Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.##6.144.23':445
- '59.##6.156.11':445
- '59.##6.103.211':445
- '59.##6.47.188':445
- '59.##6.51.169':445
- '59.#16.84.7':139
- '59.##6.210.155':139
- '59.##6.153.24':445
- '59.##6.57.32':445
- '59.##6.25.58':445
- '59.##6.38.177':445
- '59.##6.75.172':445
- '59.##6.61.148':445
- '59.##6.159.218':445
- '59.##6.86.243':445
- '59.##6.98.73':445
- '59.#16.8.76':445
- '59.#16.93.6':445
- '59.##6.224.62':445
- '59.#16.3.35':445
- '59.##6.104.191':445
- '59.##6.178.33':139
- '59.##6.101.224':445
- '59.##6.209.25':445
- '59.##6.219.134':445
- '59.##6.58.90':445
- '59.##6.134.111':445
- '59.##6.2.107':139
- '59.##6.126.251':139
- '59.##6.99.129':139
- '59.##6.100.78':445
- '59.##6.73.168':139
- '59.##6.219.58':445
- '59.##6.219.134':139
- '59.##6.101.224':139
- '59.##6.134.111':139
- '59.##6.219.58':139
- '59.##6.58.90':139
- '59.##6.210.155':445
- '59.##6.178.33':445
- '59.#16.84.7':445
- '59.##6.209.25':139
- '59.##6.100.78':139
- '59.##6.86.183':445
- '59.##6.47.188':139
- '59.##6.51.169':139
- '59.##6.38.177':139
- '59.#16.8.76':139
- '59.#16.93.6':139
- '59.##6.57.32':139
- '59.##6.25.58':139
- '59.##6.156.11':139
- '59.##6.103.211':139
- '59.##6.144.23':139
- '59.##6.224.62':139
- '59.##6.86.243':139
- '59.##6.98.73':139
- '59.##6.86.183':139
- '59.##6.227.180':139
- '59.##6.67.223':139
- '59.#16.3.35':139
- '59.##6.104.191':139
- '59.##6.61.148':139
- '59.##6.159.218':139
- '59.##6.75.172':139
- '59.##6.153.24':139
- '59.##6.3.249':445
- '59.##6.149.134':445
- '59.##6.249.210':445
- '59.##6.120.146':445
- '59.##6.166.194':445
- '59.##6.227.180':445
- '59.##6.67.223':445
- '59.##6.199.162':445
- '59.##6.189.151':445
- '59.##6.61.122':445
- '59.##6.240.15':445
- '59.##6.213.250':445
- '59.##6.167.160':445
- '59.##6.187.50':445
- '59.##6.23.46':445
- '59.##6.73.39':445
- '59.##6.192.136':445
- '59.##6.3.184':445
- '59.##6.94.76':445
- '59.##6.61.125':445
- '59.##6.176.3':445
- '59.##6.202.143':139
- '59.##6.49.32':445
- '59.##6.60.220':445
- '59.##6.246.235':445
- '59.##6.128.196':445
- '59.##6.33.118':445
- '59.##6.146.218':445
- '59.##6.40.147':445
- '59.##6.218.141':445
- '59.##6.48.201':445
- '59.##6.185.219':445
- '59.##6.125.244':445
- '59.##6.83.39':445
- '59.##6.135.219':445
- '59.##6.90.127':445
- '59.##6.89.37':445
- '59.##6.126.143':445
- '59.##6.64.93':445
- '59.##6.161.52':445
- '59.##6.45.152':445
- '59.##6.35.93':445
- '59.##6.99.43':445
- '59.##6.207.39':445
- '59.##6.208.173':139
- '59.##6.247.207':139
- '59.##6.35.24':139
- '59.##6.106.142':139
- '59.##6.105.118':139
- '59.##6.49.172':139
- '59.##6.124.177':139
- '59.##6.222.187':139
- '59.##6.53.63':139
- '59.##6.208.16':139
- '59.##6.45.43':445
- '59.##6.195.85':445
- '59.##6.7.242':445
- '59.##6.42.58':445
- '59.##6.76.180':445
- '59.##6.80.146':445
- '59.#16.10.4':445
- '59.##6.192.9':445
- '59.##6.162.1':445
- '59.##6.98.163':445
- '59.##6.54.99':445
- '59.##6.220.168':445
- '59.##6.128.196':139
- '59.##6.33.118':139
- '59.##6.125.244':139
- '59.##6.64.93':139
- '59.##6.161.52':139
- '59.##6.48.201':139
- '59.##6.185.219':139
- '59.##6.60.220':139
- '59.##6.246.235':139
- '59.##6.49.32':139
- '59.##6.45.152':139
- '59.##6.89.37':139
- '59.##6.126.143':139
- '59.##6.220.168':139
- '59.##6.14.189':139
- '59.##6.18.100':139
- '59.##6.35.93':139
- '59.##6.99.43':139
- '59.##6.135.219':139
- '59.##6.90.127':139
- '59.##6.83.39':139
- '59.##6.218.141':139
- '59.##6.73.168':445
- '59.##6.99.129':445
- '59.##6.45.43':139
- '59.#16.10.4':139
- '59.##6.192.9':139
- '59.##6.14.189':445
- '59.##6.18.100':445
- '59.##6.202.143':445
- '59.##6.2.107':445
- '59.##6.126.251':445
- '59.##6.162.1':139
- '59.##6.76.180':139
- '59.##6.80.146':139
- '59.##6.207.39':139
- '59.##6.146.218':139
- '59.##6.40.147':139
- '59.##6.98.163':139
- '59.##6.54.99':139
- '59.##6.7.242':139
- '59.##6.42.58':139
- '59.##6.195.85':139
- '59.##6.120.39':445
- '59.##6.127.22':445
- '59.##6.129.162':445
- '59.##6.52.123':445
- '59.##6.133.254':445
- '59.##6.129.47':445
- '59.##6.87.93':445
- '59.##6.132.30':445
- '59.##6.201.127':445
- '59.##6.28.90':445
- '59.##6.98.64':445
- '59.##6.60.189':139
- '59.##6.221.178':139
- '59.#16.6.91':139
- '59.##6.116.173':139
- '59.##6.87.170':139
- '59.##6.103.200':445
- '59.##6.168.201':445
- '59.##6.201.97':445
- '59.##6.115.221':139
- '59.##6.134.115':139
- '59.##6.56.27':445
- '59.##6.32.235':445
- '59.##6.69.55':445
- '59.##6.9.242':445
- '59.##6.8.243':445
- '59.##6.221.54':445
- '59.##6.44.71':445
- '59.##6.133.224':445
- '59.##6.141.206':445
- '59.##6.173.50':445
- '59.##6.216.172':445
- '59.##6.111.5':445
- '59.##6.158.20':445
- '59.##6.89.151':445
- '59.##6.249.197':445
- '59.##6.175.223':445
- '59.##6.41.176':445
- '59.##6.155.70':445
- '59.##6.110.111':445
- '59.##6.26.121':445
- '59.##6.142.147':445
- '59.##6.110.76':445
- '59.##6.161.233':139
- '59.##6.56.27':139
- '59.##6.175.223':139
- '59.##6.87.93':139
- '59.##6.132.30':139
- '59.##6.129.47':139
- '59.##6.89.151':139
- '59.##6.142.147':139
- '59.##6.158.20':139
- '59.##6.41.176':139
- '59.##6.249.197':139
- '59.##6.28.90':139
- '59.##6.98.64':139
- '59.##6.103.200':139
- '59.##6.168.201':139
- '59.##6.129.162':139
- '59.##6.201.97':139
- '59.##6.127.22':139
- '59.##6.201.127':139
- '59.##6.120.39':139
- '59.##6.52.123':139
- '59.##6.133.254':139
- '59.##6.110.76':139
- '59.##6.200.219':139
- '59.##6.7.232':139
- '59.##6.133.224':139
- '59.##6.141.206':139
- '59.##6.44.71':139
- '59.##6.132.185':139
- '59.##6.1.192':139
- '59.#16.48.8':139
- '59.##6.100.7':139
- '59.##6.19.90':139
- '59.##6.216.172':139
- '59.##6.111.5':139
- '59.##6.221.54':139
- '59.##6.110.111':139
- '59.##6.26.121':139
- '59.##6.155.70':139
- '59.##6.69.55':139
- '59.##6.173.50':139
- '59.##6.32.235':139
- '59.##6.8.243':139
- '59.##6.9.242':139
- '59.##6.200.219':445
- '59.##6.158.79':445
- '59.#16.24.1':445
- '59.##6.111.180':139
- '59.##6.39.96':139
- '59.##6.96.39':139
- '59.##6.36.55':445
- '59.##6.27.133':445
- '59.#16.2.0':445
- '59.##6.155.101':445
- '59.##6.3.242':445
- '59.##6.27.133':139
- '59.#16.79.7':445
- '59.##6.158.79':139
- '59.##6.224.13':445
- '59.##6.207.91':445
- '59.##6.126.104':445
- '59.#16.2.0':139
- '59.##6.36.55':139
- '59.##6.3.242':139
- '59.#16.24.1':139
- '59.##6.155.101':139
- '59.##6.39.96':445
- '59.##6.166.194':139
- '59.##6.249.210':139
- '59.##6.120.146':139
- '59.##6.3.184':139
- '59.##6.240.15':139
- '59.##6.61.122':139
- '59.##6.199.162':139
- '59.##6.189.151':139
- '59.##6.3.249':139
- '59.##6.149.134':139
- '59.##6.192.136':139
- '59.##6.73.39':139
- '59.##6.187.50':139
- '59.##6.23.46':139
- '59.##6.96.39':445
- '59.##6.111.180':445
- '59.##6.176.3':139
- '59.##6.94.76':139
- '59.##6.61.125':139
- '59.##6.213.250':139
- '59.##6.167.160':139
- '59.##6.212.142':445
- '59.##6.103.200':9988
- '59.##6.201.97':9988
- '59.##6.134.115':445
- '59.##6.221.178':445
- '59.##6.115.221':445
- '59.##6.26.121':9988
- '59.##6.89.151':9988
- '59.##6.120.39':9988
- '59.##6.168.201':9988
- '59.##6.129.162':9988
- '59.##6.60.189':445
- '59.##6.19.90':445
- '59.##6.132.185':445
- '59.#16.48.8':445
- '59.##6.7.232':445
- '59.##6.100.7':445
- '59.##6.87.170':445
- '59.#16.6.91':445
- '59.##6.116.173':445
- '59.##6.1.192':445
- '59.##6.161.233':445
- '59.##6.110.111':9988
- '59.##6.126.104':139
- '59.##6.224.13':139
- '59.##6.207.91':139
- '59.##6.44.251':139
- '59.##6.212.142':139
- '59.##6.108.116':445
- '59.##6.44.251':445
- '59.#16.5.81':445
- '59.#16.79.7':139
- '59.##6.165.133':445
- '59.##6.108.116':139
- '59.##6.129.47':9988
- '59.##6.87.93':9988
- '59.##6.249.197':9988
- '59.##6.8.243':9988
- '59.##6.201.127':9988
- '59.##6.165.133':139
- '59.#16.5.81':139
- '59.##6.127.22':9988
- '59.##6.110.76':9988
- '59.##6.56.27':9988