Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '12.##6.102.88':139
- '12.##6.0.230':139
- '12.##6.51.157':139
- '12.##6.110.114':139
- '12.##6.67.95':139
- '12.##6.5.110':139
- '12.##6.65.154':139
- '12.##6.155.66':139
- '12.##6.7.249':139
- '12.#46.64.9':139
- '12.##6.48.94':139
- '12.##6.54.133':445
- '12.##6.66.24':445
- '12.##6.25.126':445
- '12.##6.85.118':445
- '12.##6.125.160':445
- '12.##6.90.159':139
- '12.##6.57.201':139
- '12.##6.155.110':445
- '12.##6.189.65':445
- '12.##6.84.66':445
- '12.##6.155.66':445
- '12.##6.5.110':445
- '12.#46.64.9':445
- '12.##6.0.230':445
- '12.##6.7.249':445
- '12.##6.102.206':445
- '12.##6.191.240':445
- '12.##6.124.131':445
- '12.##6.65.154':445
- '12.##6.17.40':445
- '12.##6.102.88':445
- '12.##6.191.240':139
- '12.##6.90.159':445
- '12.##6.102.206':139
- '12.##6.17.40':139
- '12.##6.124.131':139
- '12.##6.67.95':445
- '12.##6.51.157':445
- '12.##6.110.114':445
- '12.##6.57.201':445
- '12.##6.48.94':445
- '12.##6.47.15':445
- '12.##6.189.65':139
- '12.##6.84.66':139
- '12.##6.66.24':139
- '12.##6.25.126':139
- '12.##6.54.133':139
- '12.##6.45.19':445
- '12.##6.84.15':445
- '12.##6.80.248':445
- '12.##6.155.110':139
- '12.##6.214.60':445
- '12.##6.125.160':139
- '12.##6.186.99':139
- '12.##6.52.170':139
- '12.##6.120.156':139
- '12.##6.112.232':139
- '12.##6.252.112':139
- '12.##6.47.15':139
- '12.##6.85.118':139
- '12.##6.141.191':139
- '12.##6.11.149':139
- '12.##6.44.95':139
- '12.##6.252.112':445
- '12.##6.120.156':445
- '12.##6.112.232':445
- '12.##6.97.144':445
- '12.#46.27.1':445
- '12.##6.44.95':445
- '12.##6.141.191':445
- '12.##6.11.149':445
- '12.##6.186.99':445
- '12.##6.52.170':445
- '12.##6.143.202':445
- '12.##6.30.125':445
- '12.##6.185.64':445
- '12.##6.206.6':445
- '12.#46.2.81':445
- '12.##6.182.252':445
- '12.##6.146.133':445
- '12.##6.202.183':445
- '12.##6.89.250':445
- '12.##6.204.152':445
- '12.##6.52.201':445
- '12.##6.1.151':445
- '12.##6.28.104':445
- '12.##6.98.247':445
- '12.##6.184.233':445
- '12.##6.132.112':445
- '12.##6.3.106':445
- '12.##6.155.150':445
- '12.##6.38.42':445
- '12.##6.114.28':445
- '12.##6.72.24':445
- '12.##6.126.215':445
- '12.##6.39.106':445
- '12.##6.136.38':445
- '12.##6.87.10':445
- '12.##6.65.87':445
- '12.##6.81.154':445
- '12.##6.52.42':445
- '12.##6.194.51':445
- '12.##6.204.22':445
- '12.##6.71.168':445
- '12.##6.38.51':445
- '12.##6.76.118':139
- '12.##6.74.37':139
- '12.##6.37.74':139
- '12.##6.176.99':139
- '12.##6.219.210':139
- '12.##6.147.146':139
- '12.##6.192.147':139
- '12.##6.146.0':139
- '12.##6.71.112':139
- '12.##6.59.205':139
- '12.##6.4.162':139
- '12.##6.132.239':445
- '12.##6.89.188':139
- '12.##6.167.84':445
- '12.##6.87.141':445
- '12.##6.153.206':445
- '12.##6.86.25':139
- '12.##6.233.136':139
- '12.##6.11.64':139
- '12.##6.26.29':139
- '12.##6.146.97':139
- '12.##6.41.83':445
- '12.##6.71.168':139
- '12.##6.38.51':139
- '12.##6.136.38':139
- '12.##6.87.10':139
- '12.##6.39.106':139
- '12.##6.126.215':139
- '12.##6.184.233':139
- '12.##6.194.51':139
- '12.##6.204.22':139
- '12.##6.52.42':139
- '12.##6.81.154':139
- '12.##6.121.69':139
- '12.##6.181.196':139
- '12.##6.46.221':139
- '12.##6.124.147':139
- '12.##6.148.111':139
- '12.##6.41.83':139
- '12.##6.65.87':139
- '12.##6.137.199':139
- '12.##6.112.97':139
- '12.##6.179.149':139
- '12.##6.148.111':445
- '12.##6.46.221':445
- '12.##6.124.147':445
- '12.##6.167.84':139
- '12.##6.132.239':139
- '12.##6.179.149':445
- '12.##6.137.199':445
- '12.##6.112.97':445
- '12.##6.121.69':445
- '12.##6.181.196':445
- '12.##6.153.206':139
- '12.##6.28.104':139
- '12.##6.114.28':139
- '12.##6.1.151':139
- '12.##6.132.112':139
- '12.##6.98.247':139
- '12.##6.155.150':139
- '12.##6.87.141':139
- '12.##6.3.106':139
- '12.##6.72.24':139
- '12.##6.38.42':139
- '12.##6.191.82':445
- '12.##6.227.37':445
- '12.##6.0.149':445
- '12.##6.34.22':445
- '12.##6.116.210':445
- '12.##6.30.145':445
- '12.##6.148.157':445
- '12.##6.10.48':445
- '12.##6.123.119':445
- '12.##6.123.225':445
- '12.##6.146.34':445
- '12.##6.26.171':139
- '12.##6.137.26':139
- '12.##6.251.110':139
- '12.##6.239.19':139
- '12.##6.126.161':139
- '12.##6.128.2':445
- '12.##6.127.133':445
- '12.##6.160.76':139
- '12.##6.11.185':139
- '12.##6.19.168':139
- '12.##6.159.114':445
- '12.##6.21.19':445
- '12.##6.99.241':445
- '12.##6.150.81':445
- '12.##6.165.79':445
- '12.##6.216.183':445
- '12.##6.27.17':445
- '12.##6.26.193':445
- '12.##6.115.223':445
- '12.##6.184.205':445
- '12.##6.71.92':445
- '12.##6.166.167':445
- '12.##6.72.63':445
- '12.##6.254.66':445
- '12.##6.113.225':445
- '12.##6.221.32':445
- '12.##6.145.90':445
- '12.##6.124.145':445
- '12.##6.91.17':445
- '12.##6.131.22':445
- '12.##6.128.251':445
- '12.##6.19.65':139
- '12.##6.221.32':139
- '12.##6.254.66':139
- '12.##6.113.225':139
- '12.##6.30.145':139
- '12.##6.148.157':139
- '12.##6.128.251':139
- '12.##6.91.17':139
- '12.##6.131.22':139
- '12.##6.166.167':139
- '12.##6.72.63':139
- '12.##6.10.48':139
- '12.##6.116.210':139
- '12.##6.0.149':139
- '12.##6.34.22':139
- '12.##6.128.2':139
- '12.##6.127.133':139
- '12.##6.123.119':139
- '12.##6.123.225':139
- '12.##6.227.37':139
- '12.##6.146.34':139
- '12.##6.191.82':139
- '12.##6.187.238':139
- '12.##6.25.26':139
- '12.##6.223.251':139
- '12.##6.216.183':139
- '12.##6.27.17':139
- '12.##6.252.71':139
- '12.##6.210.45':139
- '12.##6.6.233':139
- '12.##6.13.158':139
- '12.##6.78.92':139
- '12.##6.26.193':139
- '12.##6.150.81':139
- '12.##6.165.79':139
- '12.##6.71.92':139
- '12.##6.145.90':139
- '12.##6.124.145':139
- '12.##6.115.223':139
- '12.##6.184.205':139
- '12.##6.21.19':139
- '12.##6.99.241':139
- '12.##6.159.114':139
- '12.##6.48.222':445
- '12.##6.44.49':445
- '12.##6.90.158':445
- '12.##6.215.0':445
- '12.##6.235.184':445
- '12.##6.25.169':445
- '12.##6.162.70':445
- '12.##6.243.169':445
- '12.##6.120.11':445
- '12.##6.110.120':445
- '12.##6.0.112':445
- '12.##6.162.70':139
- '12.##6.84.191':139
- '12.##6.25.169':139
- '12.##6.110.120':139
- '12.##6.243.169':139
- '12.##6.59.82':445
- '12.##6.112.126':445
- '12.##6.28.140':139
- '12.##6.108.150':139
- '12.##6.167.18':139
- '12.##6.52.201':139
- '12.##6.89.250':139
- '12.##6.204.152':139
- '12.##6.30.125':139
- '12.##6.185.64':139
- '12.##6.97.144':139
- '12.#46.27.1':139
- '12.##6.143.202':139
- '12.##6.146.133':139
- '12.##6.202.183':139
- '12.##6.206.6':139
- '12.##6.28.140':445
- '12.##6.214.60':139
- '12.##6.167.18':445
- '12.##6.84.191':445
- '12.##6.108.150':445
- '12.#46.2.81':139
- '12.##6.182.252':139
- '12.##6.84.15':139
- '12.##6.80.248':139
- '12.##6.45.19':139
- '12.##6.120.11':139
- '12.##6.11.185':445
- '12.##6.19.168':445
- '12.##6.137.26':445
- '12.##6.251.110':445
- '12.##6.26.171':445
- '12.##6.10.48':9988
- '12.##6.72.63':9988
- '12.##6.146.34':9988
- '12.##6.160.76':445
- '12.##6.0.149':9988
- '12.##6.126.161':445
- '12.##6.13.158':445
- '12.##6.78.92':445
- '12.##6.25.26':445
- '12.##6.223.251':445
- '12.##6.187.238':445
- '12.##6.19.65':445
- '12.##6.239.19':445
- '12.##6.210.45':445
- '12.##6.6.233':445
- '12.##6.252.71':445
- '12.##6.112.126':139
- '12.##6.0.112':139
- '12.##6.59.82':139
- '12.##6.184.205':9988
- '12.##6.223.251':9988
- '12.##6.90.158':139
- '12.##6.44.49':139
- '12.##6.48.222':139
- '12.##6.215.0':139
- '12.##6.235.184':139
- '12.##6.25.26':9988
- '12.##6.124.145':9988
- '12.##6.71.92':9988
- '12.##6.145.90':9988
- '12.##6.128.251':9988
- '12.##6.91.17':9988
- '12.##6.165.79':9988
- '12.##6.13.158':9988
- '12.##6.150.81':9988
- '12.##6.216.183':9988
- '12.##6.115.223':9988