Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '64.##6.29.69':139
- '64.##6.90.225':139
- '64.##6.232.166':139
- '64.##6.69.215':139
- '64.##6.187.26':139
- '64.##6.85.59':139
- '64.##6.95.45':139
- '64.#46.67.4':139
- '64.##6.200.5':139
- '64.##6.85.33':139
- '64.##6.30.40':139
- '64.##6.0.231':139
- '64.##6.10.148':139
- '64.##6.150.196':139
- '64.##6.255.220':139
- '64.##6.117.179':139
- '64.##6.96.232':139
- '64.##6.108.77':139
- '64.##6.66.31':139
- '64.##6.23.119':139
- '64.##6.94.138':139
- '64.##6.141.80':139
- '64.##6.66.31':445
- '64.##6.96.232':445
- '64.##6.94.138':445
- '64.##6.10.148':445
- '64.##6.23.119':445
- '64.##6.187.26':445
- '64.##6.232.166':445
- '64.##6.69.215':445
- '64.##6.108.77':445
- '64.##6.30.40':445
- '64.##6.0.231':445
- '64.##6.115.132':139
- '64.##6.15.51':139
- '64.##6.53.60':139
- '64.##6.207.56':139
- '64.##6.170.201':139
- '64.##6.117.179':445
- '64.##6.150.196':445
- '64.##6.255.220':445
- '64.##6.69.129':139
- '64.##6.153.159':445
- '64.##6.103.8':139
- '64.##6.53.37':139
- '64.##6.8.140':139
- '64.##6.0.150':139
- '64.##6.186.27':139
- '64.##6.70.88':139
- '64.##6.62.43':445
- '64.#46.88.9':139
- '64.##6.194.155':139
- '64.##6.43.108':139
- '64.##6.208.211':139
- '64.##6.193.28':139
- '64.#46.2.35':139
- '64.##6.244.122':139
- '64.##6.137.196':139
- '64.##6.43.19':139
- '64.##6.137.227':139
- '64.##6.211.147':139
- '64.##6.242.122':139
- '64.##6.96.78':139
- '64.##6.251.155':139
- '64.#46.39.1':445
- '64.##6.103.8':445
- '64.##6.53.37':445
- '64.##6.8.140':445
- '64.##6.0.150':445
- '64.##6.186.27':445
- '64.##6.70.88':445
- '64.##6.153.159':139
- '64.#46.88.9':445
- '64.##6.194.155':445
- '64.##6.43.108':445
- '64.##6.208.211':445
- '64.##6.193.28':445
- '64.#46.2.35':445
- '64.##6.244.122':445
- '64.##6.137.196':445
- '64.##6.43.19':445
- '64.##6.137.227':445
- '64.##6.211.147':445
- '64.##6.242.122':445
- '64.##6.96.78':445
- '64.##6.251.155':445
- '64.##6.29.69':445
- '64.##6.67.141':139
- '64.##6.174.67':139
- '64.##6.75.94':445
- '64.##6.163.109':445
- '64.##6.121.189':445
- '64.##6.60.22':139
- '64.##6.68.166':139
- '64.##6.22.100':139
- '64.##6.203.34':139
- '64.##6.100.111':139
- '64.##6.200.61':445
- '64.##6.70.121':445
- '64.##6.102.202':445
- '64.##6.208.214':445
- '64.##6.35.188':445
- '64.##6.155.96':445
- '64.##6.245.177':445
- '64.##6.129.245':445
- '64.##6.2.234':445
- '64.##6.40.35':445
- '64.##6.144.106':445
- '64.##6.76.79':139
- '64.##6.138.230':139
- '64.##6.61.139':139
- '64.##6.223.41':139
- '64.##6.86.72':139
- '64.##6.22.86':139
- '64.##6.111.219':139
- '64.##6.127.70':139
- '64.##6.93.75':139
- '64.##6.58.61':139
- '64.##6.68.58':139
- '64.##6.73.81':139
- '64.##6.208.235':139
- '64.##6.136.136':139
- '64.##6.224.119':139
- '64.##6.217.167':139
- '64.##6.56.217':139
- '64.##6.244.9':139
- '64.##6.80.244':139
- '64.##6.10.26':139
- '64.##6.94.225':139
- '64.##6.25.137':139
- '64.##6.134.164':139
- '64.##6.38.228':139
- '64.##6.163.157':139
- '64.##6.15.51':445
- '64.##6.69.129':445
- '64.##6.96.225':139
- '64.##6.236.193':139
- '64.##6.209.128':139
- '64.##6.29.212':139
- '64.##6.27.95':139
- '64.##6.115.132':445
- '64.#46.67.4':445
- '64.##6.85.59':445
- '64.##6.85.33':445
- '64.##6.90.225':445
- '64.##6.200.5':445
- '64.##6.170.201':445
- '64.##6.53.60':445
- '64.##6.207.56':445
- '64.##6.95.45':445
- '64.##6.141.80':445
- '64.##6.35.188':139
- '64.##6.134.164':445
- '64.##6.38.228':445
- '64.##6.163.157':445
- '64.##6.121.189':139
- '64.##6.75.94':139
- '64.##6.96.225':445
- '64.##6.236.193':445
- '64.##6.209.128':445
- '64.##6.29.212':445
- '64.##6.27.95':445
- '64.##6.163.109':139
- '64.##6.102.202':139
- '64.##6.40.35':139
- '64.##6.70.121':139
- '64.##6.155.96':139
- '64.##6.208.214':139
- '64.##6.129.245':139
- '64.##6.200.61':139
- '64.##6.245.177':139
- '64.##6.144.106':139
- '64.##6.2.234':139
- '64.##6.8.247':445
- '64.##6.197.162':445
- '64.##6.35.243':445
- '64.##6.53.217':445
- '64.##6.187.42':445
- '64.##6.29.228':445
- '64.##6.36.51':445
- '64.##6.51.142':445
- '64.##6.152.175':445
- '64.##6.130.42':445
- '64.##6.124.187':445
- '64.##6.61.227':139
- '64.##6.178.212':139
- '64.##6.13.160':139
- '64.##6.63.67':139
- '64.##6.73.63':139
- '64.##6.175.124':445
- '64.##6.101.147':445
- '64.##6.247.247':139
- '64.##6.99.43':139
- '64.##6.232.196':139
- '64.##6.218.36':445
- '64.##6.159.42':445
- '64.##6.60.131':445
- '64.##6.13.246':445
- '64.##6.205.102':445
- '64.##6.102.184':445
- '64.##6.190.10':445
- '64.##6.101.153':445
- '64.##6.227.22':445
- '64.##6.176.137':445
- '64.##6.73.71':445
- '64.##6.165.28':445
- '64.##6.206.163':445
- '64.##6.173.203':445
- '64.##6.237.197':445
- '64.##6.178.203':445
- '64.##6.26.218':445
- '64.##6.103.87':445
- '64.##6.132.122':445
- '64.##6.152.29':445
- '64.##6.117.99':445
- '64.##6.4.233':445
- '64.##6.26.218':139
- '64.##6.178.203':139
- '64.##6.218.36':139
- '64.##6.51.142':139
- '64.##6.36.51':139
- '64.##6.173.203':139
- '64.##6.4.233':139
- '64.##6.117.99':139
- '64.##6.237.197':139
- '64.##6.206.163':139
- '64.##6.29.228':139
- '64.##6.124.187':139
- '64.##6.101.147':139
- '64.##6.53.217':139
- '64.##6.197.162':139
- '64.##6.187.42':139
- '64.##6.152.175':139
- '64.##6.130.42':139
- '64.##6.8.247':139
- '64.##6.35.243':139
- '64.##6.175.124':139
- '64.##6.152.29':139
- '64.##6.201.33':139
- '64.##6.89.147':139
- '64.##6.202.38':139
- '64.##6.190.10':139
- '64.##6.101.153':139
- '64.##6.78.200':139
- '64.##6.67.194':139
- '64.#46.3.95':139
- '64.##6.206.13':139
- '64.##6.129.36':139
- '64.##6.227.22':139
- '64.##6.102.184':139
- '64.##6.205.102':139
- '64.##6.165.28':139
- '64.##6.103.87':139
- '64.##6.132.122':139
- '64.##6.176.137':139
- '64.##6.73.71':139
- '64.##6.159.42':139
- '64.##6.13.246':139
- '64.##6.60.131':139
- '64.##6.202.38':445
- '64.##6.123.156':445
- '64.##6.95.44':445
- '64.##6.206.240':445
- '64.#46.37.4':139
- '64.##6.33.75':445
- '64.##6.252.154':445
- '64.##6.147.91':445
- '64.##6.154.166':445
- '64.##6.243.226':445
- '64.##6.185.120':445
- '64.##6.17.25':139
- '64.#46.6.91':139
- '64.##6.168.233':139
- '64.##6.37.45':139
- '64.##6.209.127':139
- '64.#46.8.96':139
- '64.##6.113.159':139
- '64.##6.172.227':139
- '64.##6.159.115':139
- '64.##6.183.208':139
- '64.##6.115.140':139
- '64.##6.201.124':445
- '64.##6.159.115':445
- '64.##6.113.159':445
- '64.##6.115.140':445
- '64.##6.168.233':445
- '64.##6.183.208':445
- '64.##6.62.43':139
- '64.#46.39.1':139
- '64.#46.37.4':445
- '64.##6.172.227':445
- '64.##6.17.25':445
- '64.#46.6.91':445
- '64.##6.162.147':445
- '64.##6.135.59':445
- '64.##6.147.250':445
- '64.##6.231.49':445
- '64.##6.250.93':445
- '64.#46.8.96':445
- '64.##6.37.45':445
- '64.##6.209.127':445
- '64.##6.59.205':445
- '64.##6.47.130':445
- '64.##6.247.247':445
- '64.##6.101.147':9988
- '64.##6.232.196':445
- '64.##6.61.227':445
- '64.##6.99.43':445
- '64.##6.4.233':9988
- '64.##6.117.99':9988
- '64.##6.178.203':9988
- '64.##6.36.51':9988
- '64.##6.218.36':9988
- '64.##6.178.212':445
- '64.##6.206.13':445
- '64.#46.3.95':445
- '64.##6.129.36':445
- '64.##6.89.147':445
- '64.##6.201.33':445
- '64.##6.73.63':445
- '64.##6.13.160':445
- '64.##6.63.67':445
- '64.##6.78.200':445
- '64.##6.67.194':445
- '64.##6.152.29':9988
- '64.##6.231.49':139
- '64.##6.250.93':139
- '64.##6.201.124':139
- '64.##6.252.154':139
- '64.##6.147.91':139
- '64.##6.59.205':139
- '64.##6.47.130':139
- '64.##6.135.59':139
- '64.##6.147.250':139
- '64.##6.162.147':139
- '64.##6.154.166':139
- '64.##6.227.22':9988
- '64.##6.33.75':139
- '64.##6.132.122':9988
- '64.##6.103.87':9988
- '64.##6.165.28':9988
- '64.##6.243.226':139
- '64.##6.185.120':139
- '64.##6.95.44':139
- '64.##6.206.240':139
- '64.##6.123.156':139