.##5.172.40':139
- '80.##5.118.171':139
- '80.##5.118.253':139
- '80.##5.141.98':139
- '80.##5.157.157':139
- '80.##5.40.228':139
- '80.##5.213.216':139
- '80.##5.236.182':139
- '80.##5.76.29':139
- '80.##5.123.69':139
- '80.##5.196.174':139
- '80.##5.216.230':139
- '80.##5.137.157':139
- '80.##5.181.122':139
- '80.##5.42.93':139
- '80.##5.98.144':139
- '80.##5.56.231':139
- '80.##5.62.21':139
- '80.##5.210.22':139
- '80.##5.26.205':139
- '80.##5.182.70':139
- '80.##5.215.227':139
- '80.##5.88.144':139
- '80.##5.94.165':139
- '80.##5.209.94':139
- '80.##5.9.155':139
- '80.##5.127.0':139
- '80.##5.36.41':139
- '80.##5.183.38':139
- '80.##5.128.224':139
- '80.##5.122.203':139
- '80.##5.200.37':139
- '80.##5.196.199':139
- '80.##5.132.196':139
- '80.##5.155.188':139
- '80.##5.59.171':139
- '80.##5.52.214':139
- '80.##5.8.160':139
- '80.##5.80.151':139
- '80.##5.88.54':139
- '80.##5.32.191':139
- '80.##5.52.31':139
- '80.##5.18.191':139
- '80.##5.59.84':139
- '80.##5.171.123':139
- '80.##5.20.171':139
- '80.##5.35.240':139
- '80.##5.220.35':139
- '80.##5.222.219':139
- '80.##5.133.239':139
- '80.##5.19.77':445
- '80.##5.188.80':445
- '80.##5.147.173':445
- '80.##5.223.112':445
- '80.##5.136.223':445
- '80.##5.40.137':445
- '80.##5.80.54':445
- '80.##5.35.41':445
- '80.##5.107.153':445
- '80.##5.127.147':445
- '80.##5.234.6':445
- '80.##5.53.225':445
- '80.##5.251.3':445
- '80.##5.172.100':445
- '80.#75.6.82':445
- '80.##5.28.214':445
- '80.#75.2.7':445
- '80.##5.202.104':445
- '80.#75.5.86':445
- '80.##5.78.217':445
- '80.##5.99.79':445
- '80.##5.173.9':445
- '80.##5.148.101':445
- '80.##5.152.37':445
- '80.##5.216.151':445
- '80.##5.106.21':445
- '80.##5.164.177':445
- '80.##5.74.107':445
- '80.##5.109.50':445
- '80.##5.54.252':445
- '80.##5.28.13':445
- '80.##5.94.93':445
- '80.##5.181.217':445
- '80.##5.93.181':139
- '80.##5.201.203':445
- '80.##5.13.15':445
- '80.##5.71.192':445
- '80.##5.179.29':445
- '80.##5.164.41':445
- '80.##5.41.45':445
- '80.##5.22.180':445
- '80.##5.189.227':445
- '80.##5.100.218':445
- '80.##5.174.237':445
- '80.##5.24.119':445
- '80.##5.79.111':445
- '80.##5.247.15':445
- '80.##5.220.116':445
- '80.##5.81.220':445
- '80.##5.66.221':445
- '80.##5.181.217':139
- '80.##5.136.223':139
- '80.##5.40.137':139
- '80.##5.19.77':139
- '80.##5.173.9':139
- '80.##5.251.3':139
- '80.##5.223.112':139
- '80.##5.234.6':139
- '80.##5.53.225':139
- '80.##5.80.54':139
- '80.##5.188.80':139
- '80.##5.147.173':139
- '80.##5.127.147':139
- '80.##5.99.79':139
- '80.##5.202.104':139
- '80.#75.5.86':139
- '80.##5.172.100':139
- '80.##5.6.133':445
- '80.##5.196.199':9988
- '80.#75.2.7':139
- '80.##5.152.37':139
- '80.##5.216.151':139
- '80.##5.78.217':139
- '80.#75.6.82':139
- '80.##5.28.214':139
- '80.##5.148.101':139
- '80.##5.54.252':139
- '80.##5.28.13':139
- '80.##5.106.21':139
- '80.##5.247.15':139
- '80.##5.179.29':139
- '80.##5.109.50':139
- '80.##5.13.15':139
- '80.##5.71.192':139
- '80.##5.94.93':139
- '80.##5.164.177':139
- '80.##5.74.107':139
- '80.##5.201.203':139
- '80.##5.79.111':139
- '80.##5.100.218':139
- '80.##5.174.237':139
- '80.##5.41.45':139
- '80.##5.35.41':139
- '80.##5.107.153':139
- '80.##5.189.227':139
- '80.##5.81.220':139
- '80.##5.66.221':139
- '80.##5.24.119':139
- '80.##5.164.41':139
- '80.##5.22.180':139
- '80.##5.220.116':139