Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '21#.#64.110.75':139
- '21#.#64.68.110':139
- '21#.#64.74.204':139
- '21#.#64.198.94':139
- '21#.#64.252.68':139
- '21#.#64.115.16':139
- '21#.#64.68.246':139
- '21#.#64.43.106':139
- '21#.#64.134.1':139
- '21#.#64.97.237':139
- '21#.#64.207.170':139
- '21#.#64.18.124':139
- '21#.#64.241.164':139
- '21#.#64.131.57':139
- '21#.#64.234.96':139
- '21#.#64.162.199':139
- '21#.#64.248.236':139
- '21#.#64.227.248':139
- '21#.#64.21.57':445
- '21#.#64.68.79':445
- '21#.#64.207.135':445
- '21#.#64.189.129':445
- '21#.#64.51.11':445
- '21#.#64.4.31':445
- '21#.#64.135.92':445
- '21#.#64.238.190':445
- '21#.#64.93.249':445
- '21#.#64.17.226':139
- '21#.#64.87.63':445
- '21#.#64.192.196':139
- '21#.#64.187.161':139
- '21#.#64.160.80':445
- '21#.#64.36.251':445
- '21#.#64.54.37':445
- '21#.#64.133.160':445
- '21#.#64.174.190':445
- '21#.#64.96.35':139
- '21#.#64.25.130':445
- '21#.#64.222.246':445
- '21#.#64.94.171':445
- '21#.#64.127.44':445
- '21#.#64.132.108':445
- '21#.#64.160.80':139
- '21#.#64.133.160':139
- '21#.#64.226.29':445
- '21#.#64.87.63':139
- '21#.#64.127.44':139
- '21#.#64.25.130':139
- '21#.#64.216.210':139
- '21#.#64.94.171':139
- '21#.#64.222.246':139
- '21#.#64.95.225':445
- '21#.#64.216.210':445
- '21#.#64.132.108':139
- '21#.#64.226.29':139
- '21#.#64.135.92':139
- '21#.#64.85.98':139
- '21#.#64.93.249':139
- '21#.#64.4.31':139
- '21#.#64.64.214':139
- '21#.#64.155.35':139
- '21#.#64.93.42':139
- '21#.#64.242.173':139
- '21#.#64.49.195':139
- '21#.#64.54.37':139
- '21#.#64.207.135':139
- '21#.#64.174.190':139
- '21#.#64.36.251':139
- '21#.#64.189.129':139
- '21#.#64.51.11':139
- '21#.#64.238.190':139
- '21#.#64.21.57':139
- '21#.#64.68.79':139
- '21#.#64.85.98':445
- '21#.#64.6.171':139
- '21#.#64.8.72':139
- '21#.#64.96.249':139
- '21#.#64.81.35':139
- '21#.#64.8.148':139
- '21#.#64.139.127':139
- '21#.#64.45.239':139
- '21#.#64.137.8':139
- '21#.#64.96.43':139
- '21#.#64.52.98':445
- '21#.#64.106.52':445
- '21#.#64.38.53':445
- '21#.#64.71.237':445
- '21#.#64.81.106':445
- '21#.#64.211.17':139
- '21#.#64.80.107':139
- '21#.#64.63.28':445
- '21#.#64.156.182':139
- '21#.#64.245.119':139
- '21#.#64.154.186':139
- '21#.#64.95.236':139
- '21#.#64.184.102':139
- '21#.#64.211.203':139
- '21#.#64.58.10':139
- '21#.#64.195.57':139
- '21#.#64.36.187':139
- '21#.#64.9.246':139
- '21#.#64.245.219':139
- '21#.#64.59.246':139
- '21#.#64.9.87':139
- '21#.#64.204.3':139
- '21#.#64.226.219':139
- '21#.#64.116.241':139
- '21#.#64.177.124':139
- '21#.#64.20.2':139
- '21#.#64.240.84':139
- '21#.#64.132.58':445
- '21#.#64.248.236':445
- '21#.#64.227.248':445
- '21#.#64.207.170':445
- '21#.#64.131.57':445
- '21#.#64.234.96':445
- '21#.#64.198.94':445
- '21#.#64.110.75':445
- '21#.#64.162.199':445
- '21#.#64.74.204':445
- '21#.#64.49.195':445
- '21#.#64.155.35':445
- '21#.#64.64.214':445
- '21#.#64.242.173':445
- '21#.#64.93.42':445
- '21#.#64.241.164':445
- '21#.#64.97.237':445
- '21#.#64.96.35':445
- '21#.#64.18.124':445
- '21#.#64.38.53':139
- '21#.#64.71.237':139
- '21#.#64.52.112':139
- '21#.#64.132.58':139
- '21#.#64.52.98':139
- '21#.#64.63.28':139
- '21#.#64.52.112':445
- '21#.#64.106.52':139
- '21#.#64.81.106':139
- '21#.#64.43.106':445
- '21#.#64.134.1':445
- '21#.#64.68.110':445
- '21#.#64.252.68':445
- '21#.#64.115.16':445
- '21#.#64.187.161':445
- '21#.#64.17.226':445
- '21#.#64.68.246':445
- '21#.#64.192.196':445
- '21#.#64.235.141':139
- '21#.#64.166.121':139
- '21#.#64.245.47':139
- '21#.#64.142.131':139
- '21#.#64.78.185':139
- '21#.#64.146.10':445
- '21#.#64.53.99':445
- '21#.#64.74.195':445
- '21#.#64.75.11':445
- '21#.#64.113.224':139
- '21#.#64.132.68':139
- '21#.#64.145.40':139
- '21#.#64.41.48':139
- '21#.#64.8.60':139
- '21#.#64.234.67':139
- '21#.#64.94.215':139
- '21#.#64.79.108':139
- '21#.#64.115.254':139
- '21#.#64.111.48':445
- '21#.#64.212.189':445
- '21#.#64.233.18':445
- '21#.#64.248.25':445
- '21#.#64.102.52':445
- '21#.#64.193.243':445
- '21#.#64.214.195':445
- '21#.#64.50.78':445
- '21#.#64.244.49':445
- '21#.#64.105.103':445
- '21#.#64.2.232':445
- '21#.#64.124.62':445
- '21#.#64.63.220':445
- '21#.#64.81.95':445
- '21#.#64.145.183':445
- '21#.#64.15.149':445
- '21#.#64.1.179':445
- '21#.#64.184.1':445
- '21#.#64.16.75':139
- '21#.#64.145.183':139
- '21#.#64.15.149':139
- '21#.#64.1.179':139
- '21#.#64.184.1':139
- '21#.#64.233.18':139
- '21#.#64.212.189':139
- '21#.#64.102.52':139
- '21#.#64.248.25':139
- '21#.#64.111.48':139
- '21#.#64.74.195':139
- '21#.#64.75.11':139
- '21#.#64.146.10':139
- '21#.#64.53.99':139
- '21#.#64.124.62':139
- '21#.#64.2.232':139
- '21#.#64.81.95':139
- '21#.#64.63.220':139
- '21#.#64.105.103':139
- '21#.#64.46.250':139
- '21#.#64.103.250':139
- '21#.#64.56.136':139
- '21#.#64.167.132':139
- '21#.#64.143.191':139
- '21#.#64.208.141':139
- '21#.#64.100.117':139
- '21#.#64.77.246':139
- '21#.#64.72.6':139
- '21#.#64.193.243':139
- '21#.#64.214.195':139
- '21#.#64.50.78':139
- '21#.#64.244.49':139
- '21#.#64.239.56':139
- '21#.#64.175.18':139
- '21#.#64.41.100':139
- '21#.#64.98.39':139
- '21#.#64.17.222':139
- '21#.#64.239.56':445
- '21#.#64.88.78':139
- '21#.#64.186.14':139
- '21#.#64.109.134':139
- '21#.#64.115.33':139
- '21#.#64.17.244':139
- '21#.#64.237.144':139
- '21#.#64.71.157':139
- '21#.#64.148.175':139
- '21#.#64.132.205':139
- '21#.#64.111.48':9988
- '21#.#64.214.195':9988
- '21#.#64.1.179':9988
- '21#.#64.74.195':9988
- '21#.#64.98.39':9988
- '21#.#64.234.148':139
- '21#.#64.213.9':139
- '21#.#64.95.162':139
- '21#.#64.66.236':139
- '21#.#64.148.175':445
- '21#.#64.132.205':445
- '21#.#64.186.14':445
- '21#.#64.17.244':445
- '21#.#64.237.144':445
- '21#.#64.66.26':445
- '21#.#64.95.225':139
- '21#.#64.71.157':445
- '21#.#64.172.29':445
- '21#.#64.95.162':445
- '21#.#64.66.236':445
- '21#.#64.172.29':139
- '21#.#64.66.26':139
- '21#.#64.234.148':445
- '21#.#64.115.33':445
- '21#.#64.88.78':445
- '21#.#64.213.9':445
- '21#.#64.109.134':445
- '21#.#64.53.99':9988
- '21#.#64.208.141':445
- '21#.#64.100.117':445
- '21#.#64.77.246':445
- '21#.#64.72.6':445
- '21#.#64.16.75':445
- '21#.#64.113.224':445
- '21#.#64.132.68':445
- '21#.#64.145.40':445
- '21#.#64.41.48':445
- '21#.#64.175.18':445
- '21#.#64.41.100':445
- '21#.#64.98.39':445
- '21#.#64.17.222':445
- '21#.#64.56.136':445
- '21#.#64.103.250':445
- '21#.#64.143.191':445
- '21#.#64.46.250':445
- '21#.#64.167.132':445
- '21#.#64.248.25':9988
- '21#.#64.124.62':9988
- '21#.#64.78.185':445
- '21#.#64.244.49':9988
- '21#.#64.81.95':9988
- '21#.#64.17.222':9988
- '21#.#64.102.52':9988
- '21#.#64.145.183':9988
- '21#.#64.239.56':9988
- '21#.#64.115.254':445
- '21#.#64.234.67':445
- '21#.#64.8.60':445
- '21#.#64.79.108':445
- '21#.#64.94.215':445
- '21#.#64.235.141':445
- '21#.#64.166.121':445
- '21#.#64.245.47':445
- '21#.#64.142.131':445