Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %ProgramFiles%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '72.##6.108.205':445
- '72.##6.56.195':445
- '72.##6.205.59':445
- '72.##6.203.53':445
- '72.##6.98.178':139
- '72.##6.142.42':139
- '72.##6.61.199':139
- '72.##6.174.69':139
- '72.##6.153.174':139
- '72.##6.159.242':445
- '72.##6.24.73':445
- '72.##6.110.116':445
- '72.##6.86.184':445
- '72.##6.136.243':445
- '72.##6.150.10':445
- '72.##6.229.98':445
- '72.##6.242.112':445
- '72.##6.62.192':445
- '72.##6.130.131':445
- '72.##6.221.236':139
- '72.##6.63.222':139
- '72.##6.11.58':139
- '72.##6.186.83':139
- '72.##6.75.138':139
- '72.##6.244.175':139
- '72.##6.146.88':139
- '72.##6.157.151':139
- '72.##6.150.7':139
- '72.##6.18.250':139
- '72.##6.63.184':139
- '72.##6.100.80':139
- '72.##6.119.84':139
- '72.##6.7.216':139
- '72.##6.243.3':139
- '72.##6.217.192':139
- '72.##6.81.122':139
- '72.##6.134.211':139
- '72.##6.192.37':139
- '72.##6.99.169':445
- '72.##6.27.189':445
- '72.##6.9.143':445
- '72.##6.53.177':445
- '72.##6.98.233':445
- '72.##6.52.73':445
- '72.##6.153.192':445
- '72.##6.122.75':445
- '72.##6.160.204':445
- '72.##6.136.129':445
- '72.##6.242.68':445
- '72.##6.158.239':445
- '72.##6.188.90':445
- '72.##6.108.205':139
- '72.##6.56.195':139
- '72.##6.220.54':445
- '72.#16.0.88':445
- '72.##6.234.143':445
- '72.##6.109.81':445
- '72.##6.216.45':445
- '72.##6.191.2':445
- '72.##6.6.119':445
- '72.##6.125.110':445
- '72.##6.58.252':445
- '72.##6.204.7':445
- '72.##6.159.249':445
- '72.##6.169.119':445
- '72.##6.103.9':445
- '72.##6.117.102':445
- '72.##6.134.136':445
- '72.##6.82.60':445
- '72.##6.242.144':445
- '72.##6.241.230':445
- '72.##6.195.94':445
- '72.##6.118.243':445
- '72.#16.7.28':445
- '72.##6.109.210':445
- '72.##6.119.241':445
- '72.##6.15.120':445
- '72.##6.86.227':139
- '72.##6.240.86':445
- '72.##6.177.165':445
- '72.##6.146.88':445
- '72.##6.86.227':445
- '72.##6.112.50':445
- '72.##6.51.33':445
- '72.##6.206.249':445
- '72.#16.9.39':445
- '72.##6.96.62':445
- '72.##6.244.175':445
- '72.##6.11.58':445
- '72.##6.186.83':445
- '72.##6.81.122':445
- '72.##6.18.250':445
- '72.##6.221.236':445
- '72.##6.157.151':445
- '72.##6.150.7':445
- '72.##6.63.222':445
- '72.##6.75.138':445
- '72.##6.62.167':445
- '72.##6.182.62':445
- '72.##6.164.235':445
- '72.##6.127.10':445
- '72.##6.105.181':445
- '72.##6.18.87':445
- '72.##6.81.18':445
- '72.##6.37.27':445
- '72.##6.145.159':445
- '72.##6.235.84':445
- '72.##6.67.59':445
- '72.##6.109.66':445
- '72.##6.225.177':445
- '72.##6.196.198':445
- '72.##6.135.76':445
- '72.##6.3.141':445
- '72.##6.60.252':445
- '72.##6.254.100':445
- '72.##6.141.42':445
- '72.##6.217.192':445
- '72.##6.254.100':139
- '72.##6.141.42':139
- '72.##6.109.66':139
- '72.##6.135.76':139
- '72.##6.3.141':139
- '72.##6.164.235':139
- '72.##6.127.10':139
- '72.##6.60.252':139
- '72.##6.235.84':139
- '72.##6.67.59':139
- '72.##6.112.50':139
- '72.#16.9.39':139
- '72.##6.240.86':139
- '72.##6.177.165':139
- '72.##6.96.62':139
- '72.##6.225.177':139
- '72.##6.196.198':139
- '72.##6.51.33':139
- '72.##6.206.249':139
- '72.##6.119.84':445
- '72.##6.7.216':445
- '72.##6.142.42':445
- '72.##6.61.199':445
- '72.##6.63.184':445
- '72.##6.134.211':445
- '72.##6.192.37':445
- '72.##6.100.80':445
- '72.##6.243.3':445
- '72.##6.153.174':445
- '72.##6.105.181':139
- '72.##6.37.27':139
- '72.##6.62.167':139
- '72.##6.182.62':139
- '72.##6.145.159':139
- '72.##6.98.178':445
- '72.##6.174.69':445
- '72.##6.18.87':139
- '72.##6.81.18':139
- '72.##6.205.59':139
- '72.##6.187.195':445
- '72.##6.88.63':445
- '72.##6.149.129':139
- '72.##6.134.84':139
- '72.##6.180.26':445
- '72.##6.92.193':445
- '72.##6.30.12':445
- '72.##6.254.56':445
- '72.##6.142.253':445
- '72.##6.160.171':139
- '72.##6.244.216':139
- '72.##6.179.166':139
- '72.##6.222.120':139
- '72.##6.169.195':139
- '72.##6.218.19':139
- '72.##6.108.88':139
- '72.#16.29.5':139
- '72.##6.132.125':139
- '72.##6.102.2':139
- '72.##6.147.63':445
- '72.##6.3.133':445
- '72.##6.127.210':445
- '72.##6.149.36':445
- '72.##6.202.129':445
- '72.##6.158.155':445
- '72.##6.213.158':445
- '72.##6.158.27':445
- '72.##6.156.109':445
- '72.##6.90.252':445
- '72.##6.79.24':445
- '72.##6.36.205':445
- '72.##6.143.200':445
- '72.##6.81.42':445
- '72.##6.33.112':445
- '72.##6.71.212':445
- '72.##6.32.246':445
- '72.##6.232.128':445
- '72.##6.55.55':445
- '72.##6.196.68':139
- '72.##6.232.128':139
- '72.##6.55.55':139
- '72.##6.36.205':139
- '72.##6.33.112':139
- '72.##6.71.212':139
- '72.##6.127.210':139
- '72.##6.149.36':139
- '72.##6.32.246':139
- '72.##6.90.252':139
- '72.##6.79.24':139
- '72.##6.88.63':139
- '72.##6.81.42':139
- '72.##6.92.193':139
- '72.##6.187.195':139
- '72.##6.143.200':139
- '72.##6.254.56':139
- '72.##6.180.26':139
- '72.##6.142.253':139
- '72.##6.30.12':139
- '72.##6.49.23':139
- '72.##6.87.196':139
- '72.##6.152.198':139
- '72.##6.127.152':139
- '72.##6.39.88':139
- '72.##6.244.5':139
- '72.##6.6.121':139
- '72.##6.214.237':139
- '72.##6.76.110':139
- '72.##6.110.93':139
- '72.##6.202.129':139
- '72.##6.158.27':139
- '72.##6.147.63':139
- '72.##6.3.133':139
- '72.##6.156.109':139
- '72.##6.165.85':139
- '72.##6.57.185':139
- '72.##6.158.155':139
- '72.##6.213.158':139
- '72.##6.165.85':445
- '72.##6.119.241':139
- '72.##6.15.120':139
- '72.##6.242.144':139
- '72.##6.118.243':139
- '72.#16.7.28':139
- '72.##6.134.136':139
- '72.##6.191.2':139
- '72.##6.109.210':139
- '72.##6.125.110':139
- '72.##6.82.60':139
- '72.##6.52.73':139
- '72.##6.160.204':139
- '72.##6.27.189':139
- '72.##6.9.143':139
- '72.##6.136.129':139
- '72.##6.241.230':139
- '72.##6.195.94':139
- '72.##6.153.192':139
- '72.##6.122.75':139
- '72.##6.150.10':139
- '72.##6.62.192':139
- '72.##6.136.243':139
- '72.##6.110.116':139
- '72.##6.130.131':139
- '72.##6.159.242':139
- '72.##6.203.53':139
- '72.##6.229.98':139
- '72.##6.242.112':139
- '72.##6.24.73':139
- '72.##6.204.7':139
- '72.##6.103.9':139
- '72.##6.58.252':139
- '72.##6.6.119':139
- '72.##6.117.102':139
- '72.##6.99.169':139
- '72.##6.86.184':139
- '72.##6.159.249':139
- '72.##6.169.119':139
- '72.##6.98.233':139
- '72.##6.222.120':445
- '72.##6.169.195':445
- '72.##6.6.121':445
- '72.##6.196.68':445
- '72.##6.244.216':445
- '72.##6.132.125':445
- '72.##6.102.2':445
- '72.##6.179.166':445
- '72.##6.218.19':445
- '72.##6.244.5':445
- '72.##6.152.198':445
- '72.##6.127.152':445
- '72.##6.57.185':445
- '72.##6.110.93':445
- '72.##6.49.23':445
- '72.##6.214.237':445
- '72.##6.76.110':445
- '72.##6.87.196':445
- '72.##6.39.88':445
- '72.##6.220.54':139
- '72.##6.109.81':139
- '72.##6.158.239':139
- '72.##6.188.90':139
- '72.##6.216.45':139
- '72.##6.242.68':139
- '72.##6.53.177':139
- '72.#16.0.88':139
- '72.##6.234.143':139
- '72.##6.134.84':9988
- '72.##6.160.171':445
- '72.##6.149.129':445
- '72.##6.108.88':445
- '72.#16.29.5':445
- '72.##6.134.84':445
- '72.##6.254.56':9988
- '72.##6.36.205':9988
- '72.##6.88.63':9988
- '72.##6.79.24':9988