Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '64.##.81.110':445
- '64.##.109.81':139
- '64.##.189.109':139
- '64.##.25.227':445
- '64.#9.71.13':445
- '64.##.121.127':445
- '64.##.29.189':139
- '64.##.107.177':139
- '64.##.114.153':139
- '64.##.171.215':139
- '64.##.172.30':139
- '64.##.216.87':139
- '64.##.163.253':139
- '64.##.121.127':139
- '64.##.81.110':139
- '64.#9.1.200':445
- '64.##.138.19':139
- '64.##.25.227':139
- '64.#9.71.13':139
- '64.##.233.189':445
- '64.##.145.26':445
- '64.##.129.12':445
- '64.##.138.19':445
- '64.##.72.174':445
- '64.##.73.173':445
- '64.#9.2.110':445
- '64.#9.252.8':139
- '64.#9.6.252':139
- '64.##.236.244':139
- '64.#9.11.52':139
- '64.##.140.120':139
- '64.#9.9.59':139
- '64.##.37.140':139
- '64.#9.36.65':139
- '64.##.132.36':139
- '64.#9.81.93':139
- '64.##.226.237':139
- '64.##.64.160':139
- '64.##.64.223':139
- '64.##.186.212':139
- '64.##.118.173':139
- '64.##.228.240':139
- '64.##.53.160':139
- '64.##.12.176':139
- '64.##.46.233':139
- '64.##.209.67':139
- '64.#9.54.74':139
- '64.#9.53.27':139
- '64.##.62.197':139
- '64.##.211.10':139
- '64.##.178.84':139
- '64.##.135.18':139
- '64.##.129.12':139
- '64.##.180.187':445
- '64.##.203.180':445
- '64.##.121.41':445
- '64.##.72.119':445
- '64.##.193.63':445
- '64.#9.36.76':445
- '64.#9.80.58':445
- '64.##.70.253':445
- '64.##.152.25':445
- '64.#9.60.30':445
- '64.##.138.24':445
- '64.##.52.224':445
- '64.##.252.191':445
- '64.##.65.136':139
- '64.##.88.124':139
- '64.#9.71.47':139
- '64.##.52.129':139
- '64.##.242.51':139
- '64.##.150.62':139
- '64.#9.45.53':139
- '64.##.222.220':445
- '64.##.215.24':445
- '64.#9.8.181':445
- '64.##.117.190':445
- '64.##.41.192':445
- '64.##.92.153':445
- '64.##.65.136':445
- '64.##.88.124':445
- '64.#9.71.47':445
- '64.##.52.129':445
- '64.##.242.51':445
- '64.##.150.62':445
- '64.#9.45.53':445
- '64.##.73.173':139
- '64.#9.2.110':139
- '64.##.145.26':139
- '64.#9.1.200':139
- '64.##.233.189':139
- '64.##.72.174':139
- '64.#9.5.58':445
- '64.##.124.108':445
- '64.##.60.181':445
- '64.##.107.40':445
- '64.##.235.54':445
- '64.##.238.95':445
- '64.##.202.250':445
- '64.#9.99.78':445
- '64.##.214.29':445
- '64.##.71.239':445
- '64.##.58.112':445
- '64.##.14.180':445
- '64.##.10.149':445
- '64.##.10.231':139
- '64.##.88.178':139
- '64.##.99.226':139
- '64.##.107.159':139
- '64.##.217.42':139
- '64.##.185.103':139
- '64.#9.98.9':139
- '64.#9.34.86':139
- '64.#9.56.18':139
- '64.##.223.56':139
- '64.#9.66.95':139
- '64.##.178.33':139
- '64.##.56.148':139
- '64.##.17.179':139
- '64.##.227.46':445
- '64.#9.7.209':445
- '64.##.189.179':445
- '64.##.54.217':139
- '64.##.139.179':445
- '64.#9.1.139':445
- '64.##.165.71':445
- '64.##.157.186':445
- '64.#9.98.24':445
- '64.##.54.217':445
- '64.##.71.204':445
- '64.##.72.220':445
- '64.##.90.160':445
- '64.##.81.201':139
- '64.##.239.35':139
- '64.##.68.227':139
- '64.#9.59.69':139
- '64.##.233.118':139
- '64.##.163.205':139
- '64.##.145.159':139
- '64.##.209.24':139
- '64.##.198.198':139
- '64.##.11.211':139
- '64.##.241.113':139
- '64.##.12.199':139
- '64.##.34.128':139
- '64.##.173.175':139
- '64.##.95.123':139
- '64.##.232.14':139
- '64.##.193.125':139
- '64.##.14.217':139
- '64.#9.104.6':139
- '64.##.64.102':139
- '64.##.74.112':139
- '64.##.211.74':139
- '64.##.248.91':139
- '64.#9.63.91':139
- '64.##.101.224':139
- '64.##.112.102':139
- '64.#9.98.24':139
- '64.##.135.18':445
- '64.#9.54.74':445
- '64.#9.53.27':445
- '64.##.163.253':445
- '64.##.46.233':445
- '64.##.186.212':445
- '64.##.211.10':445
- '64.##.228.240':445
- '64.##.178.84':445
- '64.##.140.120':445
- '64.##.118.173':445
- '64.##.209.67':445
- '64.##.62.197':445
- '64.##.29.189':445
- '64.##.189.109':445
- '64.##.109.81':445
- '64.##.248.184':139
- '64.#9.89.2':139
- '64.##.60.154':139
- '64.##.172.30':445
- '64.##.53.160':445
- '64.##.171.215':445
- '64.##.114.153':445
- '64.##.216.87':445
- '64.##.12.176':445
- '64.##.107.177':445
- '64.##.139.179':139
- '64.#9.1.139':139
- '64.##.227.46':139
- '64.##.248.184':445
- '64.#9.89.2':445
- '64.#9.81.93':445
- '64.#9.7.209':139
- '64.##.72.220':139
- '64.##.90.160':139
- '64.##.157.186':139
- '64.##.189.179':139
- '64.##.165.71':139
- '64.##.71.204':139
- '64.#9.6.252':445
- '64.##.37.140':445
- '64.##.236.244':445
- '64.#9.9.59':445
- '64.#9.11.52':445
- '64.#9.252.8':445
- '64.##.64.160':445
- '64.##.60.154':445
- '64.##.10.231':445
- '64.#9.36.65':445
- '64.##.64.223':445
- '64.##.226.237':445
- '64.##.132.36':445
- '64.##.71.239':139
- '64.##.199.20':445
- '64.#9.74.0':445
- '64.##.100.23':445
- '64.#9.95.31':445
- '64.##.45.166':445
- '64.##.80.245':445
- '64.##.216.222':445
- '64.##.196.243':445
- '64.##.28.105':445
- '64.##.200.160':445
- '64.##.68.185':445
- '64.##.148.149':445
- '64.##.76.171':445
- '64.##.32.115':445
- '64.##.60.113':445
- '64.##.97.198':445
- '64.#9.202.8':445
- '64.#9.68.35':445
- '64.##.114.183':445
- '64.##.100.97':445
- '64.##.37.253':445
- '64.##.162.37':445
- '64.##.31.162':445
- '64.##.13.100':445
- '64.##.67.236':445
- '64.#9.29.85':445
- '64.##.107.223':445
- '64.##.206.223':445
- '64.##.84.215':445
- '64.#9.38.19':445
- '64.#9.18.7':445
- '64.##.142.219':445
- '64.##.150.153':445
- '64.##.97.198':9988
- '64.##.60.113':9988
- '64.##.100.97':9988
- '64.##.158.150':445
- '64.##.141.158':445
- '64.##.217.125':445
- '64.##.167.153':445
- '64.##.255.45':445
- '64.##.140.146':445
- '64.#9.35.3':445
- '64.##.57.193':445
- '64.##.22.117':445
- '64.##.204.64':445
- '64.##.202.67':445
- '64.#9.9.62':445
- '64.#9.0.177':445
- '64.##.131.200':445
- '64.##.31.127':445
- '64.##.252.186':445
- '64.#9.164.6':445
- '64.##.45.166':139
- '64.##.80.245':139
- '64.##.199.20':139
- '64.##.162.37':139
- '64.##.31.162':139
- '64.#9.95.31':139
- '64.#9.74.0':139
- '64.##.148.149':139
- '64.##.76.171':139
- '64.##.196.243':139
- '64.##.100.23':139
- '64.##.216.222':139
- '64.##.68.185':139
- '64.#9.202.8':139
- '64.##.114.183':139
- '64.##.32.115':139
- '64.##.38.189':139
- '64.#9.164.6':139
- '64.#9.68.35':139
- '64.##.60.113':139
- '64.##.67.236':139
- '64.#9.29.85':139
- '64.##.37.253':139
- '64.##.97.198':139
- '64.##.100.97':139
- '64.##.13.100':139
- '64.#9.18.7':139
- '64.##.142.219':139
- '64.##.107.223':139
- '64.#9.9.62':139
- '64.#9.0.177':139
- '64.#9.38.19':139
- '64.##.206.223':139
- '64.##.141.158':139
- '64.##.217.125':139
- '64.##.38.189':445
- '64.##.84.215':139
- '64.##.150.153':139
- '64.##.158.150':139
- '64.##.57.193':139
- '64.##.22.117':139
- '64.##.167.153':139
- '64.##.28.105':139
- '64.#9.35.3':139
- '64.##.200.160':139
- '64.##.255.45':139
- '64.##.31.127':139
- '64.##.252.186':139
- '64.##.202.67':139
- '64.##.140.146':139
- '64.##.204.64':139
- '64.##.131.200':139
- '64.#9.29.85':9988
- '64.##.156.114':445
- '64.##.45.172':445
- '64.##.137.236':445
- '64.##.81.156':445
- '64.##.215.208':445
- '64.#9.1.9':445
- '64.##.109.38':445
- '64.##.92.153':139
- '64.##.222.220':139
- '64.#9.8.181':139
- '64.#9.66.65':445
- '64.##.117.190':139
- '64.##.41.192':139
- '64.#9.1.9':139
- '64.##.156.114':139
- '64.##.45.172':139
- '64.##.155.205':139
- '64.##.81.156':139
- '64.##.215.208':139
- '64.##.137.236':139
- '64.##.83.107':445
- '64.#9.58.19':445
- '64.##.155.205':445
- '64.##.109.38':139
- '64.#9.66.65':139
- '64.##.167.238':445
- '64.##.238.95':139
- '64.#9.5.58':139
- '64.##.202.250':139
- '64.#9.60.30':139
- '64.##.107.40':139
- '64.##.235.54':139
- '64.##.58.112':139
- '64.##.10.149':139
- '64.#9.99.78':139
- '64.##.214.29':139
- '64.##.124.108':139
- '64.##.60.181':139
- '64.##.14.180':139
- '64.#9.36.76':139
- '64.##.180.187':139
- '64.##.203.180':139
- '64.##.215.24':139
- '64.##.72.119':139
- '64.##.193.63':139
- '64.##.121.41':139
- '64.##.252.191':139
- '64.##.70.253':139
- '64.##.152.25':139
- '64.#9.80.58':139
- '64.##.138.24':139
- '64.##.52.224':139
- '64.#9.58.19':139
- '64.##.170.222':139
- '64.##.52.210':139
- '64.##.151.52':139
- '64.##.108.134':139
- '64.#9.94.62':139
- '64.##.216.246':139
- '64.##.236.151':139
- '64.##.53.123':139
- '64.##.200.183':139
- '64.#9.8.201':139
- '64.##.14.100':139
- '64.##.12.191':139
- '64.##.149.12':139
- '64.##.22.117':9988
- '64.##.167.153':9988
- '64.##.204.64':9988
- '64.##.31.162':9988
- '64.##.199.20':9988
- '64.##.57.193':9988
- '64.##.131.200':9988
- '64.##.142.219':9988
- '64.##.217.125':9988
- '64.##.93.222':139
- '64.##.31.127':9988
- '64.##.202.67':9988
- '64.#9.0.177':9988
- '64.##.53.123':445
- '64.#9.8.201':445
- '64.##.200.183':445
- '64.##.14.100':445
- '64.##.12.191':445
- '64.##.149.12':445
- '64.#9.47.88':445
- '64.##.170.23':445
- '64.##.167.238':139
- '64.##.83.107':139
- '64.##.127.165':445
- '64.##.17.120':445
- '64.#9.27.60':445
- '64.#9.27.60':139
- '64.##.170.23':139
- '64.##.93.222':445
- '64.#9.47.88':139
- '64.##.127.165':139
- '64.##.17.120':139
- '64.##.108.134':445
- '64.##.52.210':445
- '64.##.236.151':445
- '64.##.151.52':445
- '64.#9.94.62':445
- '64.##.216.246':445
- '64.##.170.222':445