Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '24.##8.136.4':139
- '24.##8.157.89':139
- '24.##8.234.71':139
- '24.##8.105.149':139
- '24.##8.134.119':139
- '24.##8.198.157':445
- '24.##8.161.68':445
- '24.##8.160.115':139
- '24.##8.220.5':139
- '24.##8.49.233':139
- '24.##8.47.228':139
- '24.##8.152.184':139
- '24.##8.52.118':139
- '24.##8.152.248':139
- '24.##8.64.152':139
- '24.##8.192.205':139
- '24.##8.73.175':139
- '24.##8.154.113':139
- '24.##8.206.60':139
- '24.##8.18.173':445
- '24.##8.4.113':445
- '24.##8.49.236':445
- '24.##8.36.106':445
- '24.##8.214.28':445
- '24.##8.48.214':445
- '24.##8.75.175':445
- '24.##8.103.75':445
- '24.##8.200.61':445
- '24.##8.180.65':445
- '24.##8.254.48':445
- '24.##8.54.60':445
- '24.##8.124.85':445
- '24.##8.248.43':445
- '24.##8.253.92':445
- '24.##8.103.44':445
- '24.##8.53.215':445
- '24.##8.96.205':445
- '24.##8.178.213':445
- '24.##8.18.59':445
- '24.##8.206.210':139
- '24.##8.18.173':139
- '24.##8.248.43':139
- '24.##8.198.157':139
- '24.##8.161.68':139
- '24.##8.253.92':139
- '24.##8.103.44':139
- '24.##8.178.213':139
- '24.##8.54.60':139
- '24.##8.124.85':139
- '24.##8.115.88':445
- '24.##8.110.100':139
- '24.##8.162.132':139
- '24.##8.54.15':445
- '24.##8.138.191':445
- '24.##8.197.152':139
- '24.##8.162.132':445
- '24.##8.197.152':445
- '24.##8.115.88':139
- '24.##8.110.100':445
- '24.##8.18.59':139
- '24.##8.166.52':139
- '24.##8.91.166':139
- '24.##8.75.175':139
- '24.##8.103.75':139
- '24.##8.21.18':139
- '24.##8.165.128':139
- '24.##8.181.31':139
- '24.##8.32.173':139
- '24.##8.151.117':139
- '24.##8.180.65':139
- '24.##8.254.48':139
- '24.##8.36.106':139
- '24.##8.53.215':139
- '24.##8.96.205':139
- '24.##8.214.28':139
- '24.##8.48.214':139
- '24.##8.200.61':139
- '24.##8.4.113':139
- '24.##8.49.236':139
- '24.##8.166.52':445
- '24.##8.109.43':139
- '24.##8.57.116':139
- '24.##8.35.50':139
- '24.##8.10.54':139
- '24.##8.10.62':139
- '24.##8.116.138':139
- '24.##8.103.249':139
- '24.##8.101.87':139
- '24.##8.29.164':139
- '24.##8.94.152':139
- '24.##8.7.192':139
- '24.##8.90.232':139
- '24.##8.227.180':139
- '24.##8.127.102':139
- '24.##8.209.106':139
- '24.##8.174.252':139
- '24.##8.31.151':139
- '24.##8.227.208':139
- '24.##8.234.187':139
- '24.##8.185.41':139
- '24.##8.241.98':139
- '24.##8.247.240':139
- '24.##8.126.26':139
- '24.##8.61.208':139
- '24.##8.139.147':139
- '24.##8.230.76':139
- '24.#88.29.7':139
- '24.##8.65.247':139
- '24.##8.148.226':139
- '24.##8.245.203':139
- '24.##8.117.156':139
- '24.##8.110.63':139
- '24.##8.75.132':139
- '24.##8.18.190':139
- '24.##8.109.109':139
- '24.##8.203.119':139
- '24.##8.157.203':139
- '24.##8.64.227':139
- '24.##8.137.250':139
- '24.##8.40.89':139
- '24.##8.154.113':445
- '24.##8.206.60':445
- '24.##8.152.184':445
- '24.##8.64.152':445
- '24.##8.73.175':445
- '24.##8.234.71':445
- '24.##8.105.149':445
- '24.##8.192.205':445
- '24.##8.49.233':445
- '24.##8.47.228':445
- '24.##8.32.173':445
- '24.##8.151.117':445
- '24.##8.91.166':445
- '24.##8.21.18':445
- '24.##8.165.128':445
- '24.##8.52.118':445
- '24.##8.152.248':445
- '24.##8.181.31':445
- '24.##8.206.210':445
- '24.##8.136.4':445
- '24.##8.238.186':139
- '24.##8.251.161':139
- '24.##8.206.231':445
- '24.##8.85.207':445
- '24.##8.173.222':139
- '24.##8.185.193':139
- '24.##8.138.0':139
- '24.##8.229.97':139
- '24.##8.83.145':139
- '24.##8.149.152':445
- '24.##8.160.115':445
- '24.##8.220.5':445
- '24.##8.157.89':445
- '24.##8.134.119':445
- '24.##8.44.109':139
- '24.##8.85.207':139
- '24.##8.44.109':445
- '24.##8.149.152':139
- '24.##8.206.231':139
- '24.##8.217.199':445
- '24.##8.34.85':445
- '24.##8.29.75':445
- '24.##8.35.252':139
- '24.##8.83.12':445
- '24.#88.5.47':445
- '24.##8.49.140':445
- '24.##8.60.185':445
- '24.#88.7.51':445
- '24.##8.52.189':445
- '24.##8.163.97':139
- '24.##8.239.36':139
- '24.##8.45.239':139
- '24.##8.138.147':139
- '24.##8.32.131':139
- '24.##8.248.45':139
- '24.##8.107.183':139
- '24.##8.54.205':139
- '24.##8.13.32':139
- '24.##8.168.253':139
- '24.##8.46.15':445
- '24.##8.209.145':445
- '24.##8.35.184':445
- '24.##8.239.237':445
- '24.##8.61.240':445
- '24.##8.220.149':445
- '24.##8.108.35':445
- '24.##8.133.25':445
- '24.##8.59.215':445
- '24.##8.51.171':445
- '24.##8.176.119':445
- '24.##8.15.60':445
- '24.##8.66.72':445
- '24.##8.30.64':445
- '24.##8.161.239':445
- '24.##8.25.220':445
- '24.##8.234.77':445
- '24.##8.53.235':445
- '24.##8.9.218':445
- '24.##8.69.207':445
- '24.##8.145.234':139
- '24.##8.60.185':139
- '24.##8.15.60':139
- '24.##8.30.64':139
- '24.##8.66.72':139
- '24.##8.46.15':139
- '24.##8.53.235':139
- '24.##8.176.119':139
- '24.##8.69.207':139
- '24.##8.234.77':139
- '24.##8.9.218':139
- '24.##8.83.12':139
- '24.#88.5.47':139
- '24.##8.34.85':139
- '24.##8.29.75':139
- '24.#88.7.51':139
- '24.##8.161.239':139
- '24.##8.49.140':139
- '24.##8.52.189':139
- '24.##8.25.220':139
- '24.##8.239.237':139
- '24.##8.21.29':139
- '24.#88.11.3':139
- '24.##8.146.210':139
- '24.##8.64.161':139
- '24.##8.35.116':139
- '24.##8.81.201':139
- '24.##8.22.195':139
- '24.##8.214.116':139
- '24.##8.201.52':139
- '24.##8.210.140':139
- '24.##8.35.184':139
- '24.##8.220.149':139
- '24.##8.61.240':139
- '24.##8.209.145':139
- '24.##8.59.215':139
- '24.##8.133.25':139
- '24.##8.140.214':139
- '24.##8.51.171':139
- '24.##8.108.35':139
- '24.##8.140.214':445
- '24.##8.25.77':139
- '24.##8.75.190':139
- '24.##8.23.111':139
- '24.##8.144.132':139
- '24.##8.45.66':139
- '24.##8.54.15':139
- '24.##8.138.191':139
- '24.##8.158.1':139
- '24.##8.217.199':139
- '24.##8.255.23':139
- '24.##8.67.67':139
- '24.##8.213.113':139
- '24.##8.177.94':139
- '24.##8.69.51':139
- '24.##8.79.252':139
- '24.##8.82.115':139
- '24.##8.106.46':139
- '24.##8.37.207':139
- '24.##8.66.225':139
- '24.##8.236.17':445
- '24.##8.106.46':445
- '24.##8.23.111':445
- '24.##8.82.115':445
- '24.##8.255.23':445
- '24.##8.144.132':445
- '24.##8.45.66':445
- '24.##8.158.1':445
- '24.##8.25.77':445
- '24.##8.75.190':445
- '24.##8.66.225':445
- '24.##8.117.202':445
- '24.##8.177.94':445
- '24.##8.121.220':445
- '24.##8.202.55':445
- '24.##8.69.51':445
- '24.##8.79.252':445
- '24.##8.37.207':445
- '24.##8.67.67':445
- '24.##8.213.113':445
- '24.##8.117.202':139
- '24.##8.32.131':445
- '24.##8.239.36':445
- '24.##8.145.234':445
- '24.##8.138.147':445
- '24.##8.45.239':445
- '24.##8.168.253':445
- '24.##8.107.183':445
- '24.##8.248.45':445
- '24.##8.13.32':445
- '24.##8.22.195':445
- '24.##8.64.161':445
- '24.#88.11.3':445
- '24.##8.210.140':445
- '24.##8.146.210':445
- '24.##8.21.29':445
- '24.##8.201.52':445
- '24.##8.81.201':445
- '24.##8.35.116':445
- '24.##8.214.116':445
- '24.##8.54.205':445
- '24.##8.146.210':9988
- '24.##8.64.161':9988
- '24.##8.133.25':9988
- '24.##8.210.140':9988
- '24.##8.214.116':9988
- '24.##8.121.220':139
- '24.##8.202.55':139
- '24.##8.138.147':9988
- '24.##8.236.17':139
- '24.##8.51.171':9988
- '24.##8.29.75':9988
- '24.##8.52.189':9988
- '24.##8.163.97':445
- '24.##8.35.252':445
- '24.##8.209.145':9988
- '24.##8.59.215':9988
- '24.##8.108.35':9988
- '24.##8.220.149':9988
- '24.##8.35.184':9988