Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '66.##8.64.226':139
- '66.##8.93.95':445
- '66.##8.170.161':139
- '66.##8.225.170':139
- '66.##8.168.85':445
- '66.##8.225.170':445
- '66.##8.64.226':445
- '66.##8.130.45':445
- '66.##8.170.161':445
- '66.##8.130.45':139
- '66.##8.177.210':445
- '66.##8.161.177':445
- '66.##8.188.199':445
- '66.##8.210.26':445
- '66.##8.176.161':445
- '66.##8.93.95':139
- '66.##8.168.85':139
- '66.##8.24.219':445
- '66.##8.39.98':445
- '66.##8.232.211':139
- '66.#18.14.4':139
- '66.##8.244.195':139
- '66.##8.25.139':139
- '66.##8.7.105':139
- '66.##8.65.173':139
- '66.##8.127.66':139
- '66.##8.105.91':139
- '66.##8.122.224':139
- '66.##8.24.89':139
- '66.##8.92.68':139
- '66.##8.70.195':139
- '66.##8.104.103':139
- '66.##8.164.151':139
- '66.##8.184.137':139
- '66.##8.158.29':139
- '66.##8.73.157':139
- '66.##8.79.184':139
- '66.##8.30.79':139
- '66.##8.106.247':445
- '66.##8.176.104':445
- '66.##8.213.96':445
- '66.##8.102.53':445
- '66.##8.115.33':445
- '66.##8.18.126':445
- '66.##8.135.43':445
- '66.##8.116.60':445
- '66.##8.87.100':445
- '66.#18.97.6':445
- '66.##8.216.39':445
- '66.##8.121.53':445
- '66.##8.13.179':445
- '66.##8.39.98':139
- '66.##8.164.152':445
- '66.##8.202.102':445
- '66.##8.211.43':445
- '66.##8.14.181':445
- '66.##8.42.144':445
- '66.##8.229.232':445
- '66.##8.159.212':445
- '66.##8.194.88':445
- '66.##8.165.219':445
- '66.##8.63.101':445
- '66.##8.110.193':445
- '66.##8.82.41':445
- '66.#18.9.39':445
- '66.##8.215.203':445
- '66.##8.119.95':445
- '66.##8.22.101':445
- '66.##8.191.189':445
- '66.##8.165.247':445
- '66.##8.105.125':445
- '66.##8.186.216':445
- '66.##8.95.165':445
- '66.##8.35.201':445
- '66.##8.172.2':445
- '66.##8.73.58':445
- '66.##8.111.95':445
- '66.##8.82.22':445
- '66.##8.126.94':445
- '66.##8.169.52':445
- '66.##8.113.206':445
- '66.##8.191.174':445
- '66.##8.111.163':445
- '66.##8.102.210':445
- '66.##8.172.54':445
- '66.##8.96.40':445
- '66.##8.132.103':445
- '66.##8.105.91':445
- '66.##8.122.224':445
- '66.#18.14.4':445
- '66.##8.7.105':445
- '66.##8.65.173':445
- '66.##8.159.121':445
- '66.##8.135.96':445
- '66.##8.127.66':445
- '66.##8.51.122':445
- '66.##8.185.9':445
- '66.##8.172.102':139
- '66.##8.37.47':445
- '66.##8.121.37':445
- '66.#18.96.8':139
- '66.##8.143.244':139
- '66.##8.124.252':139
- '66.##8.1.251':139
- '66.##8.15.23':139
- '66.##8.64.39':445
- '66.##8.31.19':445
- '66.##8.29.137':445
- '66.##8.171.79':445
- '66.##8.14.38':445
- '66.##8.112.211':445
- '66.##8.152.27':445
- '66.##8.204.152':445
- '66.##8.133.66':445
- '66.##8.38.116':445
- '66.##8.232.211':445
- '66.##8.102.210':139
- '66.##8.171.79':139
- '66.##8.96.40':139
- '66.##8.111.163':139
- '66.##8.14.38':139
- '66.##8.112.211':139
- '66.##8.133.66':139
- '66.##8.31.19':139
- '66.##8.29.137':139
- '66.##8.172.54':139
- '66.##8.135.96':139
- '66.##8.132.103':139
- '66.##8.51.122':139
- '66.##8.159.121':139
- '66.##8.169.52':139
- '66.##8.126.94':139
- '66.##8.191.174':139
- '66.##8.113.206':139
- '66.##8.82.22':139
- '66.##8.79.184':445
- '66.##8.30.79':445
- '66.##8.70.195':445
- '66.##8.184.137':445
- '66.##8.158.29':445
- '66.##8.244.195':445
- '66.##8.25.139':445
- '66.##8.73.157':445
- '66.##8.24.89':445
- '66.##8.92.68':445
- '66.##8.204.152':139
- '66.##8.64.39':139
- '66.##8.38.116':139
- '66.##8.152.27':139
- '66.##8.37.47':139
- '66.##8.104.103':445
- '66.##8.164.151':445
- '66.##8.121.37':139
- '66.##8.185.9':139
- '66.##8.24.219':139
- '66.##8.121.44':445
- '66.##8.255.202':445
- '66.##8.223.214':139
- '66.##8.212.246':139
- '66.#18.13.0':445
- '66.##8.43.148':445
- '66.##8.40.244':445
- '66.##8.22.107':445
- '66.##8.166.150':445
- '66.##8.226.225':139
- '66.##8.190.127':139
- '66.##8.8.177':139
- '66.##8.169.219':139
- '66.##8.133.158':139
- '66.##8.194.219':139
- '66.##8.144.43':139
- '66.##8.155.144':139
- '66.##8.168.97':139
- '66.##8.108.186':139
- '66.##8.8.155':445
- '66.##8.142.140':445
- '66.##8.106.109':445
- '66.##8.65.110':445
- '66.##8.46.182':445
- '66.##8.155.68':445
- '66.##8.215.234':445
- '66.##8.135.104':445
- '66.##8.69.54':445
- '66.##8.111.141':445
- '66.##8.63.138':445
- '66.##8.63.219':445
- '66.##8.134.105':445
- '66.##8.180.40':445
- '66.##8.60.73':445
- '66.##8.114.136':445
- '66.##8.226.202':445
- '66.##8.216.26':445
- '66.##8.43.228':445
- '66.##8.122.209':139
- '66.##8.216.26':139
- '66.##8.43.228':139
- '66.##8.63.219':139
- '66.##8.60.73':139
- '66.##8.114.136':139
- '66.##8.106.109':139
- '66.##8.65.110':139
- '66.##8.226.202':139
- '66.##8.111.141':139
- '66.##8.63.138':139
- '66.##8.255.202':139
- '66.##8.22.107':139
- '66.##8.121.44':139
- '66.##8.43.148':139
- '66.#18.13.0':139
- '66.##8.40.244':139
- '66.##8.180.40':139
- '66.##8.166.150':139
- '66.##8.134.105':139
- '66.##8.115.201':139
- '66.##8.188.80':139
- '66.##8.134.9':139
- '66.##8.201.248':139
- '66.##8.183.253':139
- '66.##8.120.102':139
- '66.##8.93.194':139
- '66.##8.57.209':139
- '66.##8.71.200':139
- '66.##8.128.184':139
- '66.##8.46.182':139
- '66.##8.135.104':139
- '66.##8.8.155':139
- '66.##8.142.140':139
- '66.##8.69.54':139
- '66.##8.10.219':139
- '66.##8.135.86':139
- '66.##8.155.68':139
- '66.##8.215.234':139
- '66.##8.116.60':139
- '66.##8.105.125':139
- '66.#18.97.6':139
- '66.##8.135.43':139
- '66.##8.186.216':139
- '66.##8.95.165':139
- '66.##8.111.95':139
- '66.##8.191.189':139
- '66.##8.165.247':139
- '66.##8.87.100':139
- '66.##8.14.181':139
- '66.##8.216.39':139
- '66.##8.229.232':139
- '66.##8.211.43':139
- '66.##8.102.53':139
- '66.##8.213.96':139
- '66.##8.18.126':139
- '66.##8.115.33':139
- '66.##8.176.104':139
- '66.#18.9.39':139
- '66.##8.106.247':139
- '66.##8.119.95':139
- '66.##8.82.41':139
- '66.##8.188.199':139
- '66.##8.161.177':139
- '66.##8.176.161':139
- '66.##8.210.26':139
- '66.##8.177.210':139
- '66.##8.215.203':139
- '66.##8.172.2':139
- '66.##8.165.219':139
- '66.##8.73.58':139
- '66.##8.35.201':139
- '66.##8.22.101':139
- '66.##8.194.88':139
- '66.##8.110.193':139
- '66.##8.63.101':139
- '66.##8.159.212':139
- '66.##8.42.144':139
- '66.##8.122.209':445
- '66.##8.169.219':445
- '66.##8.120.102':445
- '66.##8.93.194':445
- '66.##8.133.158':445
- '66.##8.194.219':445
- '66.##8.168.97':445
- '66.##8.190.127':445
- '66.##8.8.177':445
- '66.##8.71.200':445
- '66.##8.128.184':445
- '66.##8.134.9':445
- '66.##8.10.219':445
- '66.##8.135.86':445
- '66.##8.201.248':445
- '66.##8.183.253':445
- '66.##8.57.209':445
- '66.##8.115.201':445
- '66.##8.188.80':445
- '66.##8.188.80':9988
- '66.##8.108.186':9988
- '66.##8.46.182':9988
- '66.##8.135.104':9988
- '66.##8.212.246':9988
- '66.##8.13.179':139
- '66.##8.202.102':139
- '66.##8.164.152':139
- '66.##8.121.53':139
- '66.##8.8.155':9988
- '66.##8.155.144':445
- '66.##8.226.225':445
- '66.##8.108.186':445
- '66.##8.144.43':445
- '66.##8.223.214':445
- '66.##8.43.148':9988
- '66.##8.43.228':9988
- '66.##8.212.246':445
- '66.##8.121.44':9988