Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '63.##1.19.204':139
- '63.##1.93.199':139
- '63.##1.99.154':139
- '63.##1.134.99':139
- '63.##1.138.169':445
- '63.##1.63.166':445
- '63.#01.80.4':139
- '63.##1.126.176':139
- '63.##1.154.57':139
- '63.##1.178.178':139
- '63.##1.219.178':139
- '63.##1.196.113':139
- '63.##1.249.130':139
- '63.##1.124.178':139
- '63.##1.57.120':139
- '63.##1.202.219':139
- '63.##1.12.93':139
- '63.##1.100.106':445
- '63.##1.3.171':445
- '63.##1.17.151':445
- '63.##1.183.251':445
- '63.##1.88.231':445
- '63.##1.12.248':445
- '63.##1.18.51':445
- '63.##1.185.190':445
- '63.##1.153.91':445
- '63.##1.18.41':445
- '63.##1.183.197':445
- '63.##1.254.116':445
- '63.#01.5.69':445
- '63.##1.218.187':445
- '63.##1.59.125':445
- '63.##1.246.229':445
- '63.##1.97.140':445
- '63.##1.11.173':445
- '63.##1.147.193':139
- '63.##1.183.197':139
- '63.##1.254.116':139
- '63.#01.5.69':139
- '63.##1.218.187':139
- '63.##1.59.125':139
- '63.##1.246.229':139
- '63.##1.97.140':139
- '63.##1.11.173':139
- '63.##1.100.106':139
- '63.##1.182.175':445
- '63.##1.119.122':445
- '63.##1.123.249':445
- '63.##1.94.54':445
- '63.##1.138.169':139
- '63.##1.63.166':139
- '63.#01.10.9':445
- '63.##1.29.143':445
- '63.##1.18.41':139
- '63.##1.125.138':139
- '63.##1.160.145':139
- '63.##1.74.146':139
- '63.##1.196.1':139
- '63.##1.196.134':139
- '63.##1.48.79':139
- '63.##1.23.194':139
- '63.##1.40.141':139
- '63.##1.146.18':139
- '63.##1.3.171':139
- '63.##1.17.151':139
- '63.##1.183.251':139
- '63.##1.88.231':139
- '63.##1.12.248':139
- '63.##1.18.51':139
- '63.##1.185.190':139
- '63.##1.153.91':139
- '63.##1.146.18':445
- '63.##1.93.155':139
- '63.##1.51.14':139
- '63.##1.176.114':139
- '63.##1.142.176':139
- '63.##1.233.210':139
- '63.#01.33.1':139
- '63.##1.17.228':139
- '63.##1.151.79':139
- '63.##1.114.204':139
- '63.##1.69.135':139
- '63.##1.27.225':139
- '63.##1.16.61':139
- '63.##1.72.116':139
- '63.##1.166.15':139
- '63.##1.203.221':139
- '63.##1.54.30':139
- '63.##1.127.175':139
- '63.##1.132.199':139
- '63.##1.25.135':139
- '63.##1.157.252':139
- '63.##1.136.232':139
- '63.##1.194.119':139
- '63.##1.138.29':139
- '63.##1.120.155':139
- '63.##1.58.153':139
- '63.##1.42.33':139
- '63.##1.177.49':139
- '63.##1.121.168':139
- '63.##1.250.231':139
- '63.##1.11.239':139
- '63.##1.106.1':139
- '63.##1.41.132':139
- '63.##1.52.42':139
- '63.##1.167.39':139
- '63.##1.132.138':139
- '63.##1.154.236':445
- '63.##1.178.178':445
- '63.##1.219.178':445
- '63.##1.196.113':445
- '63.##1.249.130':445
- '63.##1.124.178':445
- '63.##1.57.120':445
- '63.##1.202.219':445
- '63.##1.12.93':445
- '63.##1.147.193':445
- '63.##1.125.138':445
- '63.##1.160.145':445
- '63.##1.74.146':445
- '63.##1.196.1':445
- '63.##1.196.134':445
- '63.##1.48.79':445
- '63.##1.23.194':445
- '63.##1.40.141':445
- '63.##1.154.57':445
- '63.##1.154.236':139
- '63.##1.44.13':445
- '63.##1.108.99':139
- '63.##1.161.151':139
- '63.##1.108.99':445
- '63.##1.161.151':445
- '63.##1.69.253':445
- '63.##1.60.33':445
- '63.##1.60.33':139
- '63.##1.19.204':445
- '63.##1.93.199':445
- '63.##1.99.154':445
- '63.##1.134.99':445
- '63.##1.44.13':139
- '63.##1.69.253':139
- '63.#01.80.4':445
- '63.##1.126.176':445
- '63.##1.29.143':139
- '63.##1.152.38':139
- '63.##1.37.69':139
- '63.##1.108.197':139
- '63.##1.11.66':139
- '63.##1.50.15':445
- '63.##1.249.24':445
- '63.##1.232.109':139
- '63.##1.95.137':139
- '63.##1.119.11':139
- '63.##1.58.131':139
- '63.##1.96.190':139
- '63.##1.156.50':139
- '63.##1.176.250':139
- '63.##1.43.48':139
- '63.##1.188.215':139
- '63.##1.163.126':139
- '63.##1.130.86':139
- '63.##1.150.92':445
- '63.##1.133.185':445
- '63.#01.4.43':445
- '63.##1.58.218':445
- '63.##1.238.227':445
- '63.##1.152.87':445
- '63.##1.224.38':445
- '63.##1.62.57':445
- '63.##1.224.198':445
- '63.##1.164.120':445
- '63.##1.61.135':445
- '63.##1.11.32':445
- '63.##1.69.73':445
- '63.##1.25.144':445
- '63.##1.139.89':445
- '63.##1.103.217':445
- '63.##1.116.42':445
- '63.##1.101.213':445
- '63.##1.39.208':139
- '63.##1.164.120':139
- '63.##1.58.218':139
- '63.##1.139.89':139
- '63.##1.103.217':139
- '63.#01.4.43':139
- '63.##1.62.57':139
- '63.##1.238.227':139
- '63.##1.133.185':139
- '63.##1.101.213':139
- '63.##1.25.144':139
- '63.##1.61.135':139
- '63.##1.50.15':139
- '63.##1.249.24':139
- '63.##1.11.32':139
- '63.##1.116.42':139
- '63.##1.69.73':139
- '63.##1.150.92':139
- '63.##1.224.198':139
- '63.##1.188.170':139
- '63.##1.111.188':139
- '63.##1.154.126':139
- '63.##1.52.218':139
- '63.##1.46.222':139
- '63.##1.208.46':139
- '63.##1.200.111':139
- '63.##1.246.16':139
- '63.##1.148.23':139
- '63.##1.75.159':139
- '63.##1.97.113':139
- '63.##1.152.87':139
- '63.##1.224.38':139
- '63.##1.244.202':139
- '63.##1.143.235':139
- '63.##1.211.32':139
- '63.##1.240.140':139
- '63.##1.75.159':445
- '63.##1.133.185':9988
- '63.#01.4.91':139
- '63.##1.103.217':9988
- '63.##1.148.23':9988
- '63.##1.61.51':139
- '63.##1.191.251':139
- '63.##1.31.243':139
- '63.##1.69.152':139
- '63.##1.101.213':9988
- '63.##1.249.24':9988
- '63.##1.224.198':9988
- '63.##1.97.113':9988
- '63.#01.4.43':9988
- '63.##1.152.87':9988
- '63.##1.211.32':9988
- '63.##1.143.235':9988
- '63.##1.75.159':9988
- '63.##1.170.184':139
- '63.##1.169.9':445
- '63.##1.123.249':139
- '63.##1.67.60':445
- '63.##1.20.67':445
- '63.##1.119.122':139
- '63.#01.10.9':139
- '63.##1.94.54':139
- '63.##1.182.175':139
- '63.##1.170.184':445
- '63.##1.169.9':139
- '63.#01.4.91':445
- '63.##1.67.60':139
- '63.##1.20.67':139
- '63.##1.61.51':445
- '63.##1.191.251':445
- '63.##1.31.243':445
- '63.##1.69.152':445
- '63.##1.116.42':9988
- '63.##1.246.16':445
- '63.##1.46.222':445
- '63.##1.111.188':445
- '63.##1.200.111':445
- '63.##1.156.50':445
- '63.##1.176.250':445
- '63.##1.208.46':445
- '63.##1.39.208':445
- '63.##1.188.170':445
- '63.##1.240.140':445
- '63.##1.244.202':445
- '63.##1.97.113':445
- '63.##1.211.32':445
- '63.##1.154.126':445
- '63.##1.52.218':445
- '63.##1.143.235':445
- '63.##1.148.23':445
- '63.##1.58.131':445
- '63.##1.95.137':445
- '63.##1.11.32':9988
- '63.##1.37.69':445
- '63.##1.232.109':445
- '63.##1.164.120':9988
- '63.##1.69.73':9988
- '63.##1.244.202':9988
- '63.##1.224.38':9988
- '63.##1.152.38':445
- '63.##1.130.86':445
- '63.##1.43.48':445
- '63.##1.96.190':445
- '63.##1.163.126':445
- '63.##1.108.197':445
- '63.##1.11.66':445
- '63.##1.188.215':445
- '63.##1.119.11':445