Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '64.##.237.211':139
- '64.##.150.204':139
- '64.#6.80.76':139
- '64.##.133.210':139
- '64.##.147.213':139
- '64.##.147.137':139
- '64.##.121.65':139
- '64.##.129.171':139
- '64.##.225.138':139
- '64.#6.67.34':139
- '64.#6.96.46':139
- '64.##.123.139':139
- '64.#6.7.42':139
- '64.##.139.111':139
- '64.#6.10.42':139
- '64.##.161.97':139
- '64.##.150.151':139
- '64.##.94.107':139
- '64.##.23.134':139
- '64.##.219.147':139
- '64.##.126.66':139
- '64.##.16.139':139
- '64.##.194.59':445
- '64.#6.10.42':445
- '64.#6.19.59':445
- '64.##.152.143':445
- '64.##.148.145':445
- '64.#6.7.42':445
- '64.##.219.147':445
- '64.##.123.139':445
- '64.##.161.97':445
- '64.##.139.111':445
- '64.##.91.212':445
- '64.#6.11.26':139
- '64.##.180.41':139
- '64.##.197.50':139
- '64.##.102.123':139
- '64.##.50.105':139
- '64.##.212.196':445
- '64.##.119.35':445
- '64.#6.3.79':445
- '64.#6.129.3':445
- '64.#6.79.95':445
- '64.#6.92.57':139
- '64.##.239.147':139
- '64.##.110.131':139
- '64.##.120.139':139
- '64.##.153.75':139
- '64.##.103.180':445
- '64.##.67.104':445
- '64.#6.52.23':139
- '64.##.31.240':139
- '64.##.185.231':139
- '64.##.249.60':139
- '64.##.48.247':445
- '64.#6.97.2':445
- '64.##.153.29':445
- '64.#6.11.17':445
- '64.##.48.166':445
- '64.#6.135.0':139
- '64.#6.89.3':139
- '64.##.142.66':139
- '64.##.103.180':139
- '64.##.67.104':139
- '64.##.142.66':445
- '64.##.212.196':139
- '64.##.119.35':139
- '64.#6.3.79':139
- '64.#6.129.3':139
- '64.#6.79.95':139
- '64.#6.19.59':139
- '64.##.194.59':139
- '64.##.148.145':139
- '64.##.91.212':139
- '64.##.152.143':139
- '64.#6.52.23':445
- '64.##.120.139':445
- '64.##.153.75':445
- '64.##.249.60':445
- '64.#6.135.0':445
- '64.##.110.131':445
- '64.##.31.240':445
- '64.##.185.231':445
- '64.##.239.147':445
- '64.#6.89.3':445
- '64.#6.92.57':445
- '64.##.81.178':139
- '64.##.27.188':139
- '64.##.48.189':139
- '64.#6.6.243':139
- '64.##.140.174':139
- '64.##.170.177':139
- '64.##.170.121':139
- '64.##.14.120':139
- '64.#6.52.28':139
- '64.##.115.186':139
- '64.#6.26.20':139
- '64.#6.56.84':445
- '64.##.253.73':445
- '64.##.176.70':445
- '64.#6.98.11':445
- '64.##.106.68':445
- '64.##.238.130':139
- '64.##.187.95':139
- '64.##.214.161':139
- '64.##.168.32':445
- '64.##.16.198':139
- '64.##.50.248':139
- '64.#6.198.7':139
- '64.##.17.239':139
- '64.##.106.42':139
- '64.#6.5.150':139
- '64.##.105.165':139
- '64.##.203.166':139
- '64.#6.72.63':139
- '64.##.205.120':139
- '64.##.118.24':139
- '64.##.105.191':139
- '64.#6.1.26':139
- '64.##.23.199':139
- '64.##.209.208':139
- '64.#6.15.55':139
- '64.##.235.14':139
- '64.##.216.98':139
- '64.##.65.249':139
- '64.##.109.19':139
- '64.##.242.20':139
- '64.##.187.10':139
- '64.##.188.105':139
- '64.##.121.65':445
- '64.##.16.139':445
- '64.##.147.137':445
- '64.#6.67.34':445
- '64.##.129.171':445
- '64.#6.11.26':445
- '64.##.180.41':445
- '64.##.197.50':445
- '64.##.102.123':445
- '64.##.50.105':445
- '64.##.225.138':445
- '64.##.94.107':445
- '64.#6.96.46':445
- '64.##.150.151':445
- '64.##.126.66':445
- '64.##.23.134':445
- '64.##.237.211':445
- '64.##.150.204':445
- '64.#6.80.76':445
- '64.##.133.210':445
- '64.##.147.213':445
- '64.##.64.245':139
- '64.##.232.64':445
- '64.#6.2.111':445
- '64.##.64.245':445
- '64.##.253.73':139
- '64.##.168.32':139
- '64.##.107.213':445
- '64.##.93.210':445
- '64.##.95.114':445
- '64.#6.18.87':445
- '64.##.114.111':445
- '64.#6.56.84':139
- '64.##.114.111':139
- '64.##.95.114':139
- '64.#6.18.87':139
- '64.##.232.64':139
- '64.#6.2.111':139
- '64.##.106.68':139
- '64.##.176.70':139
- '64.#6.98.11':139
- '64.##.107.213':139
- '64.##.93.210':139
- '64.##.14.190':445
- '64.##.63.221':445
- '64.##.234.94':445
- '64.##.178.60':445
- '64.##.116.214':445
- '64.#6.29.29':445
- '64.##.43.148':445
- '64.##.234.93':445
- '64.#6.73.63':445
- '64.##.127.30':445
- '64.##.102.182':445
- '64.##.97.212':139
- '64.##.20.237':139
- '64.#6.15.91':139
- '64.##.104.69':139
- '64.##.74.115':139
- '64.##.174.91':445
- '64.##.73.102':445
- '64.##.24.147':139
- '64.##.96.223':139
- '64.##.44.229':139
- '64.#6.66.74':445
- '64.##.245.230':445
- '64.##.158.38':445
- '64.##.231.169':445
- '64.##.170.25':445
- '64.##.21.214':445
- '64.#6.209.7':445
- '64.#6.8.56':445
- '64.##.225.236':445
- '64.#6.46.15':445
- '64.##.66.247':445
- '64.#6.83.81':445
- '64.##.143.239':445
- '64.##.53.144':445
- '64.##.56.141':445
- '64.##.129.83':445
- '64.##.22.129':445
- '64.##.24.202':445
- '64.#6.63.90':445
- '64.##.169.165':445
- '64.#6.20.78':445
- '64.##.146.198':445
- '64.##.129.83':139
- '64.##.22.129':139
- '64.#6.66.74':139
- '64.#6.29.29':139
- '64.##.43.148':139
- '64.#6.20.78':139
- '64.##.146.198':139
- '64.##.53.144':139
- '64.##.56.141':139
- '64.##.143.239':139
- '64.##.234.93':139
- '64.##.174.91':139
- '64.##.116.214':139
- '64.##.102.182':139
- '64.##.234.94':139
- '64.##.73.102':139
- '64.#6.73.63':139
- '64.##.127.30':139
- '64.##.63.221':139
- '64.##.178.60':139
- '64.##.14.190':139
- '64.##.169.165':139
- '64.#6.209.7':139
- '64.##.84.209':139
- '64.#6.8.56':139
- '64.##.155.44':139
- '64.#6.55.92':139
- '64.##.56.181':139
- '64.##.141.123':139
- '64.##.252.74':139
- '64.#6.103.6':139
- '64.#6.9.240':139
- '64.##.225.236':139
- '64.#6.83.81':139
- '64.##.170.25':139
- '64.##.21.214':139
- '64.##.24.202':139
- '64.#6.63.90':139
- '64.##.66.247':139
- '64.##.158.38':139
- '64.#6.46.15':139
- '64.##.231.169':139
- '64.##.245.230':139
- '64.#6.97.2':139
- '64.##.46.187':445
- '64.##.48.247':139
- '64.##.48.166':139
- '64.##.153.29':139
- '64.##.38.227':445
- '64.#6.16.59':445
- '64.##.235.242':445
- '64.#6.4.155':445
- '64.#6.243.4':445
- '64.#6.11.17':139
- '64.##.131.223':139
- '64.##.155.108':139
- '64.##.127.31':139
- '64.##.143.62':139
- '64.##.96.221':139
- '64.##.168.231':139
- '64.##.140.168':139
- '64.##.231.120':139
- '64.##.101.220':139
- '64.#6.40.60':139
- '64.#6.47.85':445
- '64.##.131.223':445
- '64.##.155.108':445
- '64.##.127.31':445
- '64.##.143.62':445
- '64.##.96.221':445
- '64.##.168.231':445
- '64.##.140.168':445
- '64.##.231.120':445
- '64.##.101.220':445
- '64.#6.40.60':445
- '64.##.82.150':445
- '64.##.30.174':445
- '64.##.113.195':445
- '64.#6.49.83':445
- '64.#6.2.40':445
- '64.##.46.127':445
- '64.##.68.164':445
- '64.#6.1.121':445
- '64.#6.172.5':445
- '64.#6.12.27':445
- '64.##.163.168':445
- '64.##.44.229':445
- '64.##.24.147':445
- '64.##.97.212':445
- '64.##.96.223':445
- '64.##.20.237':445
- '64.#6.29.29':9988
- '64.##.129.83':9988
- '64.##.234.93':9988
- '64.##.234.94':9988
- '64.##.102.182':9988
- '64.#6.15.91':445
- '64.#6.9.240':445
- '64.##.84.209':445
- '64.##.104.69':445
- '64.##.74.115':445
- '64.##.252.74':445
- '64.##.155.44':445
- '64.#6.55.92':445
- '64.##.56.181':445
- '64.##.141.123':445
- '64.#6.103.6':445
- '64.##.56.141':9988
- '64.##.113.195':139
- '64.#6.12.27':139
- '64.##.30.174':139
- '64.##.46.127':139
- '64.#6.49.83':139
- '64.#6.1.121':139
- '64.##.82.150':139
- '64.##.68.164':139
- '64.##.163.168':139
- '64.#6.172.5':139
- '64.#6.2.40':139
- '64.##.46.187':139
- '64.#6.4.155':139
- '64.##.24.147':9988
- '64.##.143.239':9988
- '64.##.104.69':9988
- '64.#6.16.59':139
- '64.#6.47.85':139
- '64.##.38.227':139
- '64.#6.243.4':139
- '64.##.235.242':139