Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##9.245.31':445
- '72.##9.3.120':445
- '72.##9.82.103':139
- '72.##9.175.97':445
- '72.##9.58.12':445
- '72.##9.44.111':445
- '72.##9.26.159':445
- '72.##9.84.139':445
- '72.##9.120.2':445
- '72.#29.6.56':139
- '72.##9.218.198':139
- '72.##9.241.104':139
- '72.##9.116.199':139
- '72.##9.100.205':139
- '72.##9.143.24':139
- '72.##9.90.100':139
- '72.##9.60.101':139
- '72.##9.248.123':139
- '72.##9.230.185':445
- '72.##9.144.8':445
- '72.##9.110.247':445
- '72.##9.67.132':445
- '72.##9.33.195':445
- '72.##9.63.111':445
- '72.##9.14.189':445
- '72.##9.57.221':445
- '72.##9.79.138':445
- '72.#29.0.86':445
- '72.##9.213.124':445
- '72.##9.205.142':445
- '72.##9.88.230':445
- '72.##9.60.45':445
- '72.##9.107.116':445
- '72.##9.86.18':445
- '72.##9.192.146':445
- '72.##9.96.204':445
- '72.##9.78.75':445
- '72.##9.206.59':139
- '72.##9.205.142':139
- '72.##9.107.116':139
- '72.##9.60.45':139
- '72.##9.213.124':139
- '72.##9.96.204':139
- '72.##9.192.146':139
- '72.##9.67.132':139
- '72.##9.78.75':139
- '72.##9.86.18':139
- '72.##9.58.12':139
- '72.##9.84.139':139
- '72.##9.245.31':139
- '72.##9.3.120':139
- '72.##9.120.2':139
- '72.##9.230.185':139
- '72.##9.88.230':139
- '72.##9.44.111':139
- '72.##9.26.159':139
- '72.##9.33.195':139
- '72.##9.233.207':139
- '72.##9.88.89':139
- '72.##9.31.240':139
- '72.##9.97.204':139
- '72.##9.209.179':139
- '72.#29.67.2':139
- '72.##9.238.67':139
- '72.##9.37.10':139
- '72.##9.140.173':139
- '72.##9.63.111':139
- '72.##9.79.138':139
- '72.##9.144.8':139
- '72.##9.110.247':139
- '72.#29.0.86':139
- '72.##9.18.159':139
- '72.##9.252.41':139
- '72.##9.14.189':139
- '72.##9.57.221':139
- '72.##9.109.159':139
- '72.##9.242.4':139
- '72.##9.254.214':139
- '72.##9.106.228':139
- '72.##9.56.172':139
- '72.##9.202.159':139
- '72.##9.145.240':139
- '72.##9.222.164':139
- '72.##9.27.16':139
- '72.##9.139.63':139
- '72.##9.197.238':139
- '72.##9.150.89':139
- '72.##9.162.130':139
- '72.##9.1.186':139
- '72.##9.254.128':139
- '72.##9.115.190':139
- '72.##9.138.1':139
- '72.##9.36.197':139
- '72.##9.245.245':139
- '72.##9.138.57':139
- '72.##9.66.26':139
- '72.##9.207.187':139
- '72.##9.83.60':139
- '72.##9.156.248':139
- '72.##9.90.51':139
- '72.##9.145.123':139
- '72.##9.216.156':139
- '72.##9.174.216':139
- '72.##9.41.246':139
- '72.##9.126.238':139
- '72.#29.9.36':139
- '72.##9.91.216':139
- '72.##9.244.201':139
- '72.##9.64.32':139
- '72.##9.188.63':139
- '72.##9.69.50':139
- '72.##9.178.105':139
- '72.##9.51.238':139
- '72.##9.206.59':445
- '72.##9.241.104':445
- '72.#29.67.2':445
- '72.##9.238.67':445
- '72.##9.116.199':445
- '72.##9.100.205':445
- '72.##9.60.101':445
- '72.#29.6.56':445
- '72.##9.218.198':445
- '72.##9.31.240':445
- '72.##9.97.204':445
- '72.##9.18.159':445
- '72.##9.252.41':445
- '72.##9.233.207':445
- '72.##9.37.10':445
- '72.##9.140.173':445
- '72.##9.88.89':445
- '72.##9.209.179':445
- '72.##9.248.123':445
- '72.##9.58.39':139
- '72.##9.26.64':139
- '72.##9.214.248':139
- '72.##9.142.124':139
- '72.##9.155.83':139
- '72.##9.211.108':139
- '72.#29.24.8':139
- '72.##9.169.213':139
- '72.##9.212.114':139
- '72.##9.82.103':445
- '72.##9.161.159':139
- '72.##9.143.24':445
- '72.##9.90.100':445
- '72.##9.127.153':139
- '72.##9.121.13':139
- '72.##9.18.75':139
- '72.##9.161.159':445
- '72.##9.127.153':445
- '72.##9.175.97':139
- '72.##9.218.119':139
- '72.##9.66.19':139
- '72.#29.39.4':139
- '72.##9.180.0':139
- '72.##9.242.92':445
- '72.##9.59.68':445
- '72.##9.58.252':445
- '72.##9.106.87':445
- '72.##9.40.221':445
- '72.##9.21.124':139
- '72.##9.0.202':139
- '72.##9.165.111':139
- '72.##9.239.74':139
- '72.##9.41.91':139
- '72.##9.203.232':139
- '72.##9.116.248':139
- '72.##9.154.172':139
- '72.##9.232.159':139
- '72.##9.212.222':445
- '72.##9.156.192':445
- '72.##9.134.222':445
- '72.##9.214.91':445
- '72.##9.73.29':445
- '72.##9.44.151':445
- '72.##9.39.245':445
- '72.##9.78.216':445
- '72.##9.238.150':445
- '72.#29.16.7':445
- '72.##9.142.98':445
- '72.##9.72.254':445
- '72.##9.158.213':445
- '72.##9.252.157':445
- '72.##9.199.130':445
- '72.##9.167.12':445
- '72.##9.151.167':445
- '72.##9.21.19':445
- '72.##9.12.186':445
- '72.##9.43.234':139
- '72.##9.21.19':139
- '72.##9.12.186':139
- '72.##9.72.254':139
- '72.##9.199.130':139
- '72.##9.167.12':139
- '72.##9.73.29':139
- '72.##9.156.192':139
- '72.##9.151.167':139
- '72.##9.214.91':139
- '72.##9.40.221':139
- '72.##9.59.68':139
- '72.##9.242.92':139
- '72.##9.106.87':139
- '72.##9.58.252':139
- '72.##9.252.157':139
- '72.##9.142.98':139
- '72.##9.212.222':139
- '72.##9.158.213':139
- '72.##9.134.222':139
- '72.##9.250.227':139
- '72.##9.148.174':139
- '72.##9.36.233':139
- '72.##9.188.4':139
- '72.##9.100.33':139
- '72.##9.204.222':139
- '72.##9.174.205':139
- '72.##9.63.107':139
- '72.##9.122.133':139
- '72.#29.16.7':139
- '72.##9.39.245':139
- '72.##9.44.151':139
- '72.##9.238.150':139
- '72.##9.78.216':139
- '72.##9.236.216':139
- '72.##9.235.117':139
- '72.##9.111.232':139
- '72.##9.183.171':139
- '72.##9.111.154':139
- '72.##9.0.164':139
- '72.##9.150.153':139
- '72.##9.182.139':139
- '72.##9.127.215':139
- '72.##9.225.78':139
- '72.##9.138.30':139
- '72.##9.174.207':139
- '72.##9.226.174':139
- '72.##9.58.252':9988
- '72.##9.73.29':9988
- '72.##9.106.87':9988
- '72.##9.235.117':9988
- '72.##9.158.213':9988
- '72.##9.234.94':139
- '72.##9.44.46':139
- '72.##9.134.222':9988
- '72.##9.40.221':9988
- '72.##9.55.174':139
- '72.##9.138.30':445
- '72.##9.55.174':445
- '72.##9.226.174':445
- '72.##9.225.78':445
- '72.##9.187.55':445
- '72.##9.42.142':445
- '72.##9.10.240':445
- '72.##9.42.142':139
- '72.##9.10.240':139
- '72.##9.44.46':445
- '72.##9.150.153':445
- '72.##9.187.55':139
- '72.##9.234.94':445
- '72.##9.182.139':445
- '72.##9.127.215':445
- '72.##9.174.207':445
- '72.##9.111.154':445
- '72.##9.0.164':445
- '72.##9.151.167':9988
- '72.##9.204.222':445
- '72.##9.174.205':445
- '72.##9.63.107':445
- '72.##9.122.133':445
- '72.##9.43.234':445
- '72.##9.21.124':445
- '72.##9.0.202':445
- '72.##9.165.111':445
- '72.##9.239.74':445
- '72.##9.236.216':445
- '72.##9.235.117':445
- '72.##9.111.232':445
- '72.##9.183.171':445
- '72.##9.36.233':445
- '72.##9.148.174':445
- '72.##9.100.33':445
- '72.##9.188.4':445
- '72.##9.250.227':445
- '72.##9.41.91':445
- '72.##9.44.151':9988
- '72.##9.167.12':9988
- '72.##9.78.216':9988
- '72.##9.21.19':9988
- '72.##9.142.98':9988
- '72.##9.199.130':9988
- '72.##9.238.150':9988
- '72.##9.212.222':9988
- '72.##9.252.157':9988
- '72.##9.203.232':445
- '72.##9.116.248':445
- '72.##9.154.172':445
- '72.##9.232.159':445
- '72.#29.39.4':445
- '72.##9.66.19':445
- '72.##9.111.232':9988
- '72.##9.180.0':445
- '72.##9.218.119':445