Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '64.##4.181.129':139
- '64.##4.73.149':139
- '64.##4.114.223':139
- '64.##4.74.112':139
- '64.##4.223.113':139
- '64.##4.104.122':139
- '64.#24.3.11':139
- '64.##4.114.91':139
- '64.##4.183.197':139
- '64.##4.198.183':139
- '64.##4.69.125':139
- '64.##4.142.1':445
- '64.##4.139.12':445
- '64.##4.29.63':445
- '64.#24.8.51':445
- '64.#24.63.8':445
- '64.##4.42.108':139
- '64.##4.15.247':139
- '64.#24.1.77':139
- '64.##4.147.202':139
- '64.##4.15.210':139
- '64.##4.181.129':445
- '64.##4.73.149':445
- '64.##4.114.223':445
- '64.##4.74.112':445
- '64.##4.223.113':445
- '64.##4.104.122':445
- '64.#24.3.11':445
- '64.##4.114.91':445
- '64.##4.183.197':445
- '64.##4.198.183':445
- '64.##4.69.125':445
- '64.##4.221.249':139
- '64.##4.155.201':139
- '64.##4.250.16':139
- '64.##4.169.99':139
- '64.##4.17.142':139
- '64.##4.42.108':445
- '64.##4.15.247':445
- '64.#24.1.77':445
- '64.##4.147.202':445
- '64.##4.15.210':445
- '64.##4.109.176':445
- '64.#24.63.8':139
- '64.##4.29.63':139
- '64.#24.8.51':139
- '64.##4.250.205':139
- '64.##4.109.176':139
- '64.##4.120.243':445
- '64.##4.155.17':445
- '64.##4.90.233':445
- '64.##4.142.1':139
- '64.##4.139.12':139
- '64.##4.169.56':139
- '64.##4.163.237':139
- '64.##4.145.194':139
- '64.##4.116.222':139
- '64.##4.245.11':139
- '64.##4.115.216':139
- '64.##4.10.54':139
- '64.##4.73.222':139
- '64.##4.169.187':139
- '64.##4.146.207':139
- '64.##4.2.227':139
- '64.##4.146.207':445
- '64.##4.2.227':445
- '64.##4.145.194':445
- '64.##4.116.222':445
- '64.##4.163.237':445
- '64.##4.169.56':445
- '64.##4.250.205':445
- '64.##4.73.222':445
- '64.##4.169.187':445
- '64.##4.10.54':445
- '64.##4.115.216':445
- '64.##4.151.157':445
- '64.##4.17.166':445
- '64.##4.143.39':445
- '64.##4.131.70':445
- '64.##4.39.246':445
- '64.##4.83.96':445
- '64.##4.245.11':445
- '64.##4.119.198':445
- '64.##4.69.32':445
- '64.##4.91.59':445
- '64.##4.169.99':445
- '64.##4.1.180':445
- '64.##4.24.195':445
- '64.##4.39.195':445
- '64.##4.32.229':445
- '64.##4.48.139':445
- '64.##4.37.93':445
- '64.##4.214.177':445
- '64.##4.169.228':445
- '64.##4.30.226':445
- '64.#24.53.6':445
- '64.##4.24.188':445
- '64.##4.157.167':445
- '64.##4.32.106':445
- '64.##4.80.133':445
- '64.##4.70.170':445
- '64.##4.133.155':445
- '64.##4.61.128':445
- '64.##4.72.76':445
- '64.##4.68.91':445
- '64.##4.155.193':445
- '64.##4.46.169':445
- '64.##4.118.22':139
- '64.##4.91.102':139
- '64.#24.23.3':139
- '64.##4.71.173':139
- '64.##4.188.215':139
- '64.##4.217.200':139
- '64.##4.227.52':139
- '64.##4.119.2':139
- '64.##4.47.229':139
- '64.#24.2.48':139
- '64.##4.189.204':139
- '64.##4.212.120':139
- '64.##4.225.141':139
- '64.##4.247.225':139
- '64.##4.49.226':139
- '64.##4.226.34':139
- '64.##4.201.77':139
- '64.##4.221.190':139
- '64.##4.128.226':139
- '64.##4.112.185':139
- '64.##4.106.134':139
- '64.##4.247.25':445
- '64.##4.133.155':139
- '64.##4.80.133':139
- '64.##4.70.170':139
- '64.##4.26.19':139
- '64.##4.247.25':139
- '64.##4.46.169':139
- '64.##4.68.91':139
- '64.##4.155.193':139
- '64.##4.157.167':139
- '64.##4.32.106':139
- '64.##4.19.150':139
- '64.##4.155.201':445
- '64.##4.115.16':139
- '64.##4.221.249':445
- '64.##4.17.142':445
- '64.##4.250.16':445
- '64.##4.106.12':139
- '64.##4.15.166':139
- '64.##4.21.12':139
- '64.##4.115.14':139
- '64.##4.67.214':139
- '64.##4.115.14':445
- '64.##4.67.214':445
- '64.##4.115.16':445
- '64.##4.37.93':139
- '64.##4.214.177':139
- '64.##4.19.150':445
- '64.##4.26.19':445
- '64.##4.15.166':445
- '64.##4.21.12':445
- '64.##4.106.12':445
- '64.##4.169.228':139
- '64.##4.32.229':139
- '64.##4.48.139':139
- '64.##4.24.188':139
- '64.##4.61.128':139
- '64.##4.72.76':139
- '64.##4.30.226':139
- '64.#24.53.6':139
- '64.##4.24.195':139
- '64.##4.39.195':139
- '64.##4.1.180':139
- '64.##4.1.184':445
- '64.#24.94.1':445
- '64.##4.183.254':445
- '64.##4.111.41':445
- '64.##4.5.149':445
- '64.#24.8.78':445
- '64.##4.104.7':445
- '64.##4.77.198':445
- '64.##4.73.133':445
- '64.##4.132.131':445
- '64.##4.16.161':445
- '64.##4.18.61':139
- '64.##4.226.129':139
- '64.##4.208.240':139
- '64.##4.53.174':139
- '64.##4.105.238':139
- '64.##4.231.130':445
- '64.##4.195.187':445
- '64.##4.215.112':139
- '64.##4.238.27':139
- '64.##4.33.115':139
- '64.##4.145.100':445
- '64.##4.218.176':445
- '64.##4.100.9':445
- '64.##4.146.233':445
- '64.##4.9.146':445
- '64.##4.190.30':445
- '64.##4.228.189':445
- '64.##4.30.80':445
- '64.##4.206.230':445
- '64.##4.79.206':445
- '64.##4.233.183':445
- '64.##4.166.31':445
- '64.##4.6.179':445
- '64.##4.14.50':445
- '64.##4.251.103':445
- '64.##4.112.141':445
- '64.##4.89.210':445
- '64.##4.253.4':445
- '64.##4.18.18':445
- '64.##4.121.207':445
- '64.##4.73.211':445
- '64.##4.161.178':139
- '64.##4.112.141':139
- '64.##4.14.50':139
- '64.##4.251.103':139
- '64.#24.8.78':139
- '64.##4.104.7':139
- '64.##4.73.211':139
- '64.##4.18.18':139
- '64.##4.121.207':139
- '64.##4.166.31':139
- '64.##4.6.179':139
- '64.##4.77.198':139
- '64.##4.5.149':139
- '64.##4.111.41':139
- '64.##4.16.161':139
- '64.##4.195.187':139
- '64.##4.231.130':139
- '64.##4.73.133':139
- '64.##4.132.131':139
- '64.#24.94.1':139
- '64.##4.183.254':139
- '64.##4.1.184':139
- '64.##4.104.100':139
- '64.##4.199.132':139
- '64.##4.35.164':139
- '64.##4.190.30':139
- '64.##4.228.189':139
- '64.##4.54.67':139
- '64.##4.142.2':139
- '64.##4.196.217':139
- '64.##4.61.214':139
- '64.##4.148.221':139
- '64.##4.30.80':139
- '64.##4.146.233':139
- '64.##4.9.146':139
- '64.##4.233.183':139
- '64.##4.89.210':139
- '64.##4.253.4':139
- '64.##4.206.230':139
- '64.##4.79.206':139
- '64.##4.218.176':139
- '64.##4.100.9':139
- '64.##4.145.100':139
- '64.##4.35.164':445
- '64.##4.76.219':445
- '64.##4.185.157':445
- '64.#24.6.47':445
- '64.##4.102.36':445
- '64.##4.247.228':445
- '64.##4.7.216':445
- '64.##4.245.122':445
- '64.##4.130.53':445
- '64.##4.36.185':445
- '64.##4.30.185':445
- '64.##4.101.236':445
- '64.##4.89.89':139
- '64.##4.16.253':139
- '64.#24.1.80':139
- '64.##4.142.134':139
- '64.##4.80.38':139
- '64.##4.233.78':139
- '64.##4.60.43':445
- '64.##4.31.233':139
- '64.##4.62.199':139
- '64.##4.10.94':139
- '64.##4.143.39':139
- '64.##4.151.157':139
- '64.##4.39.246':139
- '64.##4.155.17':139
- '64.##4.131.70':139
- '64.##4.119.198':139
- '64.##4.83.96':139
- '64.##4.91.59':139
- '64.##4.17.166':139
- '64.##4.69.32':139
- '64.##4.120.243':139
- '64.##4.89.89':445
- '64.##4.16.253':445
- '64.#24.1.80':445
- '64.##4.142.134':445
- '64.##4.80.38':445
- '64.##4.233.78':445
- '64.##4.90.233':139
- '64.##4.31.233':445
- '64.##4.62.199':445
- '64.##4.10.94':445
- '64.##4.245.122':139
- '64.##4.33.115':445
- '64.##4.215.112':445
- '64.##4.238.27':445
- '64.##4.18.61':445
- '64.##4.226.129':445
- '64.##4.183.254':9988
- '64.##4.132.131':9988
- '64.##4.16.161':9988
- '64.##4.5.149':9988
- '64.##4.195.187':9988
- '64.##4.208.240':445
- '64.##4.148.221':445
- '64.##4.196.217':445
- '64.##4.61.214':445
- '64.##4.104.100':445
- '64.##4.199.132':445
- '64.##4.53.174':445
- '64.##4.105.238':445
- '64.##4.161.178':445
- '64.##4.54.67':445
- '64.##4.142.2':445
- '64.#24.6.47':139
- '64.##4.76.219':139
- '64.##4.247.228':139
- '64.##4.101.236':139
- '64.##4.102.36':139
- '64.##4.130.53':139
- '64.##4.7.216':139
- '64.##4.30.185':139
- '64.##4.185.157':139
- '64.##4.36.185':139
- '64.##4.60.43':139
- '64.##4.166.31':9988
- '64.##4.89.210':9988
- '64.##4.6.179':9988
- '64.##4.14.50':9988
- '64.##4.112.141':9988
- '64.##4.9.146':9988
- '64.##4.100.9':9988
- '64.##4.218.176':9988
- '64.##4.79.206':9988
- '64.##4.30.80':9988