Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '88.##6.16.148':445
- '88.##6.86.16':445
- '88.##6.147.69':445
- '88.##6.255.22':445
- '88.##6.18.61':445
- '88.##6.164.23':445
- '88.##6.106.195':445
- '88.##6.231.193':445
- '88.##6.9.112':445
- '88.##6.82.152':445
- '88.##6.23.49':445
- '88.##6.57.79':445
- '88.##6.21.146':445
- '88.##6.175.33':445
- '88.#96.5.45':445
- '88.##6.93.169':445
- '88.##6.0.188':445
- '88.##6.74.164':445
- '88.##6.51.251':445
- '88.##6.254.81':445
- '88.##6.137.212':445
- '88.##6.101.226':445
- '88.##6.33.102':139
- '88.##6.145.136':139
- '88.##6.74.244':139
- '88.##6.193.46':139
- '88.##6.211.89':139
- '88.##6.121.98':139
- '88.##6.29.247':139
- '88.##6.0.130':139
- '88.##6.230.200':139
- '88.##6.78.167':139
- '88.##6.199.69':139
- '88.##6.173.123':139
- '88.##6.26.94':139
- '88.##6.122.242':139
- '88.##6.170.101':445
- '88.##6.242.170':445
- '88.##6.26.94':445
- '88.##6.153.19':445
- '88.##6.173.123':445
- '88.##6.153.19':139
- '88.##6.122.242':445
- '88.##6.231.193':139
- '88.##6.164.23':139
- '88.##6.82.152':139
- '88.##6.86.16':139
- '88.##6.9.112':139
- '88.##6.242.170':139
- '88.##6.74.28':445
- '88.##6.170.101':139
- '88.##6.106.195':139
- '88.##6.101.226':139
- '88.##6.16.148':139
- '88.##6.51.251':139
- '88.##6.0.188':139
- '88.##6.137.212':139
- '88.##6.21.146':139
- '88.##6.254.81':139
- '88.##6.18.61':139
- '88.##6.147.69':139
- '88.##6.255.22':139
- '88.##6.74.164':139
- '88.##6.23.49':139
- '88.##6.13.124':445
- '88.##6.67.49':445
- '88.##6.88.67':445
- '88.##6.49.56':445
- '88.##6.58.157':445
- '88.##6.216.14':445
- '88.##6.15.33':445
- '88.##6.142.172':445
- '88.##6.39.175':445
- '88.##6.102.115':445
- '88.##6.96.59':445
- '88.##6.86.15':445
- '88.##6.128.136':445
- '88.##6.14.14':445
- '88.##6.143.68':445
- '88.##6.115.240':445
- '88.##6.200.121':445
- '88.##6.99.169':445
- '88.##6.10.79':445
- '88.##6.206.232':445
- '88.##6.43.158':445
- '88.##6.221.54':445
- '88.##6.236.11':139
- '88.##6.226.211':445
- '88.##6.58.56':445
- '88.##6.59.79':445
- '88.##6.16.205':445
- '88.##6.40.149':445
- '88.##6.226.76':445
- '88.##6.192.179':445
- '88.##6.9.241':445
- '88.##6.182.87':445
- '88.##6.240.117':445
- '88.##6.10.122':445
- '88.##6.236.11':445
- '88.##6.78.212':445
- '88.##6.29.247':445
- '88.##6.0.130':445
- '88.##6.121.98':445
- '88.##6.172.134':445
- '88.##6.231.240':445
- '88.##6.135.36':445
- '88.##6.187.78':445
- '88.##6.67.34':445
- '88.##6.172.192':445
- '88.##6.144.55':445
- '88.##6.144.12':445
- '88.##6.75.98':445
- '88.##6.201.0':445
- '88.##6.207.71':445
- '88.##6.136.161':139
- '88.##6.75.24':139
- '88.##6.177.151':139
- '88.##6.231.170':445
- '88.##6.69.56':139
- '88.##6.213.251':445
- '88.##6.16.60':445
- '88.##6.25.48':445
- '88.##6.248.92':445
- '88.##6.24.172':445
- '88.##6.204.79':445
- '88.##6.50.240':445
- '88.##6.37.90':445
- '88.##6.97.46':445
- '88.##6.197.148':445
- '88.##6.67.20':445
- '88.##6.9.241':139
- '88.##6.226.76':139
- '88.##6.240.117':139
- '88.##6.58.56':139
- '88.##6.182.87':139
- '88.##6.204.79':139
- '88.##6.248.92':139
- '88.##6.24.172':139
- '88.##6.192.179':139
- '88.##6.172.192':139
- '88.##6.226.211':139
- '88.##6.135.36':139
- '88.##6.172.134':139
- '88.##6.67.34':139
- '88.##6.78.212':139
- '88.##6.187.78':139
- '88.##6.40.149':139
- '88.##6.59.79':139
- '88.##6.16.205':139
- '88.##6.231.240':139
- '88.##6.10.122':139
- '88.##6.16.60':139
- '88.##6.193.46':445
- '88.##6.211.89':445
- '88.##6.199.69':445
- '88.##6.144.12':139
- '88.##6.231.170':139
- '88.##6.230.200':445
- '88.##6.78.167':445
- '88.##6.145.136':445
- '88.##6.74.244':445
- '88.##6.33.102':445
- '88.##6.144.55':139
- '88.##6.97.46':139
- '88.##6.50.240':139
- '88.##6.67.20':139
- '88.##6.25.48':139
- '88.##6.197.148':139
- '88.##6.207.71':139
- '88.##6.75.98':139
- '88.##6.201.0':139
- '88.##6.37.90':139
- '88.##6.213.251':139
- '88.##6.57.79':139
- '88.##6.171.252':445
- '88.##6.48.254':445
- '88.##6.83.235':445
- '88.##6.251.33':445
- '88.##6.63.74':445
- '88.##6.124.37':445
- '88.##6.203.84':445
- '88.##6.14.140':445
- '88.#96.1.28':445
- '88.##6.145.198':445
- '88.##6.216.192':445
- '88.##6.147.193':139
- '88.##6.36.148':139
- '88.##6.186.193':139
- '88.##6.216.228':139
- '88.##6.18.169':139
- '88.##6.21.237':445
- '88.##6.55.128':445
- '88.##6.25.108':139
- '88.##6.81.77':139
- '88.##6.69.139':139
- '88.##6.253.144':445
- '88.##6.217.252':445
- '88.##6.234.182':445
- '88.##6.42.106':445
- '88.##6.252.150':445
- '88.##6.51.193':445
- '88.##6.53.196':445
- '88.##6.252.214':445
- '88.##6.145.46':445
- '88.#96.5.99':445
- '88.##6.181.251':445
- '88.##6.252.119':445
- '88.##6.60.123':445
- '88.##6.102.124':445
- '88.##6.249.36':445
- '88.##6.67.232':445
- '88.##6.123.83':445
- '88.##6.171.96':445
- '88.##6.75.79':445
- '88.##6.112.69':445
- '88.##6.22.102':445
- '88.##6.115.162':445
- '88.##6.67.232':139
- '88.##6.123.83':139
- '88.##6.253.144':139
- '88.##6.124.37':139
- '88.##6.203.84':139
- '88.##6.22.102':139
- '88.##6.115.162':139
- '88.##6.102.124':139
- '88.##6.249.36':139
- '88.##6.60.123':139
- '88.##6.14.140':139
- '88.##6.251.33':139
- '88.##6.63.74':139
- '88.##6.216.192':139
- '88.##6.21.237':139
- '88.##6.55.128':139
- '88.#96.1.28':139
- '88.##6.145.198':139
- '88.##6.48.254':139
- '88.##6.83.235':139
- '88.##6.171.252':139
- '88.##6.112.69':139
- '88.##6.43.47':139
- '88.##6.254.132':139
- '88.##6.118.253':139
- '88.##6.53.196':139
- '88.##6.252.214':139
- '88.##6.43.10':139
- '88.##6.155.152':139
- '88.##6.105.59':139
- '88.##6.233.254':139
- '88.##6.58.233':139
- '88.##6.145.46':139
- '88.##6.252.150':139
- '88.##6.51.193':139
- '88.##6.252.119':139
- '88.##6.171.96':139
- '88.##6.75.79':139
- '88.#96.5.99':139
- '88.##6.181.251':139
- '88.##6.234.182':139
- '88.##6.42.106':139
- '88.##6.217.252':139
- '88.##6.118.253':445
- '88.##6.248.206':445
- '88.##6.237.76':445
- '88.##6.31.62':445
- '88.##6.237.76':139
- '88.##6.95.67':139
- '88.##6.115.240':139
- '88.##6.200.121':139
- '88.##6.13.124':139
- '88.##6.95.67':445
- '88.##6.74.28':139
- '88.##6.248.206':139
- '88.##6.62.212':445
- '88.##6.79.121':445
- '88.##6.114.110':445
- '88.##6.186.250':445
- '88.##6.43.78':445
- '88.#96.18.0':445
- '88.##6.31.62':139
- '88.##6.95.123':445
- '88.##6.47.77':445
- '88.##6.219.5':445
- '88.##6.143.68':139
- '88.##6.96.59':139
- '88.##6.39.175':139
- '88.##6.102.115':139
- '88.##6.67.49':139
- '88.##6.88.67':139
- '88.##6.93.169':139
- '88.##6.175.33':139
- '88.#96.5.45':139
- '88.##6.15.33':139
- '88.##6.142.172':139
- '88.##6.49.56':139
- '88.##6.221.54':139
- '88.##6.206.232':139
- '88.##6.43.158':139
- '88.##6.128.136':139
- '88.##6.14.14':139
- '88.##6.58.157':139
- '88.##6.216.14':139
- '88.##6.86.15':139
- '88.##6.99.169':139
- '88.##6.10.79':139
- '88.##6.25.108':445
- '88.##6.171.96':9988
- '88.##6.69.139':445
- '88.##6.36.148':445
- '88.##6.81.77':445
- '88.##6.251.33':9988
- '88.#96.1.28':9988
- '88.##6.253.144':9988
- '88.##6.67.232':9988
- '88.##6.115.162':9988
- '88.##6.147.193':445
- '88.##6.58.233':445
- '88.##6.105.59':445
- '88.##6.233.254':445
- '88.##6.43.47':445
- '88.##6.254.132':445
- '88.##6.18.169':445
- '88.##6.186.193':445
- '88.##6.216.228':445
- '88.##6.43.10':445
- '88.##6.155.152':445
- '88.##6.48.254':9988
- '88.##6.114.110':139
- '88.##6.62.212':139
- '88.##6.43.78':139
- '88.##6.216.192':9988
- '88.##6.186.250':139
- '88.##6.95.123':139
- '88.#96.18.0':139
- '88.##6.219.5':139
- '88.##6.79.121':139
- '88.##6.47.77':139
- '88.##6.145.198':9988
- '88.##6.249.36':9988
- '88.##6.217.252':9988
- '88.##6.14.140':9988
- '88.##6.63.74':9988
- '88.##6.42.106':9988
- '88.#96.5.99':9988
- '88.##6.203.84':9988
- '88.##6.55.128':9988
- '88.##6.102.124':9988
- '88.##6.60.123':9988