Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '69.##6.40.185':445
- '69.##6.41.133':445
- '69.##6.132.120':139
- '69.##6.133.166':139
- '69.##6.10.10':445
- '69.##6.63.99':445
- '69.##6.91.63':445
- '69.##6.137.9':445
- '69.##6.245.63':445
- '69.##6.32.135':139
- '69.##6.21.109':139
- '69.##6.38.253':139
- '69.##6.237.48':139
- '69.##6.194.179':139
- '69.##6.107.112':139
- '69.##6.47.118':139
- '69.##6.98.177':139
- '69.#26.79.3':139
- '69.##6.116.91':445
- '69.##6.188.72':445
- '69.##6.54.102':445
- '69.##6.21.241':445
- '69.##6.43.204':445
- '69.##6.33.55':445
- '69.##6.131.154':445
- '69.##6.177.31':445
- '69.##6.10.25':445
- '69.##6.26.234':445
- '69.##6.69.115':445
- '69.##6.146.184':445
- '69.##6.15.12':445
- '69.##6.227.68':445
- '69.##6.5.146':445
- '69.##6.184.211':445
- '69.##6.26.116':445
- '69.#26.9.6':445
- '69.##6.217.27':445
- '69.##6.227.31':139
- '69.#26.9.6':139
- '69.##6.217.27':139
- '69.##6.146.184':139
- '69.##6.5.146':139
- '69.##6.184.211':139
- '69.##6.43.204':139
- '69.##6.188.72':139
- '69.##6.26.116':139
- '69.##6.21.241':139
- '69.##6.245.63':139
- '69.##6.63.99':139
- '69.##6.10.10':139
- '69.##6.137.9':139
- '69.##6.91.63':139
- '69.##6.227.68':139
- '69.##6.69.115':139
- '69.##6.116.91':139
- '69.##6.15.12':139
- '69.##6.54.102':139
- '69.##6.101.233':139
- '69.##6.245.101':139
- '69.##6.91.13':139
- '69.##6.222.74':139
- '69.##6.207.91':139
- '69.##6.80.230':139
- '69.##6.17.81':139
- '69.##6.199.20':139
- '69.##6.230.198':139
- '69.##6.26.234':139
- '69.##6.131.154':139
- '69.##6.33.55':139
- '69.##6.10.25':139
- '69.##6.177.31':139
- '69.##6.119.69':139
- '69.##6.208.71':139
- '69.#26.6.15':139
- '69.##6.164.158':139
- '69.#26.6.15':445
- '69.##6.162.142':139
- '69.##6.199.162':139
- '69.##6.53.59':139
- '69.##6.40.18':139
- '69.##6.240.199':139
- '69.##6.122.37':139
- '69.##6.105.64':139
- '69.##6.103.240':139
- '69.#26.83.7':139
- '69.##6.186.13':139
- '69.##6.8.250':139
- '69.##6.11.31':139
- '69.##6.78.37':139
- '69.##6.109.141':139
- '69.##6.49.120':139
- '69.##6.83.52':139
- '69.##6.196.109':139
- '69.##6.102.63':139
- '69.##6.223.116':139
- '69.##6.80.187':139
- '69.##6.134.223':139
- '69.##6.255.161':139
- '69.##6.54.227':139
- '69.##6.14.137':139
- '69.##6.187.118':139
- '69.##6.143.187':139
- '69.##6.114.109':139
- '69.##6.118.114':139
- '69.##6.79.31':139
- '69.##6.130.168':139
- '69.##6.87.223':139
- '69.##6.31.88':139
- '69.##6.213.7':139
- '69.##6.177.15':139
- '69.##6.21.54':139
- '69.##6.162.31':139
- '69.##6.29.250':139
- '69.##6.30.195':139
- '69.##6.17.81':445
- '69.##6.227.31':445
- '69.##6.230.198':445
- '69.##6.80.230':445
- '69.##6.38.253':445
- '69.##6.21.109':445
- '69.##6.194.179':445
- '69.##6.237.48':445
- '69.##6.32.135':445
- '69.##6.208.71':445
- '69.##6.91.13':445
- '69.##6.164.158':445
- '69.##6.119.69':445
- '69.##6.222.74':445
- '69.##6.207.91':445
- '69.##6.199.20':445
- '69.##6.101.233':445
- '69.##6.245.101':445
- '69.##6.98.177':445
- '69.##6.117.86':139
- '69.##6.17.230':139
- '69.#26.8.22':139
- '69.##6.91.44':139
- '69.##6.112.27':139
- '69.##6.155.8':139
- '69.##6.42.54':139
- '69.##6.155.22':139
- '69.##6.77.116':139
- '69.##6.47.118':445
- '69.##6.132.120':445
- '69.#26.79.3':445
- '69.##6.107.112':445
- '69.##6.133.166':445
- '69.##6.165.74':139
- '69.##6.11.36':139
- '69.##6.210.83':139
- '69.##6.74.16':139
- '69.##6.41.133':139
- '69.##6.64.239':139
- '69.##6.153.64':139
- '69.##6.36.68':139
- '69.##6.239.69':139
- '69.##6.192.223':445
- '69.##6.209.73':445
- '69.##6.30.90':445
- '69.##6.224.29':445
- '69.##6.73.224':445
- '69.##6.156.91':139
- '69.##6.145.130':139
- '69.##6.222.72':139
- '69.##6.219.222':139
- '69.##6.27.37':139
- '69.##6.224.150':139
- '69.##6.233.192':139
- '69.##6.110.59':139
- '69.#26.5.11':139
- '69.##6.78.230':445
- '69.##6.204.118':445
- '69.##6.240.140':445
- '69.##6.38.229':445
- '69.##6.14.18':445
- '69.##6.114.28':445
- '69.##6.16.137':445
- '69.##6.6.139':445
- '69.##6.150.217':445
- '69.##6.207.1':445
- '69.##6.76.72':445
- '69.##6.148.197':445
- '69.##6.81.23':445
- '69.##6.141.254':445
- '69.##6.241.213':445
- '69.##6.111.51':445
- '69.##6.133.80':445
- '69.##6.201.241':445
- '69.##6.153.224':445
- '69.##6.77.98':139
- '69.##6.201.241':139
- '69.##6.153.224':139
- '69.##6.148.197':139
- '69.##6.241.213':139
- '69.##6.111.51':139
- '69.##6.14.18':139
- '69.##6.204.118':139
- '69.##6.133.80':139
- '69.##6.38.229':139
- '69.##6.78.230':139
- '69.##6.73.224':139
- '69.##6.209.73':139
- '69.##6.81.23':139
- '69.##6.224.29':139
- '69.##6.141.254':139
- '69.##6.76.72':139
- '69.##6.30.90':139
- '69.##6.192.223':139
- '69.##6.240.140':139
- '69.##6.123.207':139
- '69.##6.119.12':139
- '69.##6.56.211':139
- '69.##6.102.6':139
- '69.##6.56.34':139
- '69.##6.115.232':139
- '69.##6.141.251':139
- '69.##6.124.129':139
- '69.##6.122.137':139
- '69.##6.207.1':139
- '69.##6.16.137':139
- '69.##6.114.28':139
- '69.##6.150.217':139
- '69.##6.6.139':139
- '69.##6.191.234':139
- '69.##6.59.76':139
- '69.##6.139.41':139
- '69.##6.44.250':139
- '69.##6.139.41':445
- '69.##6.30.138':139
- '69.##6.38.175':139
- '69.##6.144.81':139
- '69.##6.185.181':139
- '69.##6.155.38':139
- '69.##6.51.95':139
- '69.##6.15.130':139
- '69.##6.202.154':139
- '69.##6.162.202':139
- '69.##6.56.211':9988
- '69.##6.219.222':9988
- '69.##6.124.129':9988
- '69.##6.102.6':9988
- '69.##6.119.12':9988
- '69.##6.94.133':139
- '69.##6.216.42':139
- '69.##6.56.34':9988
- '69.##6.73.232':139
- '69.##6.93.133':139
- '69.##6.162.202':445
- '69.##6.51.95':445
- '69.##6.155.38':445
- '69.##6.202.154':445
- '69.##6.15.130':445
- '69.#26.1.35':445
- '69.##6.40.185':139
- '69.##6.93.133':445
- '69.##6.196.206':445
- '69.##6.73.232':445
- '69.##6.94.133':445
- '69.##6.196.206':139
- '69.#26.1.35':139
- '69.##6.216.42':445
- '69.##6.30.138':445
- '69.##6.38.175':445
- '69.##6.144.81':445
- '69.##6.185.181':445
- '69.##6.222.72':9988
- '69.##6.141.251':445
- '69.##6.77.98':445
- '69.##6.122.137':445
- '69.##6.115.232':445
- '69.##6.222.72':445
- '69.##6.145.130':445
- '69.##6.27.37':445
- '69.##6.219.222':445
- '69.##6.156.91':445
- '69.##6.59.76':445
- '69.##6.56.211':445
- '69.##6.44.250':445
- '69.##6.191.234':445
- '69.##6.102.6':445
- '69.##6.56.34':445
- '69.##6.124.129':445
- '69.##6.123.207':445
- '69.##6.119.12':445
- '69.##6.110.59':445
- '69.##6.38.229':9988
- '69.##6.133.80':9988
- '69.##6.78.230':9988
- '69.##6.111.51':9988
- '69.##6.14.18':9988
- '69.##6.191.234':9988
- '69.##6.77.98':9988
- '69.##6.44.250':9988
- '69.##6.16.137':9988
- '69.##6.233.192':445
- '69.##6.36.68':445
- '69.#26.5.11':445
- '69.##6.224.150':445
- '69.##6.239.69':445
- '69.##6.141.254':9988
- '69.##6.209.73':9988
- '69.##6.64.239':445
- '69.##6.153.64':445