Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '68.##7.168.200':139
- '68.##7.183.119':139
- '68.##7.71.196':139
- '68.##7.85.14':139
- '68.##7.237.36':139
- '68.##7.138.46':445
- '68.##7.115.164':445
- '68.##7.76.114':445
- '68.##7.69.53':445
- '68.##7.187.247':139
- '68.##7.49.106':139
- '68.##7.1.157':139
- '68.##7.61.122':139
- '68.##7.246.87':139
- '68.##7.172.216':139
- '68.##7.251.72':139
- '68.##7.244.206':139
- '68.#47.7.91':139
- '68.##7.183.21':139
- '68.##7.92.203':445
- '68.##7.110.210':445
- '68.##7.220.180':445
- '68.##7.237.121':445
- '68.##7.210.132':445
- '68.#47.25.2':445
- '68.##7.31.195':445
- '68.##7.23.102':445
- '68.##7.68.96':445
- '68.##7.195.237':445
- '68.##7.109.243':445
- '68.##7.198.23':445
- '68.##7.213.235':445
- '68.##7.162.218':445
- '68.##7.23.215':445
- '68.##7.132.103':445
- '68.##7.32.125':445
- '68.##7.243.60':445
- '68.##7.101.124':445
- '68.##7.38.137':445
- '68.##7.101.124':139
- '68.##7.132.103':139
- '68.##7.198.23':139
- '68.##7.213.235':139
- '68.##7.38.137':139
- '68.##7.109.243':139
- '68.##7.237.121':139
- '68.##7.32.125':139
- '68.##7.243.60':139
- '68.##7.23.215':139
- '68.##7.57.215':445
- '68.##7.76.114':139
- '68.##7.248.129':445
- '68.##7.121.239':445
- '68.##7.69.53':139
- '68.##7.92.203':139
- '68.##7.162.218':139
- '68.##7.138.46':139
- '68.##7.115.164':139
- '68.##7.210.132':139
- '68.##7.191.52':139
- '68.##7.98.171':139
- '68.##7.44.204':139
- '68.##7.52.105':139
- '68.##7.19.48':139
- '68.##7.251.241':139
- '68.##7.189.109':139
- '68.##7.68.19':139
- '68.##7.121.101':139
- '68.##7.11.88':139
- '68.#47.25.2':139
- '68.##7.68.96':139
- '68.##7.110.210':139
- '68.##7.220.180':139
- '68.##7.195.237':139
- '68.##7.44.151':139
- '68.##7.64.194':139
- '68.##7.31.195':139
- '68.##7.23.102':139
- '68.##7.214.178':139
- '68.#47.0.57':139
- '68.##7.214.150':139
- '68.##7.2.115':139
- '68.##7.156.30':139
- '68.##7.163.182':139
- '68.##7.157.214':139
- '68.##7.39.124':139
- '68.##7.252.38':139
- '68.##7.150.125':139
- '68.#47.48.8':139
- '68.##7.177.229':139
- '68.##7.75.38':139
- '68.##7.156.81':139
- '68.##7.64.161':139
- '68.##7.178.20':139
- '68.##7.125.178':139
- '68.##7.69.26':139
- '68.##7.20.116':139
- '68.##7.2.169':139
- '68.##7.60.174':139
- '68.##7.217.60':139
- '68.##7.134.140':139
- '68.##7.72.13':139
- '68.##7.201.216':139
- '68.##7.108.233':139
- '68.##7.2.222':139
- '68.##7.141.201':139
- '68.##7.42.141':139
- '68.##7.47.116':139
- '68.##7.201.71':139
- '68.##7.202.22':139
- '68.##7.202.74':139
- '68.##7.187.220':139
- '68.##7.144.224':139
- '68.##7.224.155':139
- '68.##7.65.136':139
- '68.##7.26.145':139
- '68.#47.6.9':139
- '68.##7.61.122':445
- '68.##7.246.87':445
- '68.##7.251.241':445
- '68.##7.189.109':445
- '68.##7.49.106':445
- '68.#47.7.91':445
- '68.##7.183.21':445
- '68.##7.1.157':445
- '68.##7.172.216':445
- '68.##7.121.101':445
- '68.##7.11.88':445
- '68.##7.44.204':445
- '68.##7.44.151':445
- '68.##7.64.194':445
- '68.##7.52.105':445
- '68.##7.19.48':445
- '68.##7.68.19':445
- '68.##7.191.52':445
- '68.##7.98.171':445
- '68.##7.251.72':445
- '68.##7.6.100':139
- '68.##7.24.46':139
- '68.##7.154.78':139
- '68.##7.77.220':139
- '68.##7.26.142':139
- '68.##7.147.136':139
- '68.##7.23.10':139
- '68.##7.117.251':139
- '68.#47.76.1':139
- '68.##7.55.250':139
- '68.##7.71.196':445
- '68.##7.85.14':445
- '68.##7.244.206':445
- '68.##7.187.247':445
- '68.##7.168.200':445
- '68.##7.113.175':139
- '68.##7.39.181':139
- '68.##7.183.119':445
- '68.##7.237.36':445
- '68.##7.53.19':445
- '68.##7.152.185':445
- '68.##7.200.76':139
- '68.##7.214.117':139
- '68.#47.86.5':445
- '68.##7.111.68':445
- '68.##7.58.167':445
- '68.##7.220.85':445
- '68.##7.185.60':445
- '68.##7.209.61':139
- '68.##7.177.206':139
- '68.##7.110.32':139
- '68.##7.33.246':139
- '68.##7.108.164':139
- '68.##7.13.85':139
- '68.##7.40.165':139
- '68.##7.170.129':139
- '68.##7.106.78':139
- '68.##7.1.219':139
- '68.##7.163.77':445
- '68.##7.52.208':445
- '68.##7.74.175':445
- '68.##7.85.59':445
- '68.##7.122.98':445
- '68.##7.242.54':445
- '68.##7.42.246':445
- '68.##7.203.43':445
- '68.##7.97.60':445
- '68.##7.246.126':445
- '68.##7.186.73':445
- '68.##7.232.194':445
- '68.##7.30.230':445
- '68.##7.13.14':445
- '68.##7.252.163':445
- '68.##7.148.219':445
- '68.##7.118.67':445
- '68.#47.4.2':445
- '68.##7.69.69':445
- '68.##7.85.93':445
- '68.##7.148.219':139
- '68.##7.69.69':139
- '68.##7.232.194':139
- '68.##7.30.230':139
- '68.##7.85.93':139
- '68.##7.186.73':139
- '68.##7.85.59':139
- '68.##7.118.67':139
- '68.#47.4.2':139
- '68.##7.252.163':139
- '68.##7.220.85':139
- '68.##7.152.185':139
- '68.##7.53.19':139
- '68.#47.86.5':139
- '68.##7.185.60':139
- '68.##7.163.77':139
- '68.##7.13.14':139
- '68.##7.111.68':139
- '68.##7.58.167':139
- '68.##7.122.98':139
- '68.##7.55.25':139
- '68.##7.152.205':139
- '68.##7.205.55':139
- '68.##7.66.233':139
- '68.##7.186.199':139
- '68.##7.149.15':139
- '68.##7.39.149':139
- '68.##7.107.186':139
- '68.##7.98.186':139
- '68.##7.55.245':139
- '68.##7.242.54':139
- '68.##7.97.60':139
- '68.##7.52.208':139
- '68.##7.74.175':139
- '68.##7.246.126':139
- '68.##7.30.203':139
- '68.##7.170.193':139
- '68.##7.42.246':139
- '68.##7.203.43':139
- '68.##7.11.133':139
- '68.##7.172.77':139
- '68.##7.191.121':139
- '68.##7.2.156':139
- '68.##7.140.198':139
- '68.##7.20.208':139
- '68.##7.248.129':139
- '68.##7.91.108':139
- '68.##7.52.19':139
- '68.##7.74.26':139
- '68.##7.97.244':139
- '68.##7.83.159':139
- '68.##7.92.35':139
- '68.##7.125.228':139
- '68.##7.99.139':139
- '68.##7.59.30':139
- '68.#47.8.59':139
- '68.##7.57.253':139
- '68.##7.29.236':139
- '68.##7.121.239':139
- '68.##7.2.156':445
- '68.##7.11.133':445
- '68.##7.74.26':445
- '68.##7.191.121':445
- '68.##7.172.77':445
- '68.##7.52.19':445
- '68.##7.20.208':445
- '68.##7.140.198':445
- '68.##7.91.108':445
- '68.#47.8.59':445
- '68.##7.125.228':445
- '68.##7.97.244':445
- '68.##7.57.215':139
- '68.##7.92.35':445
- '68.##7.83.159':445
- '68.##7.29.236':445
- '68.##7.59.30':445
- '68.##7.99.139':445
- '68.##7.57.253':445
- '68.##7.33.246':445
- '68.##7.108.164':445
- '68.##7.149.15':445
- '68.##7.39.149':445
- '68.##7.177.206':445
- '68.##7.106.78':445
- '68.##7.1.219':445
- '68.##7.110.32':445
- '68.##7.13.85':445
- '68.##7.98.186':445
- '68.##7.55.245':445
- '68.##7.205.55':445
- '68.##7.30.203':445
- '68.##7.170.193':445
- '68.##7.66.233':445
- '68.##7.186.199':445
- '68.##7.107.186':445
- '68.##7.55.25':445
- '68.##7.152.205':445
- '68.##7.40.165':445
- '68.##7.97.60':9988
- '68.##7.203.43':9988
- '68.##7.85.93':9988
- '68.#47.4.2':9988
- '68.##7.55.25':9988
- '68.##7.149.15':9988
- '68.##7.1.219':9988
- '68.##7.98.186':9988
- '68.##7.186.199':9988
- '68.##7.69.69':9988
- '68.##7.200.76':445
- '68.##7.214.117':445
- '68.##7.170.129':445
- '68.##7.209.61':445
- '68.##7.13.14':9988
- '68.##7.232.194':9988
- '68.##7.148.219':9988
- '68.##7.163.77':9988
- '68.##7.252.163':9988