Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '12.##6.207.173':139
- '12.##6.211.230':139
- '12.##6.105.10':139
- '12.##6.143.53':139
- '12.##6.11.123':139
- '12.##6.124.211':139
- '12.##6.42.175':139
- '12.##6.44.135':139
- '12.##6.134.112':139
- '12.##6.125.140':139
- '12.##6.60.212':139
- '12.##6.32.153':139
- '12.##6.111.217':139
- '12.##6.161.149':139
- '12.##6.179.154':139
- '12.##6.149.187':139
- '12.##6.150.111':139
- '12.##6.74.247':139
- '12.##6.32.166':139
- '12.##6.170.179':139
- '12.##6.109.158':139
- '12.##6.127.228':139
- '12.##6.191.48':139
- '12.##6.26.188':445
- '12.##6.14.26':445
- '12.##6.178.169':445
- '12.##6.236.232':445
- '12.##6.132.79':445
- '12.##6.84.14':445
- '12.##6.0.173':445
- '12.##6.37.203':445
- '12.##6.56.15':445
- '12.##6.87.235':445
- '12.##6.122.150':445
- '12.##6.204.182':139
- '12.##6.218.152':139
- '12.##6.82.43':139
- '12.##6.237.221':139
- '12.##6.109.12':139
- '12.##6.85.53':139
- '12.##6.134.151':139
- '12.##6.50.210':139
- '12.##6.236.152':139
- '12.##6.66.112':139
- '12.##6.168.29':139
- '12.##6.131.223':445
- '12.##6.95.249':445
- '12.##6.248.183':445
- '12.##6.149.28':445
- '12.##6.2.174':445
- '12.##6.64.122':445
- '12.##6.163.159':445
- '12.##6.43.53':445
- '12.##6.127.26':445
- '12.##6.15.102':445
- '12.##6.32.250':445
- '12.##6.88.47':445
- '12.##6.165.135':445
- '12.##6.2.189':445
- '12.##6.102.166':445
- '12.##6.187.128':445
- '12.##6.214.153':445
- '12.##6.70.235':445
- '12.##6.121.147':445
- '12.##6.198.174':445
- '12.##6.70.31':445
- '12.##6.174.35':445
- '12.##6.25.189':445
- '12.##6.0.173':139
- '12.##6.37.203':139
- '12.##6.56.15':139
- '12.##6.87.235':139
- '12.##6.122.150':139
- '12.##6.64.38':139
- '12.##6.105.12':139
- '12.##6.84.146':139
- '12.#06.1.41':139
- '12.##6.24.64':139
- '12.##6.16.87':139
- '12.##6.146.137':445
- '12.##6.207.175':445
- '12.##6.101.218':445
- '12.##6.19.25':445
- '12.##6.132.42':445
- '12.##6.236.232':139
- '12.##6.14.26':139
- '12.##6.84.14':139
- '12.##6.26.188':139
- '12.##6.132.79':139
- '12.##6.178.169':139
- '12.##6.64.38':445
- '12.##6.68.227':139
- '12.##6.71.24':139
- '12.##6.213.75':139
- '12.##6.39.95':139
- '12.##6.177.71':139
- '12.#06.27.7':139
- '12.##6.228.39':139
- '12.##6.122.2':139
- '12.##6.32.253':139
- '12.##6.248.243':139
- '12.##6.42.249':139
- '12.##6.149.60':139
- '12.##6.254.27':139
- '12.##6.176.161':139
- '12.##6.13.54':139
- '12.##6.162.10':139
- '12.##6.3.234':139
- '12.##6.107.64':139
- '12.##6.163.116':139
- '12.#06.52.5':139
- '12.##6.186.228':139
- '12.##6.201.129':139
- '12.##6.66.121':139
- '12.##6.46.127':139
- '12.##6.7.232':139
- '12.#06.7.29':139
- '12.##6.60.63':139
- '12.##6.1.136':139
- '12.##6.9.106':139
- '12.##6.181.162':139
- '12.##6.35.41':139
- '12.##6.37.125':139
- '12.##6.12.176':139
- '12.##6.99.103':139
- '12.##6.9.125':139
- '12.##6.130.49':139
- '12.##6.126.2':139
- '12.##6.143.66':139
- '12.##6.246.143':139
- '12.##6.195.35':139
- '12.##6.72.50':139
- '12.##6.62.150':139
- '12.##6.103.223':139
- '12.##6.63.145':139
- '12.##6.231.31':139
- '12.##6.74.247':445
- '12.##6.32.166':445
- '12.##6.170.179':445
- '12.##6.109.158':445
- '12.##6.127.228':445
- '12.##6.143.53':445
- '12.##6.211.230':445
- '12.##6.124.211':445
- '12.##6.207.173':445
- '12.##6.11.123':445
- '12.##6.105.10':445
- '12.##6.105.12':445
- '12.##6.84.146':445
- '12.#06.1.41':445
- '12.##6.24.64':445
- '12.##6.16.87':445
- '12.##6.179.154':445
- '12.##6.111.217':445
- '12.##6.150.111':445
- '12.##6.32.153':445
- '12.##6.149.187':445
- '12.##6.161.149':445
- '12.##6.125.140':445
- '12.##6.134.151':445
- '12.##6.50.210':445
- '12.##6.236.152':445
- '12.##6.66.112':445
- '12.##6.168.29':445
- '12.##6.162.180':139
- '12.##6.192.239':139
- '12.##6.103.67':139
- '12.##6.69.178':139
- '12.##6.68.166':139
- '12.##6.234.69':139
- '12.##6.44.135':445
- '12.##6.191.48':445
- '12.##6.42.175':445
- '12.##6.60.212':445
- '12.##6.134.112':445
- '12.##6.237.221':445
- '12.##6.218.152':445
- '12.##6.85.53':445
- '12.##6.204.182':445
- '12.##6.109.12':445
- '12.##6.82.43':445
- '12.##6.179.67':445
- '12.##6.86.163':445
- '12.##6.141.174':445
- '12.##6.166.125':445
- '12.##6.123.201':445
- '12.##6.255.143':445
- '12.##6.195.112':445
- '12.##6.181.23':445
- '12.##6.164.240':445
- '12.##6.87.194':445
- '12.##6.68.26':445
- '12.##6.31.90':445
- '12.##6.189.53':139
- '12.##6.90.242':139
- '12.##6.127.190':139
- '12.##6.189.13':139
- '12.##6.254.143':139
- '12.##6.117.64':139
- '12.##6.72.241':445
- '12.##6.17.122':445
- '12.##6.100.34':445
- '12.##6.27.106':445
- '12.#06.54.7':445
- '12.##6.220.160':445
- '12.##6.199.116':445
- '12.##6.73.249':445
- '12.##6.47.110':445
- '12.##6.129.28':445
- '12.##6.23.148':445
- '12.##6.76.94':445
- '12.##6.45.68':445
- '12.##6.159.83':445
- '12.##6.0.102':445
- '12.##6.217.242':445
- '12.##6.102.50':445
- '12.##6.46.165':445
- '12.##6.59.57':445
- '12.##6.23.99':445
- '12.##6.33.131':445
- '12.##6.102.220':445
- '12.##6.205.176':445
- '12.#06.9.91':445
- '12.##6.182.41':445
- '12.##6.32.70':445
- '12.##6.24.92':445
- '12.##6.32.147':445
- '12.##6.181.23':139
- '12.##6.164.240':139
- '12.##6.87.194':139
- '12.##6.68.26':139
- '12.##6.31.90':139
- '12.##6.220.160':139
- '12.##6.46.165':139
- '12.##6.59.57':139
- '12.##6.23.99':139
- '12.##6.33.131':139
- '12.##6.102.220':139
- '12.##6.123.201':139
- '12.##6.100.34':139
- '12.#06.54.7':139
- '12.##6.27.106':139
- '12.##6.72.241':139
- '12.##6.17.122':139
- '12.##6.141.174':139
- '12.##6.195.112':139
- '12.##6.86.163':139
- '12.##6.255.143':139
- '12.##6.166.125':139
- '12.##6.205.176':139
- '12.##6.45.68':139
- '12.##6.159.83':139
- '12.##6.0.102':139
- '12.##6.217.242':139
- '12.##6.102.50':139
- '12.##6.114.207':139
- '12.##6.55.162':139
- '12.##6.13.186':139
- '12.##6.101.9':139
- '12.##6.34.35':139
- '12.##6.209.150':139
- '12.#06.9.91':139
- '12.##6.182.41':139
- '12.##6.32.70':139
- '12.##6.24.92':139
- '12.##6.32.147':139
- '12.##6.129.28':139
- '12.##6.73.249':139
- '12.##6.76.94':139
- '12.##6.199.116':139
- '12.##6.23.148':139
- '12.##6.47.110':139
- '12.##6.114.207':445
- '12.##6.127.26':139
- '12.##6.163.159':139
- '12.##6.32.250':139
- '12.##6.64.122':139
- '12.##6.15.102':139
- '12.##6.43.53':139
- '12.##6.101.218':139
- '12.##6.146.137':139
- '12.##6.132.42':139
- '12.##6.25.189':139
- '12.##6.19.25':139
- '12.##6.198.174':139
- '12.##6.70.235':139
- '12.##6.174.35':139
- '12.##6.214.153':139
- '12.##6.70.31':139
- '12.##6.121.147':139
- '12.##6.131.223':139
- '12.##6.95.249':139
- '12.##6.248.183':139
- '12.##6.149.28':139
- '12.##6.2.174':139
- '12.##6.207.175':139
- '12.##6.238.132':445
- '12.#06.9.71':445
- '12.##6.132.200':445
- '12.##6.103.236':445
- '12.##6.72.112':445
- '12.##6.232.109':445
- '12.##6.184.236':445
- '12.##6.94.184':445
- '12.##6.236.194':445
- '12.##6.162.232':445
- '12.##6.89.225':445
- '12.##6.12.23':445
- '12.##6.156.123':445
- '12.##6.5.233':445
- '12.##6.81.117':445
- '12.##6.228.88':445
- '12.##6.192.79':445
- '12.##6.77.51':445
- '12.##6.96.183':445
- '12.##6.40.216':445
- '12.##6.36.136':445
- '12.##6.77.109':445
- '12.##6.34.35':9988
- '12.##6.209.150':9988
- '12.##6.73.249':9988
- '12.##6.33.131':9988
- '12.#06.9.91':9988
- '12.##6.90.242':9988
- '12.##6.12.23':139
- '12.##6.156.123':139
- '12.##6.5.233':139
- '12.##6.81.117':139
- '12.##6.228.88':139
- '12.##6.55.162':445
- '12.##6.13.186':445
- '12.##6.101.9':445
- '12.##6.34.35':445
- '12.##6.209.150':445
- '12.##6.189.13':445
- '12.##6.90.242':445
- '12.##6.117.64':445
- '12.##6.189.53':445
- '12.##6.254.143':445
- '12.##6.127.190':445
- '12.##6.192.79':139
- '12.##6.184.236':139
- '12.##6.94.184':139
- '12.##6.236.194':139
- '12.##6.162.232':139
- '12.##6.89.225':139
- '12.##6.179.67':139
- '12.##6.88.47':139
- '12.##6.165.135':139
- '12.##6.2.189':139
- '12.##6.102.166':139
- '12.##6.187.128':139
- '12.##6.77.51':139
- '12.##6.96.183':139
- '12.##6.40.216':139
- '12.##6.36.136':139
- '12.##6.77.109':139
- '12.##6.103.236':139
- '12.#06.9.71':139
- '12.##6.232.109':139
- '12.##6.238.132':139
- '12.##6.72.112':139
- '12.##6.132.200':139