Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.##5.68.161':139
- '59.##5.249.226':139
- '59.##5.80.16':139
- '59.##5.86.10':139
- '59.##5.88.41':445
- '59.##5.47.84':445
- '59.#15.0.20':445
- '59.##5.247.64':445
- '59.##5.129.100':139
- '59.##5.29.230':139
- '59.##5.145.17':139
- '59.##5.211.82':139
- '59.##5.81.131':139
- '59.##5.158.51':139
- '59.##5.209.43':139
- '59.##5.27.38':139
- '59.##5.23.248':139
- '59.##5.182.163':445
- '59.##5.168.240':445
- '59.##5.95.114':445
- '59.##5.237.84':445
- '59.##5.139.82':445
- '59.#15.0.20':139
- '59.##5.82.74':445
- '59.##5.237.86':445
- '59.##5.86.180':445
- '59.#15.1.47':445
- '59.##5.80.104':445
- '59.##5.220.180':445
- '59.##5.184.237':445
- '59.##5.227.220':445
- '59.##5.104.109':445
- '59.##5.211.148':445
- '59.##5.25.59':445
- '59.##5.209.43':445
- '59.##5.86.10':445
- '59.##5.158.51':445
- '59.##5.129.100':445
- '59.##5.68.161':445
- '59.##5.170.91':139
- '59.##5.249.226':445
- '59.##5.80.16':445
- '59.##5.27.38':445
- '59.##5.28.117':445
- '59.##5.211.82':445
- '59.##5.22.111':445
- '59.##5.135.8':445
- '59.##5.29.230':445
- '59.##5.23.248':445
- '59.##5.81.131':445
- '59.##5.145.17':445
- '59.##5.45.122':139
- '59.##5.113.119':139
- '59.##5.11.129':139
- '59.##5.128.233':139
- '59.##5.135.8':139
- '59.##5.28.117':139
- '59.##5.33.218':139
- '59.##5.22.111':139
- '59.##5.46.40':139
- '59.##5.169.121':139
- '59.##5.191.111':139
- '59.##5.215.73':139
- '59.##5.213.41':139
- '59.##5.187.238':139
- '59.##5.238.111':139
- '59.##5.183.231':139
- '59.##5.231.187':139
- '59.##5.81.61':445
- '59.##5.10.77':445
- '59.##5.209.161':445
- '59.##5.223.79':445
- '59.##5.233.5':445
- '59.##5.140.221':139
- '59.##5.131.129':445
- '59.##5.129.233':445
- '59.##5.41.210':445
- '59.##5.158.208':445
- '59.##5.90.253':445
- '59.##5.120.85':445
- '59.##5.71.152':445
- '59.##5.101.138':445
- '59.##5.138.42':445
- '59.##5.40.24':445
- '59.##5.28.230':445
- '59.##5.120.85':139
- '59.##5.85.219':139
- '59.##5.153.75':139
- '59.##5.75.120':139
- '59.##5.195.172':139
- '59.##5.71.152':139
- '59.##5.28.230':139
- '59.##5.90.253':139
- '59.##5.42.153':139
- '59.##5.106.133':139
- '59.##5.203.174':139
- '59.##5.221.54':139
- '59.##5.7.133':139
- '59.##5.108.182':139
- '59.##5.73.237':139
- '59.##5.90.40':139
- '59.##5.253.133':139
- '59.##5.95.114':139
- '59.##5.184.237':139
- '59.##5.220.180':139
- '59.##5.86.180':139
- '59.##5.82.74':139
- '59.##5.237.86':139
- '59.##5.237.84':139
- '59.##5.182.163':139
- '59.##5.227.220':139
- '59.##5.47.84':139
- '59.#15.1.47':139
- '59.##5.247.64':139
- '59.##5.88.41':139
- '59.##5.80.104':139
- '59.##5.211.148':139
- '59.##5.25.59':139
- '59.##5.104.109':139
- '59.##5.42.153':445
- '59.##5.153.75':445
- '59.##5.73.237':445
- '59.##5.108.182':445
- '59.##5.75.120':445
- '59.##5.85.219':445
- '59.##5.216.195':445
- '59.##5.195.172':445
- '59.##5.253.133':445
- '59.##5.140.221':445
- '59.##5.7.133':445
- '59.##5.139.82':139
- '59.##5.168.240':139
- '59.##5.203.174':445
- '59.##5.90.40':445
- '59.##5.221.54':445
- '59.##5.106.133':445
- '59.##5.33.218':445
- '59.##5.95.40':445
- '59.##5.39.141':445
- '59.##5.183.154':445
- '59.##5.73.170':445
- '59.##5.49.182':445
- '59.##5.214.230':445
- '59.##5.35.237':445
- '59.##5.129.120':445
- '59.##5.142.197':445
- '59.##5.29.35':445
- '59.##5.109.187':445
- '59.##5.41.40':445
- '59.##5.173.209':445
- '59.##5.235.65':445
- '59.##5.237.26':445
- '59.##5.26.44':445
- '59.##5.68.214':445
- '59.##5.124.219':139
- '59.##5.33.208':139
- '59.##5.69.161':139
- '59.##5.33.160':139
- '59.##5.173.209':139
- '59.##5.109.187':139
- '59.##5.41.40':139
- '59.##5.49.132':139
- '59.##5.127.186':139
- '59.##5.174.49':139
- '59.##5.122.157':139
- '59.##5.35.34':139
- '59.##5.61.158':139
- '59.##5.140.156':139
- '59.##5.24.252':139
- '59.##5.24.245':139
- '59.##5.133.209':139
- '59.##5.25.178':139
- '59.##5.69.142':139
- '59.##5.235.178':139
- '59.##5.178.91':139
- '59.##5.210.232':139
- '59.##5.146.125':139
- '59.##5.5.101':139
- '59.#15.0.85':139
- '59.##5.45.220':139
- '59.##5.10.126':139
- '59.##5.29.185':139
- '59.##5.203.115':139
- '59.##5.194.135':139
- '59.##5.74.15':139
- '59.##5.204.190':139
- '59.##5.66.107':139
- '59.##5.152.173':139
- '59.##5.127.186':445
- '59.##5.69.161':445
- '59.##5.140.156':445
- '59.##5.24.252':445
- '59.##5.124.219':445
- '59.##5.49.132':445
- '59.##5.33.208':445
- '59.##5.33.160':445
- '59.##5.133.209':445
- '59.##5.108.37':139
- '59.##5.35.34':445
- '59.##5.85.80':139
- '59.##5.239.120':139
- '59.##5.122.157':445
- '59.##5.24.245':445
- '59.##5.61.158':445
- '59.##5.174.49':445
- '59.##5.106.226':139
- '59.##5.83.185':139
- '59.##5.44.186':139
- '59.##5.31.186':139
- '59.##5.57.103':139
- '59.##5.76.141':139
- '59.##5.149.207':139
- '59.##5.148.62':139
- '59.##5.26.252':139
- '59.##5.101.32':139
- '59.##5.81.241':139
- '59.##5.89.77':139
- '59.##5.232.197':139
- '59.##5.228.232':139
- '59.##5.232.46':139
- '59.##5.102.138':139
- '59.##5.137.229':139
- '59.##5.231.187':445
- '59.##5.46.40':445
- '59.##5.187.238':445
- '59.##5.238.111':445
- '59.##5.11.129':445
- '59.##5.128.233':445
- '59.##5.113.119':445
- '59.##5.45.122':445
- '59.##5.183.231':445
- '59.##5.191.111':445
- '59.##5.89.170':139
- '59.##5.92.113':139
- '59.##5.72.254':139
- '59.##5.215.73':445
- '59.##5.169.121':445
- '59.##5.213.41':445
- '59.##5.170.91':445
- '59.##5.237.26':139
- '59.##5.142.197':139
- '59.##5.235.65':139
- '59.##5.35.237':139
- '59.##5.101.32':445
- '59.##5.232.197':445
- '59.##5.39.141':139
- '59.##5.228.232':445
- '59.##5.129.120':139
- '59.##5.95.40':139
- '59.##5.68.214':139
- '59.##5.29.35':139
- '59.##5.26.44':139
- '59.##5.214.230':139
- '59.##5.183.154':139
- '59.##5.49.182':139
- '59.##5.73.170':139
- '59.##5.44.186':445
- '59.##5.57.103':445
- '59.##5.83.185':445
- '59.##5.148.62':445
- '59.##5.137.229':445
- '59.##5.89.170':445
- '59.##5.149.207':445
- '59.##5.106.226':445
- '59.##5.92.113':445
- '59.##5.102.138':445
- '59.##5.232.46':445
- '59.##5.89.77':445
- '59.##5.81.241':445
- '59.##5.72.254':445
- '59.##5.31.186':445
- '59.##5.26.252':445
- '59.##5.76.141':445
- '59.##5.40.24':139
- '59.##5.232.88':445
- '59.#15.15.7':445
- '59.##5.91.118':445
- '59.##5.44.24':445
- '59.##5.141.171':445
- '59.##5.214.136':445
- '59.##5.178.38':445
- '59.##5.45.129':445
- '59.##5.125.80':445
- '59.##5.225.31':445
- '59.##5.32.35':445
- '59.##5.187.201':445
- '59.##5.53.162':445
- '59.##5.36.190':445
- '59.##5.83.44':445
- '59.##5.82.245':445
- '59.##5.130.21':445
- '59.##5.97.102':445
- '59.##5.13.210':445
- '59.##5.9.216':445
- '59.##5.84.130':445
- '59.##5.155.221':445
- '59.##5.212.53':445
- '59.##5.246.81':445
- '59.##5.205.69':445
- '59.##5.221.140':445
- '59.##5.232.108':445
- '59.##5.108.180':445
- '59.##5.7.174':445
- '59.##5.178.232':445
- '59.##5.35.168':445
- '59.##5.168.107':445
- '59.##5.151.166':445
- '59.##5.208.38':445
- '59.##5.150.211':139
- '59.##5.211.20':139
- '59.##5.156.135':139
- '59.##5.130.11':139
- '59.##5.48.29':139
- '59.##5.34.32':139
- '59.##5.45.25':139
- '59.##5.40.125':139
- '59.##5.180.139':139
- '59.##5.165.27':139
- '59.##5.239.149':139
- '59.##5.186.53':139
- '59.##5.25.165':139
- '59.##5.99.251':139
- '59.##5.96.237':139
- '59.##5.33.178':139
- '59.##5.127.156':139
- '59.##5.191.124':9988
- '59.##5.213.177':9988
- '59.##5.45.139':9988
- '59.##5.80.108':9988
- '59.##5.232.132':9988
- '59.##5.145.232':9988
- '59.##5.121.198':9988
- '59.##5.196.239':9988
- '59.##5.127.174':9988
- '59.##5.82.245':9988
- '59.##5.125.80':9988
- '59.##5.95.237':139
- '59.##5.36.178':139
- '59.##5.84.130':9988
- '59.##5.246.81':9988
- '59.##5.44.24':9988
- '59.##5.9.216':9988
- '59.##5.97.102':139
- '59.##5.13.210':139
- '59.##5.9.216':139
- '59.##5.84.130':139
- '59.##5.155.221':139
- '59.##5.212.53':139
- '59.##5.246.81':139
- '59.##5.205.69':139
- '59.##5.221.140':139
- '59.##5.232.108':139
- '59.##5.108.180':139
- '59.##5.7.174':139
- '59.##5.178.232':139
- '59.##5.35.168':139
- '59.##5.168.107':139
- '59.##5.151.166':139
- '59.##5.208.38':139
- '59.##5.239.64':139
- '59.##5.213.177':139
- '59.##5.210.217':139
- '59.##5.1.150':139
- '59.##5.145.232':139
- '59.##5.232.132':139
- '59.##5.196.239':139
- '59.##5.121.198':139
- '59.##5.110.168':139
- '59.##5.39.99':139
- '59.##5.127.174':139
- '59.##5.224.15':139
- '59.##5.100.35':139
- '59.##5.80.108':139
- '59.##5.191.124':139
- '59.##5.40.28':139
- '59.##5.45.139':139
- '59.##5.239.64':445
- '59.##5.213.177':445
- '59.##5.210.217':445
- '59.##5.1.150':445
- '59.##5.145.232':445
- '59.##5.232.132':445
- '59.##5.196.239':445
- '59.##5.121.198':445
- '59.##5.110.168':445
- '59.##5.39.99':445
- '59.##5.127.174':445
- '59.##5.224.15':445
- '59.##5.100.35':445
- '59.##5.80.108':445
- '59.##5.191.124':445
- '59.##5.40.28':445
- '59.##5.45.139':445
- '59.##5.232.88':139
- '59.#15.15.7':139
- '59.##5.91.118':139
- '59.##5.44.24':139
- '59.##5.141.171':139
- '59.##5.214.136':139
- '59.##5.178.38':139
- '59.##5.45.129':139
- '59.##5.125.80':139
- '59.##5.225.31':139
- '59.##5.32.35':139
- '59.##5.187.201':139
- '59.##5.53.162':139
- '59.##5.36.190':139
- '59.##5.83.44':139
- '59.##5.82.245':139
- '59.##5.130.21':139
- '59.##5.77.225':139
- '59.##5.218.188':139
- '59.##5.102.162':139
- '59.##5.112.134':445
- '59.##5.193.126':445
- '59.##5.200.152':139
- '59.##5.81.134':139
- '59.##5.104.39':139
- '59.##5.253.41':139
- '59.##5.54.38':139
- '59.##5.39.211':139
- '59.##5.160.130':139
- '59.##5.120.172':139
- '59.##5.29.182':139
- '59.##5.232.16':139
- '59.##5.119.4':139
- '59.##5.165.103':139
- '59.##5.148.80':139
- '59.##5.96.245':445
- '59.##5.55.228':445
- '59.##5.67.10':445
- '59.##5.10.222':445
- '59.##5.206.81':445
- '59.##5.82.131':445
- '59.##5.192.127':445
- '59.##5.21.206':445
- '59.##5.96.57':445
- '59.##5.57.98':139
- '59.##5.185.133':445
- '59.##5.133.217':139
- '59.##5.216.210':139
- '59.##5.43.126':445
- '59.##5.72.190':445
- '59.##5.237.148':445
- '59.##5.18.211':445
- '59.##5.233.5':139
- '59.##5.2.220':445
- '59.##5.131.129':139
- '59.##5.129.233':139
- '59.##5.29.182':445
- '59.##5.54.38':445
- '59.##5.108.100':445
- '59.##5.120.172':445
- '59.##5.10.77':139
- '59.##5.101.138':139
- '59.##5.138.42':139
- '59.##5.216.195':139
- '59.##5.158.208':139
- '59.##5.223.79':139
- '59.##5.81.61':139
- '59.##5.41.210':139
- '59.##5.209.161':139
- '59.##5.104.39':445
- '59.##5.200.152':445
- '59.##5.253.41':445
- '59.##5.119.4':445
- '59.##5.2.220':139
- '59.##5.108.100':139
- '59.##5.57.98':445
- '59.##5.216.210':445
- '59.##5.232.16':445
- '59.##5.160.130':445
- '59.##5.148.80':445
- '59.##5.165.103':445
- '59.##5.39.211':445
- '59.##5.81.134':445
- '59.##5.102.162':445
- '59.##5.133.217':445
- '59.##5.218.188':445
- '59.##5.207.134':139
- '59.##5.186.53':445
- '59.##5.37.230':139
- '59.##5.230.105':139
- '59.##5.192.229':445
- '59.##5.165.27':445
- '59.##5.77.225':445
- '59.##5.25.165':445
- '59.##5.79.197':139
- '59.##5.138.51':139
- '59.##5.92.109':139
- '59.##5.82.63':139
- '59.##5.63.245':139
- '59.##5.134.179':139
- '59.##5.32.193':139
- '59.##5.150.13':139
- '59.##5.195.21':139
- '59.##5.40.125':445
- '59.##5.34.32':445
- '59.##5.211.20':445
- '59.##5.45.25':445
- '59.##5.36.178':445
- '59.##5.192.229':139
- '59.##5.95.237':445
- '59.##5.48.29':445
- '59.##5.99.251':445
- '59.##5.127.156':445
- '59.##5.180.139':445
- '59.##5.239.149':445
- '59.##5.33.178':445
- '59.##5.156.135':445
- '59.##5.96.237':445
- '59.##5.150.211':445
- '59.##5.130.11':445
- '59.##5.79.197':445
- '59.##5.37.230':445
- '59.##5.134.179':445
- '59.##5.32.193':445
- '59.##5.193.126':139
- '59.##5.112.134':139
- '59.##5.230.105':445
- '59.##5.207.134':445
- '59.##5.195.21':445
- '59.##5.76.168':445
- '59.##5.82.63':445
- '59.##5.188.121':445
- '59.##5.177.161':445
- '59.##5.63.245':445
- '59.##5.150.13':445
- '59.##5.92.109':445
- '59.##5.138.51':445
- '59.##5.21.206':139
- '59.##5.206.81':139
- '59.##5.55.228':139
- '59.##5.192.127':139
- '59.##5.177.161':139
- '59.##5.76.168':139
- '59.##5.82.131':139
- '59.##5.188.121':139
- '59.##5.96.245':139
- '59.##5.18.211':139
- '59.##5.72.190':139
- '59.##5.185.133':139
- '59.##5.237.148':139
- '59.##5.67.10':139
- '59.##5.10.222':139
- '59.##5.43.126':139
- '59.##5.96.57':139