Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '12.##6.178.79':445
- '12.##6.25.57':445
- '12.##6.33.34':445
- '12.##6.44.95':445
- '12.##6.71.45':445
- '12.##6.195.207':445
- '12.##6.79.33':445
- '12.##6.156.102':445
- '12.##6.56.185':445
- '12.##6.24.81':445
- '12.##6.169.141':445
- '12.##6.50.11':445
- '12.##6.112.79':445
- '12.##6.63.167':139
- '12.##6.170.30':445
- '12.##6.91.206':445
- '12.##6.34.180':139
- '12.##6.146.140':139
- '12.##6.122.190':139
- '12.##6.122.251':445
- '12.##6.142.84':445
- '12.##6.185.225':445
- '12.##6.83.115':445
- '12.##6.168.125':445
- '12.##6.213.75':445
- '12.##6.242.167':445
- '12.##6.89.35':445
- '12.##6.128.162':445
- '12.##6.17.212':445
- '12.##6.14.55':445
- '12.##6.14.53':445
- '12.##6.174.234':445
- '12.##6.121.174':445
- '12.##6.156.31':445
- '12.##6.98.23':445
- '12.##6.34.180':445
- '12.##6.67.121':445
- '12.##6.80.220':445
- '12.##6.132.95':445
- '12.#46.5.91':445
- '12.##6.61.145':445
- '12.##6.67.152':445
- '12.##6.85.76':445
- '12.##6.151.183':445
- '12.##6.200.37':445
- '12.##6.68.10':445
- '12.##6.15.204':445
- '12.##6.173.91':445
- '12.##6.120.165':445
- '12.##6.181.71':445
- '12.##6.112.33':445
- '12.##6.44.115':445
- '12.##6.195.207':139
- '12.##6.178.79':139
- '12.##6.25.57':139
- '12.##6.83.115':139
- '12.##6.44.95':139
- '12.##6.71.45':139
- '12.##6.33.34':139
- '12.##6.112.79':139
- '12.##6.156.102':139
- '12.##6.56.185':139
- '12.##6.79.33':139
- '12.##6.169.141':139
- '12.##6.50.11':139
- '12.##6.91.30':445
- '12.##6.29.91':445
- '12.##6.170.30':139
- '12.##6.180.116':445
- '12.##6.82.204':445
- '12.##6.203.55':445
- '12.##6.91.206':139
- '12.##6.242.167':139
- '12.##6.142.84':139
- '12.##6.185.225':139
- '12.##6.122.251':139
- '12.##6.168.125':139
- '12.##6.213.75':139
- '12.##6.174.234':139
- '12.##6.89.35':139
- '12.##6.128.162':139
- '12.##6.120.165':139
- '12.##6.14.55':139
- '12.##6.14.53':139
- '12.##6.17.212':139
- '12.##6.132.95':139
- '12.##6.156.31':139
- '12.##6.98.23':139
- '12.##6.121.174':139
- '12.##6.67.121':139
- '12.##6.80.220':139
- '12.##6.200.37':139
- '12.#46.5.91':139
- '12.##6.61.145':139
- '12.##6.24.81':139
- '12.##6.85.76':139
- '12.##6.151.183':139
- '12.##6.67.152':139
- '12.##6.44.115':139
- '12.##6.15.204':139
- '12.##6.173.91':139
- '12.##6.68.10':139
- '12.##6.181.71':139
- '12.##6.112.33':139
- '12.##6.146.140':445
- '12.##6.85.205':445
- '12.##6.25.107':445
- '12.##6.137.43':445
- '12.##6.39.236':445
- '12.##6.80.134':445
- '12.##6.137.37':445
- '12.##6.28.137':445
- '12.##6.60.249':445
- '12.##6.70.109':445
- '12.##6.63.252':445
- '12.##6.213.41':445
- '12.##6.225.8':445
- '12.##6.214.224':445
- '12.##6.101.119':445
- '12.##6.54.47':445
- '12.##6.177.3':445
- '12.##6.149.114':139
- '12.##6.13.96':445
- '12.##6.59.119':445
- '12.##6.18.130':445
- '12.##6.217.202':445
- '12.##6.59.156':445
- '12.##6.47.60':445
- '12.##6.243.129':445
- '12.##6.19.167':445
- '12.##6.160.101':445
- '12.##6.139.95':445
- '12.##6.91.64':445
- '12.##6.125.248':445
- '12.##6.15.189':445
- '12.##6.236.89':445
- '12.##6.4.133':445
- '12.##6.233.43':445
- '12.##6.73.217':445
- '12.##6.223.45':445
- '12.##6.149.114':445
- '12.##6.15.203':445
- '12.##6.10.184':445
- '12.##6.129.10':445
- '12.#46.6.44':445
- '12.##6.173.12':445
- '12.##6.208.172':445
- '12.##6.191.78':445
- '12.##6.89.67':445
- '12.#46.98.0':445
- '12.##6.22.194':445
- '12.##6.134.113':445
- '12.##6.129.210':445
- '12.##6.188.182':445
- '12.#46.3.88':445
- '12.##6.254.190':445
- '12.##6.242.254':445
- '12.##6.137.37':139
- '12.##6.85.205':139
- '12.##6.25.107':139
- '12.##6.47.60':139
- '12.##6.39.236':139
- '12.##6.80.134':139
- '12.##6.137.43':139
- '12.##6.214.224':139
- '12.##6.60.249':139
- '12.##6.70.109':139
- '12.##6.28.137':139
- '12.##6.213.41':139
- '12.##6.225.8':139
- '12.##6.59.119':139
- '12.##6.101.119':139
- '12.##6.54.47':139
- '12.##6.122.190':445
- '12.##6.63.167':445
- '12.##6.13.96':139
- '12.##6.177.3':139
- '12.##6.160.101':139
- '12.##6.217.202':139
- '12.##6.59.156':139
- '12.##6.18.130':139
- '12.##6.243.129':139
- '12.##6.19.167':139
- '12.##6.4.133':139
- '12.##6.139.95':139
- '12.##6.91.64':139
- '12.##6.188.182':139
- '12.##6.15.189':139
- '12.##6.236.89':139
- '12.##6.125.248':139
- '12.##6.129.10':139
- '12.##6.73.217':139
- '12.##6.223.45':139
- '12.##6.233.43':139
- '12.##6.15.203':139
- '12.##6.10.184':139
- '12.#46.98.0':139
- '12.#46.6.44':139
- '12.##6.173.12':139
- '12.##6.63.252':139
- '12.##6.191.78':139
- '12.##6.89.67':139
- '12.##6.208.172':139
- '12.##6.242.254':139
- '12.##6.134.113':139
- '12.##6.129.210':139
- '12.##6.22.194':139
- '12.#46.3.88':139
- '12.##6.254.190':139
- '12.##6.158.175':445
- '12.##6.23.120':445
- '12.##6.241.120':445
- '12.##6.61.50':445
- '12.##6.51.12':445
- '12.##6.158.171':445
- '12.##6.110.241':445
- '12.##6.196.137':445
- '12.##6.172.218':445
- '12.##6.77.97':445
- '12.##6.251.84':445
- '12.##6.228.226':445
- '12.##6.133.82':445
- '12.##6.67.250':445
- '12.##6.154.32':445
- '12.##6.163.95':445
- '12.##6.45.103':445
- '12.##6.164.24':445
- '12.##6.24.201':445
- '12.##6.221.253':445
- '12.##6.60.221':445
- '12.##6.7.167':445
- '12.##6.10.11':445
- '12.##6.152.68':445
- '12.##6.41.99':445
- '12.##6.196.202':445
- '12.##6.170.205':445
- '12.##6.103.126':445
- '12.##6.17.103':445
- '12.##6.43.44':445
- '12.##6.214.233':445
- '12.##6.20.33':445
- '12.#46.3.27':445
- '12.##6.81.173':445
- '12.##6.154.32':9988
- '12.##6.60.221':9988
- '12.##6.26.76':445
- '12.##6.9.193':445
- '12.##6.167.25':445
- '12.##6.145.12':445
- '12.##6.143.115':445
- '12.##6.218.176':445
- '12.##6.18.146':445
- '12.##6.28.29':445
- '12.##6.132.182':445
- '12.##6.240.101':445
- '12.##6.85.170':445
- '12.##6.29.87':445
- '12.##6.197.63':445
- '12.##6.38.131':445
- '12.##6.130.147':445
- '12.##6.170.38':445
- '12.##6.158.171':139
- '12.##6.158.175':139
- '12.##6.23.120':139
- '12.##6.10.11':139
- '12.##6.61.50':139
- '12.##6.51.12':139
- '12.##6.241.120':139
- '12.##6.133.82':139
- '12.##6.196.137':139
- '12.##6.172.218':139
- '12.##6.110.241':139
- '12.##6.251.84':139
- '12.##6.228.226':139
- '12.##6.217.203':139
- '12.##6.164.24':139
- '12.##6.67.250':139
- '12.##6.154.32':139
- '12.##6.24.201':139
- '12.##6.45.103':139
- '12.##6.163.95':139
- '12.##6.196.202':139
- '12.##6.60.221':139
- '12.##6.7.167':139
- '12.##6.221.253':139
- '12.##6.152.68':139
- '12.##6.41.99':139
- '12.##6.20.33':139
- '12.##6.170.205':139
- '12.##6.103.126':139
- '12.##6.197.63':139
- '12.##6.43.44':139
- '12.##6.214.233':139
- '12.##6.17.103':139
- '12.##6.9.193':139
- '12.##6.81.173':139
- '12.##6.217.203':445
- '12.#46.3.27':139
- '12.##6.26.76':139
- '12.##6.167.25':139
- '12.##6.132.182':139
- '12.##6.145.12':139
- '12.##6.143.115':139
- '12.##6.77.97':139
- '12.##6.18.146':139
- '12.##6.28.29':139
- '12.##6.240.101':139
- '12.##6.170.38':139
- '12.##6.85.170':139
- '12.##6.29.87':139
- '12.##6.218.176':139
- '12.##6.130.147':139
- '12.##6.38.131':139
- '12.##6.164.24':9988
- '12.##6.140.35':445
- '12.##6.14.202':445
- '12.##6.61.235':445
- '12.##6.11.187':445
- '12.#46.97.1':445
- '12.##6.17.54':445
- '12.##6.168.149':445
- '12.##6.204.133':445
- '12.##6.198.29':445
- '12.##6.110.87':445
- '12.##6.121.136':445
- '12.##6.117.41':445
- '12.##6.176.107':445
- '12.##6.203.55':139
- '12.##6.91.30':139
- '12.##6.29.91':139
- '12.##6.61.228':139
- '12.##6.180.116':139
- '12.##6.82.204':139
- '12.##6.113.43':445
- '12.##6.89.141':445
- '12.##6.35.98':445
- '12.##6.251.152':445
- '12.##6.53.113':445
- '12.##6.102.60':445
- '12.##6.225.221':445
- '12.##6.142.65':445
- '12.##6.132.148':445
- '12.##6.76.31':445
- '12.##6.156.76':445
- '12.##6.50.32':445
- '12.##6.168.5':445
- '12.##6.33.76':445
- '12.##6.244.43':445
- '12.##6.167.33':445
- '12.##6.61.228':445
- '12.##6.45.214':445
- '12.##6.6.204':445
- '12.##6.219.199':445
- '12.##6.14.210':445
- '12.##6.63.45':445
- '12.##6.24.199':445
- '12.##6.174.133':445
- '12.##6.212.76':445
- '12.##6.144.191':445
- '12.##6.128.203':445
- '12.##6.191.134':445
- '12.##6.115.132':445
- '12.##6.112.193':445
- '12.##6.85.86':445
- '12.##6.92.213':445
- '12.##6.35.186':445
- '12.##6.140.35':139
- '12.##6.176.107':139
- '12.##6.17.54':139
- '12.##6.117.41':139
- '12.##6.121.136':139
- '12.##6.35.98':139
- '12.##6.11.187':139
- '12.##6.61.235':139
- '12.##6.204.133':139
- '12.##6.198.29':139
- '12.##6.14.202':139
- '12.##6.251.152':139
- '12.#46.97.1':139
- '12.##6.240.101':9988
- '12.##6.43.44':9988
- '12.##6.214.233':9988
- '12.##6.61.50':9988
- '12.##6.158.175':9988
- '12.##6.143.115':9988
- '12.#46.3.27':9988
- '12.##6.225.221':139
- '12.##6.168.149':139
- '12.##6.89.141':139
- '12.##6.113.43':139
- '12.##6.53.113':139
- '12.##6.102.60':139
- '12.##6.168.5':139
- '12.##6.142.65':139
- '12.##6.132.148':139
- '12.##6.112.193':139
- '12.##6.156.76':139
- '12.##6.50.32':139
- '12.##6.76.31':139
- '12.##6.219.199':139
- '12.##6.244.43':139
- '12.##6.167.33':139
- '12.##6.33.76':139
- '12.##6.45.214':139
- '12.##6.6.204':139
- '12.##6.144.191':139
- '12.##6.14.210':139
- '12.##6.63.45':139
- '12.##6.110.87':139
- '12.##6.174.133':139
- '12.##6.212.76':139
- '12.##6.24.199':139
- '12.##6.35.186':139
- '12.##6.191.134':139
- '12.##6.115.132':139
- '12.##6.128.203':139
- '12.##6.85.86':139
- '12.##6.92.213':139