Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##8.87.46':445
- '72.##8.62.241':445
- '72.##8.96.39':445
- '72.#68.7.97':445
- '72.##8.158.219':445
- '72.##8.93.129':445
- '72.##8.53.203':445
- '72.##8.169.201':445
- '72.##8.189.3':445
- '72.##8.218.136':139
- '72.##8.154.218':139
- '72.##8.140.185':139
- '72.##8.143.37':139
- '72.##8.63.180':445
- '72.##8.4.194':445
- '72.##8.127.50':445
- '72.##8.95.164':445
- '72.##8.63.133':445
- '72.##8.153.53':445
- '72.##8.140.185':445
- '72.##8.197.203':445
- '72.##8.107.96':445
- '72.##8.154.218':445
- '72.##8.197.223':139
- '72.##8.143.37':445
- '72.##8.218.136':445
- '72.##8.248.130':445
- '72.##8.130.139':445
- '72.##8.147.130':445
- '72.##8.128.254':445
- '72.##8.220.25':445
- '72.##8.39.141':445
- '72.##8.14.45':445
- '72.##8.214.167':445
- '72.##8.151.213':445
- '72.##8.153.53':139
- '72.##8.95.164':139
- '72.##8.63.180':139
- '72.##8.231.176':445
- '72.##8.127.50':139
- '72.##8.96.39':139
- '72.#68.7.97':139
- '72.##8.4.194':139
- '72.##8.189.3':139
- '72.##8.176.164':445
- '72.##8.174.220':445
- '72.##8.81.174':445
- '72.##8.251.121':445
- '72.##8.220.188':445
- '72.##8.3.223':445
- '72.##8.165.3':445
- '72.##8.91.62':445
- '72.##8.99.81':445
- '72.##8.87.46':139
- '72.##8.151.213':139
- '72.##8.39.141':139
- '72.##8.147.130':139
- '72.##8.214.167':139
- '72.##8.197.203':139
- '72.##8.107.96':139
- '72.##8.14.45':139
- '72.##8.248.130':139
- '72.##8.130.139':139
- '72.##8.169.201':139
- '72.##8.158.219':139
- '72.##8.62.241':139
- '72.##8.53.203':139
- '72.##8.128.254':139
- '72.##8.220.25':139
- '72.##8.93.129':139
- '72.##8.63.133':139
- '72.##8.22.24':139
- '72.##8.66.22':139
- '72.##8.120.107':139
- '72.##8.191.118':139
- '72.##8.71.155':139
- '72.##8.97.175':139
- '72.##8.97.135':139
- '72.##8.77.164':139
- '72.##8.128.147':139
- '72.##8.67.222':445
- '72.##8.6.115':445
- '72.##8.112.47':445
- '72.##8.245.111':445
- '72.##8.62.132':139
- '72.##8.137.62':139
- '72.##8.74.104':445
- '72.##8.132.74':139
- '72.##8.104.97':139
- '72.##8.211.181':139
- '72.##8.58.32':139
- '72.##8.107.228':139
- '72.##8.144.126':139
- '72.##8.240.146':139
- '72.##8.100.240':139
- '72.##8.56.135':139
- '72.##8.147.122':139
- '72.##8.65.18':139
- '72.##8.88.101':139
- '72.##8.234.17':139
- '72.##8.46.77':139
- '72.##8.101.5':139
- '72.##8.124.237':139
- '72.##8.236.92':139
- '72.##8.54.73':139
- '72.##8.203.187':139
- '72.##8.9.205':445
- '72.##8.23.152':139
- '72.##8.140.125':139
- '72.##8.216.153':139
- '72.##8.180.216':139
- '72.##8.112.47':139
- '72.##8.245.111':139
- '72.##8.125.150':139
- '72.##8.9.205':139
- '72.##8.19.64':139
- '72.##8.1.202':139
- '72.##8.245.154':139
- '72.##8.147.252':139
- '72.##8.13.164':139
- '72.#68.6.1':139
- '72.##8.195.89':139
- '72.##8.173.51':139
- '72.##8.234.67':139
- '72.##8.67.222':139
- '72.##8.19.64':445
- '72.##8.216.153':445
- '72.#68.6.1':445
- '72.##8.195.89':445
- '72.##8.140.125':445
- '72.##8.125.150':445
- '72.##8.180.216':445
- '72.##8.23.152':445
- '72.##8.234.67':445
- '72.##8.197.223':445
- '72.##8.147.252':445
- '72.##8.6.115':139
- '72.##8.74.104':139
- '72.##8.245.154':445
- '72.##8.173.51':445
- '72.##8.13.164':445
- '72.##8.1.202':445
- '72.##8.104.153':445
- '72.##8.194.70':139
- '72.##8.22.220':139
- '72.##8.50.237':139
- '72.##8.28.64':139
- '72.#68.87.4':445
- '72.##8.93.21':445
- '72.##8.192.22':139
- '72.##8.123.48':139
- '72.##8.178.17':139
- '72.##8.173.67':139
- '72.##8.242.11':139
- '72.##8.232.162':139
- '72.##8.49.149':139
- '72.##8.127.183':139
- '72.##8.17.128':139
- '72.##8.189.241':139
- '72.##8.46.58':139
- '72.##8.247.160':445
- '72.##8.216.205':445
- '72.##8.171.18':445
- '72.##8.97.68':445
- '72.##8.148.98':445
- '72.##8.50.235':445
- '72.##8.86.51':445
- '72.##8.155.21':445
- '72.##8.51.204':445
- '72.##8.87.24':445
- '72.##8.32.94':445
- '72.#68.47.0':445
- '72.##8.93.63':445
- '72.##8.240.141':445
- '72.##8.28.96':445
- '72.##8.254.13':445
- '72.##8.61.66':445
- '72.##8.168.139':445
- '72.##8.62.42':139
- '72.##8.87.24':139
- '72.##8.97.68':139
- '72.##8.28.96':139
- '72.##8.254.13':139
- '72.##8.171.18':139
- '72.##8.155.21':139
- '72.##8.148.98':139
- '72.##8.216.205':139
- '72.##8.168.139':139
- '72.##8.247.160':139
- '72.##8.93.63':139
- '72.##8.93.21':139
- '72.#68.87.4':139
- '72.#68.47.0':139
- '72.##8.61.66':139
- '72.##8.240.141':139
- '72.##8.32.94':139
- '72.##8.51.204':139
- '72.##8.26.118':139
- '72.#68.61.4':139
- '72.##8.98.88':139
- '72.##8.191.98':139
- '72.##8.51.195':139
- '72.##8.239.203':139
- '72.##8.98.97':139
- '72.##8.118.213':139
- '72.##8.195.55':139
- '72.##8.10.86':139
- '72.##8.82.10':139
- '72.##8.50.235':139
- '72.##8.86.51':139
- '72.##8.190.55':139
- '72.##8.115.164':139
- '72.##8.56.151':139
- '72.##8.55.188':139
- '72.##8.62.42':9988
- '72.##8.46.83':139
- '72.##8.191.98':9988
- '72.##8.232.162':9988
- '72.##8.86.56':139
- '72.##8.19.108':139
- '72.##8.10.153':139
- '72.##8.19.213':139
- '72.##8.55.188':9988
- '72.##8.254.13':9988
- '72.##8.97.68':9988
- '72.##8.32.94':9988
- '72.#68.47.0':9988
- '72.##8.50.235':9988
- '72.##8.10.86':9988
- '72.##8.148.98':9988
- '72.##8.216.205':9988
- '72.##8.153.129':139
- '72.##8.46.83':445
- '72.##8.10.153':445
- '72.##8.176.164':139
- '72.##8.231.176':139
- '72.##8.19.108':445
- '72.##8.153.129':445
- '72.##8.19.213':445
- '72.##8.86.56':445
- '72.##8.165.3':139
- '72.##8.220.188':139
- '72.##8.174.220':139
- '72.##8.104.153':139
- '72.##8.251.121':139
- '72.##8.99.81':139
- '72.##8.3.223':139
- '72.##8.81.174':139
- '72.##8.91.62':139
- '72.##8.240.141':9988
- '72.##8.98.97':445
- '72.##8.118.213':445
- '72.##8.26.118':445
- '72.#68.61.4':445
- '72.##8.62.42':445
- '72.##8.232.162':445
- '72.##8.51.195':445
- '72.##8.239.203':445
- '72.##8.191.98':445
- '72.##8.56.151':445
- '72.##8.55.188':445
- '72.##8.10.86':445
- '72.##8.82.10':445
- '72.##8.195.55':445
- '72.##8.98.88':445
- '72.##8.190.55':445
- '72.##8.115.164':445
- '72.##8.49.149':445
- '72.##8.192.22':445
- '72.##8.123.48':445
- '72.##8.194.70':445
- '72.##8.22.220':445
- '72.##8.247.160':9988
- '72.#68.87.4':9988
- '72.##8.93.21':9988
- '72.##8.93.63':9988
- '72.##8.28.64':445
- '72.##8.189.241':445
- '72.##8.46.58':445
- '72.##8.173.67':445
- '72.##8.242.11':445
- '72.##8.178.17':445
- '72.##8.50.237':445
- '72.##8.127.183':445
- '72.##8.17.128':445