Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '68.##6.164.3':445
- '68.##6.44.229':445
- '68.##6.234.154':445
- '68.##6.34.23':445
- '68.##6.72.195':445
- '68.##6.236.119':445
- '68.##6.38.71':445
- '68.##6.15.73':445
- '68.##6.104.32':445
- '68.##6.105.231':139
- '68.##6.243.198':139
- '68.##6.95.164':139
- '68.##6.36.96':139
- '68.##6.20.31':139
- '68.##6.194.68':445
- '68.##6.90.133':445
- '68.##6.251.234':139
- '68.##6.79.121':445
- '68.##6.123.107':445
- '68.##6.194.37':445
- '68.##6.217.203':445
- '68.##6.173.104':445
- '68.##6.120.32':445
- '68.##6.247.18':445
- '68.##6.109.159':445
- '68.##6.115.164':445
- '68.##6.192.135':445
- '68.##6.201.171':445
- '68.##6.154.147':445
- '68.##6.179.200':445
- '68.##6.3.180':445
- '68.##6.44.85':445
- '68.##6.72.168':445
- '68.##6.176.48':445
- '68.##6.96.206':445
- '68.##6.97.95':445
- '68.##6.97.95':139
- '68.##6.72.168':139
- '68.##6.44.85':139
- '68.##6.96.206':139
- '68.##6.176.48':139
- '68.##6.123.107':139
- '68.##6.194.37':139
- '68.##6.217.203':139
- '68.##6.173.104':139
- '68.##6.104.32':139
- '68.##6.236.119':139
- '68.##6.72.195':139
- '68.##6.15.73':139
- '68.##6.38.71':139
- '68.##6.201.171':139
- '68.##6.154.147':139
- '68.##6.179.200':139
- '68.##6.3.180':139
- '68.##6.152.99':139
- '68.##6.154.152':139
- '68.##6.63.146':139
- '68.##6.205.212':139
- '68.##6.121.41':139
- '68.##6.195.11':139
- '68.##6.75.70':139
- '68.##6.255.134':139
- '68.##6.25.171':139
- '68.##6.192.135':139
- '68.##6.247.18':139
- '68.##6.120.32':139
- '68.##6.115.164':139
- '68.##6.109.159':139
- '68.##6.57.248':139
- '68.##6.203.133':139
- '68.##6.104.72':139
- '68.##6.156.189':139
- '68.##6.182.72':139
- '68.##6.91.219':139
- '68.##6.57.12':139
- '68.##6.168.148':139
- '68.##6.148.91':139
- '68.#96.7.27':139
- '68.##6.120.80':139
- '68.##6.9.190':139
- '68.##6.130.5':139
- '68.##6.207.238':139
- '68.##6.198.207':139
- '68.##6.26.171':139
- '68.##6.193.20':139
- '68.##6.33.125':139
- '68.##6.211.243':139
- '68.##6.197.28':139
- '68.##6.79.246':139
- '68.##6.124.138':139
- '68.##6.224.231':139
- '68.##6.118.219':139
- '68.##6.36.122':139
- '68.##6.196.17':139
- '68.##6.59.143':139
- '68.##6.142.191':139
- '68.##6.113.201':139
- '68.##6.171.176':139
- '68.##6.191.88':139
- '68.##6.119.55':139
- '68.#96.55.9':139
- '68.##6.220.141':139
- '68.##6.13.243':139
- '68.##6.164.93':139
- '68.##6.125.78':139
- '68.##6.24.119':139
- '68.##6.198.143':139
- '68.##6.14.168':139
- '68.##6.195.11':445
- '68.##6.75.70':445
- '68.##6.255.134':445
- '68.##6.25.171':445
- '68.##6.95.164':445
- '68.##6.243.198':445
- '68.##6.20.31':445
- '68.##6.36.96':445
- '68.##6.105.231':445
- '68.##6.57.248':445
- '68.##6.203.133':445
- '68.##6.104.72':445
- '68.##6.156.189':445
- '68.##6.63.146':445
- '68.##6.154.152':445
- '68.##6.121.41':445
- '68.##6.205.212':445
- '68.##6.152.99':445
- '68.##6.170.43':139
- '68.##6.14.55':139
- '68.##6.249.209':139
- '68.##6.202.151':139
- '68.##6.135.214':139
- '68.##6.146.104':139
- '68.##6.62.65':139
- '68.##6.68.62':139
- '68.##6.46.80':139
- '68.#96.8.53':139
- '68.##6.68.251':445
- '68.##6.251.234':445
- '68.##6.68.251':139
- '68.#96.8.53':445
- '68.##6.35.231':139
- '68.##6.209.223':139
- '68.##6.75.21':139
- '68.##6.5.188':139
- '68.##6.44.229':139
- '68.##6.155.46':139
- '68.##6.37.127':139
- '68.##6.206.158':139
- '68.##6.45.207':139
- '68.##6.151.218':139
- '68.##6.196.106':445
- '68.##6.57.153':445
- '68.##6.190.106':139
- '68.##6.18.199':445
- '68.##6.41.35':139
- '68.##6.29.89':139
- '68.##6.245.108':139
- '68.##6.213.165':139
- '68.##6.51.208':139
- '68.##6.251.28':139
- '68.##6.19.211':139
- '68.##6.3.168':139
- '68.##6.29.155':139
- '68.##6.22.71':445
- '68.##6.225.67':445
- '68.##6.26.133':445
- '68.##6.163.217':445
- '68.##6.55.191':445
- '68.##6.25.136':445
- '68.##6.240.72':445
- '68.##6.8.202':445
- '68.##6.78.157':445
- '68.##6.228.236':445
- '68.##6.25.245':445
- '68.##6.121.242':445
- '68.##6.157.183':445
- '68.##6.68.58':445
- '68.##6.184.43':445
- '68.##6.133.104':445
- '68.##6.150.164':445
- '68.##6.222.150':445
- '68.##6.133.104':139
- '68.##6.26.133':139
- '68.##6.222.150':139
- '68.##6.184.43':139
- '68.##6.163.217':139
- '68.##6.55.191':139
- '68.##6.8.202':139
- '68.##6.22.71':139
- '68.##6.225.67':139
- '68.##6.57.153':139
- '68.##6.121.242':139
- '68.##6.18.199':139
- '68.##6.196.106':139
- '68.##6.157.183':139
- '68.##6.68.58':139
- '68.##6.150.164':139
- '68.##6.228.236':139
- '68.##6.25.245':139
- '68.##6.226.4':139
- '68.##6.182.35':139
- '68.##6.224.44':139
- '68.#96.5.64':139
- '68.##6.59.214':139
- '68.##6.97.143':139
- '68.##6.224.160':139
- '68.##6.21.59':139
- '68.##6.52.56':139
- '68.##6.240.72':139
- '68.##6.26.173':139
- '68.##6.78.157':139
- '68.##6.25.136':139
- '68.##6.16.84':139
- '68.##6.49.98':139
- '68.##6.223.48':139
- '68.##6.42.180':139
- '68.##6.98.85':139
- '68.##6.98.85':9988
- '68.##6.150.164':9988
- '68.##6.97.143':9988
- '68.##6.25.245':9988
- '68.##6.57.153':9988
- '68.##6.198.97':139
- '68.##6.144.103':139
- '68.##6.26.133':9988
- '68.##6.157.183':9988
- '68.##6.55.191':9988
- '68.##6.42.180':9988
- '68.##6.68.58':9988
- '68.##6.18.199':9988
- '68.##6.223.48':9988
- '68.##6.163.217':9988
- '68.##6.196.106':9988
- '68.##6.78.157':9988
- '68.##6.8.202':9988
- '68.##6.134.181':445
- '68.##6.79.121':139
- '68.##6.134.181':139
- '68.##6.245.233':445
- '68.##6.194.68':139
- '68.##6.34.23':139
- '68.##6.164.3':139
- '68.##6.90.133':139
- '68.##6.234.154':139
- '68.##6.234.48':139
- '68.##6.144.103':445
- '68.##6.42.103':139
- '68.##6.177.159':139
- '68.##6.198.97':445
- '68.##6.234.48':445
- '68.##6.245.233':139
- '68.##6.42.103':445
- '68.##6.177.159':445
- '68.##6.21.59':445
- '68.##6.52.56':445
- '68.##6.182.35':445
- '68.##6.59.214':445
- '68.##6.97.143':445
- '68.##6.213.165':445
- '68.##6.41.35':445
- '68.##6.224.160':445
- '68.##6.245.108':445
- '68.##6.42.180':445
- '68.##6.98.85':445
- '68.##6.26.173':445
- '68.##6.16.84':445
- '68.##6.49.98':445
- '68.#96.5.64':445
- '68.##6.226.4':445
- '68.##6.223.48':445
- '68.##6.224.44':445
- '68.##6.190.106':445
- '68.##6.222.150':9988
- '68.##6.37.127':445
- '68.##6.151.218':445
- '68.##6.121.242':9988
- '68.##6.26.173':9988
- '68.##6.25.136':9988
- '68.##6.225.67':9988
- '68.##6.133.104':9988
- '68.##6.3.168':445
- '68.##6.29.155':445
- '68.##6.29.89':445
- '68.##6.51.208':445
- '68.##6.251.28':445
- '68.##6.45.207':445
- '68.##6.155.46':445
- '68.##6.19.211':445
- '68.##6.206.158':445