Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '80.#26.2.21':445
- '80.##6.12.59':445
- '80.##6.88.86':445
- '80.##6.207.252':445
- '80.##6.86.218':445
- '80.##6.163.36':445
- '80.##6.111.24':445
- '80.##6.123.86':445
- '80.##6.82.150':445
- '80.##6.115.82':445
- '80.#26.2.33':445
- '80.##6.91.17':445
- '80.#26.4.14':445
- '80.##6.16.245':445
- '80.##6.146.5':445
- '80.##6.74.202':445
- '80.##6.40.64':445
- '80.##6.19.203':445
- '80.##6.249.220':445
- '80.##6.124.167':445
- '80.##6.221.124':445
- '80.##6.226.96':445
- '80.##6.11.12':139
- '80.##6.30.212':139
- '80.##6.157.235':139
- '80.##6.238.47':139
- '80.##6.15.46':139
- '80.##6.65.249':139
- '80.##6.136.66':139
- '80.##6.251.162':139
- '80.##6.204.8':139
- '80.##6.226.117':139
- '80.##6.187.211':139
- '80.##6.136.189':139
- '80.##6.252.128':139
- '80.##6.119.10':139
- '80.##6.55.17':445
- '80.##6.105.24':445
- '80.##6.252.128':445
- '80.##6.211.180':445
- '80.##6.136.189':445
- '80.##6.211.180':139
- '80.##6.119.10':445
- '80.##6.123.86':139
- '80.##6.163.36':139
- '80.##6.115.82':139
- '80.##6.12.59':139
- '80.##6.82.150':139
- '80.##6.105.24':139
- '80.##6.68.101':445
- '80.##6.55.17':139
- '80.##6.111.24':139
- '80.##6.226.96':139
- '80.#26.2.21':139
- '80.##6.249.220':139
- '80.##6.40.64':139
- '80.##6.221.124':139
- '80.#26.4.14':139
- '80.##6.124.167':139
- '80.##6.86.218':139
- '80.##6.88.86':139
- '80.##6.207.252':139
- '80.##6.19.203':139
- '80.#26.2.33':139
- '80.##6.84.70':445
- '80.##6.8.246':445
- '80.##6.47.86':445
- '80.##6.79.158':445
- '80.##6.59.105':445
- '80.##6.71.182':445
- '80.##6.213.109':445
- '80.##6.20.181':445
- '80.##6.41.149':445
- '80.##6.240.228':445
- '80.##6.140.72':445
- '80.##6.68.145':445
- '80.##6.230.12':445
- '80.##6.73.230':445
- '80.##6.96.100':445
- '80.##6.131.160':445
- '80.##6.204.103':445
- '80.##6.136.28':445
- '80.##6.202.106':445
- '80.##6.182.75':445
- '80.##6.180.38':445
- '80.##6.75.193':445
- '80.##6.21.14':139
- '80.##6.20.42':445
- '80.##6.39.34':445
- '80.##6.150.80':445
- '80.##6.78.222':445
- '80.##6.93.109':445
- '80.##6.167.28':445
- '80.##6.219.166':445
- '80.##6.65.22':445
- '80.##6.105.53':445
- '80.##6.3.158':445
- '80.##6.1.184':445
- '80.##6.21.14':445
- '80.#26.2.12':445
- '80.##6.136.66':445
- '80.##6.251.162':445
- '80.##6.65.249':445
- '80.##6.61.79':445
- '80.##6.247.60':445
- '80.##6.83.128':445
- '80.##6.180.115':445
- '80.##6.220.103':445
- '80.##6.121.220':445
- '80.##6.208.217':445
- '80.##6.147.229':445
- '80.##6.148.62':445
- '80.##6.136.1':445
- '80.##6.62.20':445
- '80.##6.142.186':139
- '80.##6.105.73':139
- '80.##6.31.175':139
- '80.##6.56.223':445
- '80.#26.9.62':139
- '80.##6.46.216':445
- '80.##6.73.210':445
- '80.##6.99.228':445
- '80.##6.232.22':445
- '80.##6.108.122':445
- '80.##6.38.213':445
- '80.##6.25.206':445
- '80.##6.6.108':445
- '80.##6.21.234':445
- '80.##6.153.227':445
- '80.##6.227.153':445
- '80.##6.65.22':139
- '80.##6.167.28':139
- '80.##6.3.158':139
- '80.##6.39.34':139
- '80.##6.105.53':139
- '80.##6.38.213':139
- '80.##6.232.22':139
- '80.##6.108.122':139
- '80.##6.219.166':139
- '80.##6.121.220':139
- '80.##6.20.42':139
- '80.##6.83.128':139
- '80.##6.61.79':139
- '80.##6.220.103':139
- '80.#26.2.12':139
- '80.##6.180.115':139
- '80.##6.93.109':139
- '80.##6.150.80':139
- '80.##6.78.222':139
- '80.##6.247.60':139
- '80.##6.1.184':139
- '80.##6.73.210':139
- '80.##6.238.47':445
- '80.##6.15.46':445
- '80.##6.187.211':445
- '80.##6.147.229':139
- '80.##6.56.223':139
- '80.##6.204.8':445
- '80.##6.226.117':445
- '80.##6.30.212':445
- '80.##6.157.235':445
- '80.##6.11.12':445
- '80.##6.208.217':139
- '80.##6.21.234':139
- '80.##6.25.206':139
- '80.##6.227.153':139
- '80.##6.99.228':139
- '80.##6.153.227':139
- '80.##6.62.20':139
- '80.##6.148.62':139
- '80.##6.136.1':139
- '80.##6.6.108':139
- '80.##6.46.216':139
- '80.##6.91.17':139
- '80.##6.70.41':445
- '80.##6.78.70':445
- '80.##6.42.35':445
- '80.##6.110.237':445
- '80.##6.35.110':445
- '80.##6.8.243':445
- '80.##6.92.66':445
- '80.##6.36.203':445
- '80.##6.123.32':445
- '80.##6.25.58':445
- '80.##6.111.114':445
- '80.##6.148.10':139
- '80.##6.14.20':139
- '80.##6.81.253':139
- '80.##6.41.207':139
- '80.##6.72.205':139
- '80.##6.95.14':445
- '80.##6.59.160':445
- '80.##6.30.56':139
- '80.##6.225.59':139
- '80.##6.127.211':139
- '80.##6.49.106':445
- '80.##6.15.226':445
- '80.##6.2.201':445
- '80.##6.50.24':445
- '80.##6.61.46':445
- '80.##6.131.60':445
- '80.##6.159.56':445
- '80.##6.231.62':445
- '80.##6.5.179':445
- '80.##6.23.125':445
- '80.##6.255.242':445
- '80.##6.51.207':445
- '80.##6.249.247':445
- '80.##6.77.98':445
- '80.##6.248.1':445
- '80.##6.200.251':445
- '80.##6.105.87':445
- '80.##6.93.100':445
- '80.##6.209.97':445
- '80.##6.192.12':445
- '80.#26.68.3':445
- '80.##6.57.169':445
- '80.##6.200.251':139
- '80.##6.105.87':139
- '80.##6.49.106':139
- '80.##6.8.243':139
- '80.##6.92.66':139
- '80.#26.68.3':139
- '80.##6.57.169':139
- '80.##6.77.98':139
- '80.##6.248.1':139
- '80.##6.249.247':139
- '80.##6.36.203':139
- '80.##6.110.237':139
- '80.##6.35.110':139
- '80.##6.111.114':139
- '80.##6.95.14':139
- '80.##6.59.160':139
- '80.##6.123.32':139
- '80.##6.25.58':139
- '80.##6.78.70':139
- '80.##6.42.35':139
- '80.##6.70.41':139
- '80.##6.192.12':139
- '80.##6.78.228':139
- '80.##6.109.209':139
- '80.##6.87.157':139
- '80.##6.159.56':139
- '80.##6.231.62':139
- '80.##6.152.171':139
- '80.##6.56.152':139
- '80.##6.171.94':139
- '80.##6.42.144':139
- '80.##6.174.69':139
- '80.##6.5.179':139
- '80.##6.61.46':139
- '80.##6.131.60':139
- '80.##6.51.207':139
- '80.##6.93.100':139
- '80.##6.209.97':139
- '80.##6.23.125':139
- '80.##6.255.242':139
- '80.##6.2.201':139
- '80.##6.50.24':139
- '80.##6.15.226':139
- '80.##6.87.157':445
- '80.##6.246.13':445
- '80.##6.247.151':445
- '80.##6.178.23':445
- '80.##6.247.151':139
- '80.##6.101.239':139
- '80.##6.131.160':139
- '80.##6.204.103':139
- '80.##6.84.70':139
- '80.##6.101.239':445
- '80.##6.68.101':139
- '80.##6.246.13':139
- '80.##6.5.165':445
- '80.##6.58.195':445
- '80.##6.115.139':445
- '80.##6.33.245':445
- '80.##6.138.166':445
- '80.##6.4.203':445
- '80.##6.178.23':139
- '80.##6.45.140':445
- '80.##6.124.6':445
- '80.##6.77.197':445
- '80.##6.96.100':139
- '80.##6.140.72':139
- '80.##6.41.149':139
- '80.##6.240.228':139
- '80.##6.8.246':139
- '80.##6.47.86':139
- '80.##6.74.202':139
- '80.##6.16.245':139
- '80.##6.146.5':139
- '80.##6.213.109':139
- '80.##6.20.181':139
- '80.##6.79.158':139
- '80.##6.75.193':139
- '80.##6.182.75':139
- '80.##6.180.38':139
- '80.##6.230.12':139
- '80.##6.73.230':139
- '80.##6.59.105':139
- '80.##6.71.182':139
- '80.##6.68.145':139
- '80.##6.136.28':139
- '80.##6.202.106':139
- '80.##6.30.56':445
- '80.##6.248.1':9988
- '80.##6.127.211':445
- '80.##6.14.20':445
- '80.##6.225.59':445
- '80.##6.61.46':9988
- '80.##6.249.247':9988
- '80.##6.25.58':9988
- '80.##6.70.41':9988
- '80.##6.92.66':9988
- '80.##6.148.10':445
- '80.##6.174.69':445
- '80.##6.171.94':445
- '80.##6.42.144':445
- '80.##6.78.228':445
- '80.##6.109.209':445
- '80.##6.72.205':445
- '80.##6.81.253':445
- '80.##6.41.207':445
- '80.##6.152.171':445
- '80.##6.56.152':445
- '80.##6.49.106':9988
- '80.##6.115.139':139
- '80.##6.5.165':139
- '80.##6.138.166':139
- '80.##6.95.14':9988
- '80.##6.33.245':139
- '80.##6.45.140':139
- '80.##6.4.203':139
- '80.##6.77.197':139
- '80.##6.58.195':139
- '80.##6.124.6':139
- '80.##6.59.160':9988
- '80.##6.77.98':9988
- '80.##6.123.32':9988
- '80.##6.111.114':9988
- '80.##6.110.237':9988
- '80.##6.8.243':9988
- '80.##6.36.203':9988
- '80.##6.35.110':9988
- '80.##6.42.35':9988
- '80.##6.192.12':9988
- '80.##6.57.169':9988