Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##6.182.198':139
- '72.##6.39.97':445
- '72.##6.51.182':139
- '72.##6.33.221':139
- '72.##6.205.242':445
- '72.##6.196.81':445
- '72.##6.229.242':445
- '72.##6.8.206':445
- '72.##6.122.9':445
- '72.##6.40.123':139
- '72.##6.38.72':139
- '72.##6.220.42':139
- '72.##6.36.251':139
- '72.##6.72.28':139
- '72.##6.132.144':139
- '72.##6.176.201':139
- '72.##6.122.177':139
- '72.##6.61.174':139
- '72.##6.201.183':139
- '72.##6.109.119':445
- '72.##6.212.56':445
- '72.##6.119.43':445
- '72.##6.160.226':445
- '72.##6.191.38':445
- '72.##6.197.152':445
- '72.##6.46.44':445
- '72.##6.160.5':445
- '72.##6.27.41':445
- '72.##6.125.73':445
- '72.##6.164.216':445
- '72.##6.159.44':445
- '72.##6.129.204':445
- '72.##6.18.215':445
- '72.##6.22.126':445
- '72.##6.41.34':445
- '72.#96.65.2':445
- '72.##6.17.108':445
- '72.##6.69.148':445
- '72.##6.69.148':139
- '72.##6.41.34':139
- '72.##6.22.126':139
- '72.##6.17.108':139
- '72.#96.65.2':139
- '72.##6.160.226':139
- '72.##6.109.119':139
- '72.##6.125.73':139
- '72.##6.119.43':139
- '72.##6.159.44':139
- '72.##6.8.206':139
- '72.##6.122.9':139
- '72.##6.39.97':139
- '72.##6.205.242':139
- '72.##6.196.81':139
- '72.##6.18.215':139
- '72.##6.164.216':139
- '72.##6.229.242':139
- '72.##6.129.204':139
- '72.##6.6.199':139
- '72.##6.224.22':139
- '72.##6.188.19':139
- '72.##6.112.92':139
- '72.##6.39.120':139
- '72.##6.154.111':139
- '72.##6.78.154':139
- '72.##6.38.48':139
- '72.##6.94.225':139
- '72.##6.143.175':139
- '72.##6.160.5':139
- '72.##6.27.41':139
- '72.##6.212.56':139
- '72.##6.191.38':139
- '72.##6.197.152':139
- '72.##6.206.92':139
- '72.##6.18.73':139
- '72.##6.46.44':139
- '72.##6.92.147':139
- '72.##6.92.147':445
- '72.##6.50.75':139
- '72.##6.11.252':139
- '72.##6.135.115':139
- '72.##6.53.167':139
- '72.##6.124.140':139
- '72.##6.11.124':139
- '72.##6.248.10':139
- '72.##6.127.7':139
- '72.##6.176.122':139
- '72.##6.86.60':139
- '72.##6.22.26':139
- '72.##6.108.22':139
- '72.##6.118.239':139
- '72.##6.124.24':139
- '72.##6.84.107':139
- '72.##6.149.46':139
- '72.##6.31.97':139
- '72.##6.201.84':139
- '72.##6.88.201':139
- '72.##6.83.206':139
- '72.##6.150.144':139
- '72.##6.72.210':139
- '72.##6.221.72':139
- '72.##6.25.176':139
- '72.##6.46.222':139
- '72.##6.83.50':139
- '72.#96.25.1':139
- '72.##6.186.134':139
- '72.##6.158.127':139
- '72.##6.174.207':139
- '72.##6.47.219':139
- '72.##6.3.175':139
- '72.##6.178.203':139
- '72.##6.95.200':139
- '72.##6.51.160':139
- '72.##6.72.184':139
- '72.#96.7.24':139
- '72.##6.160.44':139
- '72.##6.36.251':445
- '72.##6.72.28':445
- '72.##6.154.111':445
- '72.##6.78.154':445
- '72.##6.38.72':445
- '72.##6.61.174':445
- '72.##6.201.183':445
- '72.##6.220.42':445
- '72.##6.132.144':445
- '72.##6.94.225':445
- '72.##6.143.175':445
- '72.##6.188.19':445
- '72.##6.206.92':445
- '72.##6.18.73':445
- '72.##6.112.92':445
- '72.##6.39.120':445
- '72.##6.38.48':445
- '72.##6.6.199':445
- '72.##6.224.22':445
- '72.##6.245.193':139
- '72.##6.181.166':139
- '72.##6.44.90':139
- '72.##6.168.89':139
- '72.##6.167.76':139
- '72.##6.207.87':139
- '72.##6.238.166':139
- '72.##6.182.90':139
- '72.##6.202.181':139
- '72.##6.130.73':139
- '72.##6.40.123':445
- '72.##6.51.182':445
- '72.##6.176.201':445
- '72.##6.122.177':445
- '72.##6.33.221':445
- '72.##6.234.106':139
- '72.##6.220.214':139
- '72.##6.182.198':445
- '72.##6.87.85':139
- '72.##6.227.20':139
- '72.##6.229.243':445
- '72.##6.190.90':139
- '72.##6.246.167':139
- '72.##6.160.161':445
- '72.##6.94.232':445
- '72.##6.120.47':445
- '72.##6.73.32':445
- '72.##6.197.130':445
- '72.##6.80.210':139
- '72.##6.151.0':139
- '72.##6.103.31':139
- '72.##6.162.143':139
- '72.##6.165.215':139
- '72.##6.167.235':139
- '72.##6.93.105':139
- '72.##6.23.195':139
- '72.##6.211.167':139
- '72.##6.181.164':139
- '72.##6.143.13':445
- '72.##6.48.197':445
- '72.##6.234.142':445
- '72.##6.25.141':445
- '72.##6.132.31':445
- '72.##6.119.138':445
- '72.##6.149.80':445
- '72.##6.109.113':445
- '72.##6.137.21':445
- '72.##6.102.74':445
- '72.##6.39.195':445
- '72.##6.152.160':445
- '72.##6.108.89':445
- '72.##6.212.158':445
- '72.##6.161.180':445
- '72.##6.230.199':445
- '72.##6.75.60':445
- '72.##6.92.195':445
- '72.##6.67.160':445
- '72.##6.67.160':139
- '72.##6.75.60':139
- '72.##6.161.180':139
- '72.##6.92.195':139
- '72.##6.230.199':139
- '72.##6.25.141':139
- '72.##6.143.13':139
- '72.##6.102.74':139
- '72.##6.234.142':139
- '72.##6.152.160':139
- '72.##6.73.32':139
- '72.##6.94.232':139
- '72.##6.197.130':139
- '72.##6.229.243':139
- '72.##6.120.47':139
- '72.##6.212.158':139
- '72.##6.39.195':139
- '72.##6.160.161':139
- '72.##6.108.89':139
- '72.##6.175.132':139
- '72.##6.164.23':139
- '72.##6.170.203':139
- '72.##6.136.227':139
- '72.##6.200.228':139
- '72.##6.212.188':139
- '72.##6.164.134':139
- '72.##6.229.10':139
- '72.##6.181.242':139
- '72.#96.69.5':139
- '72.##6.109.113':139
- '72.##6.137.21':139
- '72.##6.48.197':139
- '72.##6.132.31':139
- '72.##6.119.138':139
- '72.##6.18.84':139
- '72.##6.57.230':139
- '72.##6.149.80':139
- '72.##6.221.148':139
- '72.##6.221.148':445
- '72.#96.5.19':139
- '72.##6.130.127':139
- '72.##6.238.253':139
- '72.##6.171.46':139
- '72.##6.29.133':139
- '72.##6.156.42':139
- '72.##6.7.189':139
- '72.##6.27.179':139
- '72.##6.148.140':139
- '72.##6.160.137':139
- '72.##6.23.195':9988
- '72.##6.80.210':9988
- '72.##6.162.143':9988
- '72.##6.181.164':9988
- '72.##6.43.158':139
- '72.##6.136.107':139
- '72.##6.88.88':139
- '72.##6.223.100':139
- '72.##6.193.211':139
- '72.##6.29.133':445
- '72.##6.27.179':445
- '72.#96.5.19':445
- '72.##6.130.127':445
- '72.##6.148.140':445
- '72.##6.187.122':445
- '72.##6.212.120':445
- '72.##6.156.42':445
- '72.##6.7.189':445
- '72.##6.171.46':445
- '72.##6.43.158':445
- '72.##6.223.100':445
- '72.##6.187.122':139
- '72.##6.212.120':139
- '72.##6.193.211':445
- '72.##6.160.137':445
- '72.##6.238.253':445
- '72.##6.136.107':445
- '72.##6.88.88':445
- '72.##6.162.143':445
- '72.##6.165.215':445
- '72.##6.212.188':445
- '72.##6.164.134':445
- '72.##6.151.0':445
- '72.##6.211.167':445
- '72.##6.181.164':445
- '72.##6.103.31':445
- '72.##6.167.235':445
- '72.##6.181.242':445
- '72.#96.69.5':445
- '72.##6.170.203':445
- '72.##6.18.84':445
- '72.##6.57.230':445
- '72.##6.136.227':445
- '72.##6.200.228':445
- '72.##6.229.10':445
- '72.##6.175.132':445
- '72.##6.164.23':445
- '72.##6.143.13':9988
- '72.##6.137.21':9988
- '72.##6.152.160':9988
- '72.##6.234.142':9988
- '72.##6.119.138':9988
- '72.#96.69.5':9988
- '72.##6.164.134':9988
- '72.##6.149.80':9988
- '72.##6.221.148':9988
- '72.##6.108.89':9988
- '72.##6.80.210':445
- '72.##6.190.90':445
- '72.##6.93.105':445
- '72.##6.23.195':445
- '72.##6.246.167':445
- '72.##6.120.47':9988
- '72.##6.229.243':9988
- '72.##6.227.20':445
- '72.##6.73.32':9988