Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '59.##6.32.199':139
- '59.##6.94.119':139
- '59.##6.199.221':139
- '59.##6.231.36':139
- '59.##6.185.207':139
- '59.##6.31.152':139
- '59.##6.187.30':139
- '59.##6.151.241':139
- '59.##6.109.86':139
- '59.##6.98.110':139
- '59.##6.117.105':139
- '59.##6.18.22':139
- '59.##6.85.247':139
- '59.##6.194.138':139
- '59.#36.18.8':139
- '59.##6.81.18':139
- '59.##6.221.77':139
- '59.##6.83.239':139
- '59.##6.236.27':139
- '59.##6.226.65':139
- '59.##6.150.164':139
- '59.##6.171.187':139
- '59.##6.236.27':445
- '59.##6.221.77':445
- '59.##6.150.164':445
- '59.##6.85.247':445
- '59.##6.226.65':445
- '59.##6.185.207':445
- '59.##6.199.221':445
- '59.##6.231.36':445
- '59.##6.83.239':445
- '59.##6.117.105':445
- '59.##6.18.22':445
- '59.##6.201.13':139
- '59.##6.39.45':139
- '59.##6.41.83':139
- '59.##6.142.171':139
- '59.##6.175.212':139
- '59.##6.81.18':445
- '59.##6.194.138':445
- '59.#36.18.8':445
- '59.##6.117.38':139
- '59.##6.89.92':445
- '59.##6.39.195':139
- '59.##6.55.226':139
- '59.##6.168.212':139
- '59.##6.71.207':139
- '59.##6.12.19':139
- '59.##6.129.102':139
- '59.##6.144.52':445
- '59.##6.213.85':139
- '59.##6.205.39':139
- '59.##6.247.172':139
- '59.##6.242.220':139
- '59.##6.9.236':139
- '59.##6.135.77':139
- '59.##6.145.9':139
- '59.##6.90.48':139
- '59.##6.120.207':139
- '59.#36.39.0':139
- '59.##6.42.167':139
- '59.##6.46.230':139
- '59.##6.9.135':139
- '59.##6.6.209':139
- '59.##6.48.233':445
- '59.##6.39.195':445
- '59.##6.55.226':445
- '59.##6.168.212':445
- '59.##6.71.207':445
- '59.##6.12.19':445
- '59.##6.129.102':445
- '59.##6.89.92':139
- '59.##6.213.85':445
- '59.##6.205.39':445
- '59.##6.247.172':445
- '59.##6.242.220':445
- '59.##6.9.236':445
- '59.##6.135.77':445
- '59.##6.145.9':445
- '59.##6.90.48':445
- '59.##6.120.207':445
- '59.#36.39.0':445
- '59.##6.42.167':445
- '59.##6.46.230':445
- '59.##6.9.135':445
- '59.##6.6.209':445
- '59.##6.32.199':445
- '59.##6.139.118':139
- '59.##6.37.148':139
- '59.##6.98.79':445
- '59.##6.10.39':445
- '59.##6.33.109':445
- '59.##6.149.139':139
- '59.##6.199.157':139
- '59.##6.106.201':139
- '59.##6.31.37':139
- '59.##6.131.185':139
- '59.##6.127.72':445
- '59.##6.26.65':445
- '59.##6.13.117':445
- '59.##6.25.102':445
- '59.##6.167.28':445
- '59.##6.213.166':445
- '59.##6.208.14':445
- '59.##6.68.235':445
- '59.##6.148.40':445
- '59.##6.117.13':445
- '59.##6.120.132':445
- '59.##6.237.11':139
- '59.##6.94.225':139
- '59.##6.145.220':139
- '59.##6.94.42':139
- '59.##6.178.229':139
- '59.##6.232.189':139
- '59.##6.184.214':139
- '59.##6.40.92':139
- '59.##6.156.103':139
- '59.##6.54.77':139
- '59.##6.181.77':139
- '59.##6.129.9':139
- '59.##6.146.183':139
- '59.##6.124.117':139
- '59.#36.78.9':139
- '59.##6.37.47':139
- '59.##6.140.44':139
- '59.##6.146.78':139
- '59.##6.36.219':139
- '59.##6.78.27':139
- '59.##6.26.139':139
- '59.##6.36.118':139
- '59.##6.51.101':139
- '59.##6.52.13':139
- '59.##6.239.121':139
- '59.##6.39.45':445
- '59.##6.117.38':445
- '59.##6.153.90':139
- '59.##6.55.59':139
- '59.##6.195.99':139
- '59.##6.34.52':139
- '59.##6.228.21':139
- '59.##6.201.13':445
- '59.##6.151.241':445
- '59.##6.31.152':445
- '59.##6.98.110':445
- '59.##6.94.119':445
- '59.##6.109.86':445
- '59.##6.175.212':445
- '59.##6.41.83':445
- '59.##6.142.171':445
- '59.##6.187.30':445
- '59.##6.171.187':445
- '59.##6.167.28':139
- '59.##6.51.101':445
- '59.##6.52.13':445
- '59.##6.239.121':445
- '59.##6.33.109':139
- '59.##6.98.79':139
- '59.##6.153.90':445
- '59.##6.55.59':445
- '59.##6.195.99':445
- '59.##6.34.52':445
- '59.##6.228.21':445
- '59.##6.10.39':139
- '59.##6.13.117':139
- '59.##6.117.13':139
- '59.##6.26.65':139
- '59.##6.213.166':139
- '59.##6.25.102':139
- '59.##6.68.235':139
- '59.##6.127.72':139
- '59.##6.208.14':139
- '59.##6.120.132':139
- '59.##6.148.40':139
- '59.##6.123.94':445
- '59.##6.178.98':445
- '59.##6.96.110':445
- '59.##6.2.163':445
- '59.##6.229.220':445
- '59.##6.101.11':445
- '59.##6.84.138':445
- '59.##6.219.140':445
- '59.##6.104.178':445
- '59.##6.141.104':445
- '59.##6.163.62':445
- '59.#36.75.9':139
- '59.##6.208.75':139
- '59.##6.221.218':139
- '59.##6.180.148':139
- '59.##6.52.49':139
- '59.##6.139.119':445
- '59.##6.183.31':445
- '59.##6.219.185':139
- '59.##6.85.133':139
- '59.##6.25.124':139
- '59.##6.184.56':445
- '59.##6.85.252':445
- '59.##6.110.188':445
- '59.##6.6.142':445
- '59.##6.155.151':445
- '59.##6.216.125':445
- '59.##6.132.245':445
- '59.##6.153.182':445
- '59.##6.171.186':445
- '59.##6.25.130':445
- '59.##6.160.245':445
- '59.##6.44.125':445
- '59.##6.225.221':445
- '59.##6.165.17':445
- '59.##6.221.214':445
- '59.##6.153.184':445
- '59.##6.247.253':445
- '59.##6.140.135':445
- '59.##6.246.175':445
- '59.##6.215.171':445
- '59.##6.53.244':445
- '59.##6.34.147':445
- '59.##6.153.184':139
- '59.##6.247.253':139
- '59.##6.184.56':139
- '59.##6.101.11':139
- '59.##6.84.138':139
- '59.##6.53.244':139
- '59.##6.34.147':139
- '59.##6.165.17':139
- '59.##6.221.214':139
- '59.##6.225.221':139
- '59.##6.219.140':139
- '59.##6.2.163':139
- '59.##6.229.220':139
- '59.##6.163.62':139
- '59.##6.183.31':139
- '59.##6.139.119':139
- '59.##6.104.178':139
- '59.##6.141.104':139
- '59.##6.178.98':139
- '59.##6.96.110':139
- '59.##6.123.94':139
- '59.##6.215.171':139
- '59.##6.237.225':139
- '59.##6.65.241':139
- '59.##6.235.14':139
- '59.##6.132.245':139
- '59.##6.153.182':139
- '59.##6.194.124':139
- '59.#36.6.46':139
- '59.##6.70.12':139
- '59.##6.33.26':139
- '59.##6.41.33':139
- '59.##6.171.186':139
- '59.##6.155.151':139
- '59.##6.216.125':139
- '59.##6.44.125':139
- '59.##6.140.135':139
- '59.##6.246.175':139
- '59.##6.25.130':139
- '59.##6.160.245':139
- '59.##6.110.188':139
- '59.##6.6.142':139
- '59.##6.85.252':139
- '59.##6.235.14':445
- '59.##6.22.195':445
- '59.##6.48.251':445
- '59.##6.132.199':445
- '59.##6.77.111':139
- '59.##6.55.178':445
- '59.##6.41.226':445
- '59.##6.63.167':445
- '59.##6.237.173':445
- '59.##6.239.149':445
- '59.##6.174.22':445
- '59.##6.117.108':139
- '59.##6.216.165':139
- '59.##6.248.16':139
- '59.##6.206.27':139
- '59.##6.206.204':139
- '59.##6.7.206':139
- '59.##6.113.250':139
- '59.##6.123.244':139
- '59.##6.160.249':139
- '59.##6.37.68':139
- '59.##6.137.229':139
- '59.##6.243.30':445
- '59.##6.160.249':445
- '59.##6.113.250':445
- '59.##6.137.229':445
- '59.##6.248.16':445
- '59.##6.37.68':445
- '59.##6.144.52':139
- '59.##6.48.233':139
- '59.##6.77.111':445
- '59.##6.123.244':445
- '59.##6.117.108':445
- '59.##6.216.165':445
- '59.##6.242.34':445
- '59.##6.70.111':445
- '59.##6.34.240':445
- '59.##6.48.192':445
- '59.##6.141.135':445
- '59.##6.7.206':445
- '59.##6.206.27':445
- '59.##6.206.204':445
- '59.##6.125.134':445
- '59.##6.204.200':445
- '59.##6.219.185':445
- '59.##6.2.163':9988
- '59.##6.25.124':445
- '59.##6.208.75':445
- '59.##6.85.133':445
- '59.##6.84.138':9988
- '59.##6.153.184':9988
- '59.##6.141.104':9988
- '59.##6.229.220':9988
- '59.##6.178.98':9988
- '59.#36.75.9':445
- '59.##6.41.33':445
- '59.##6.70.12':445
- '59.##6.33.26':445
- '59.##6.237.225':445
- '59.##6.65.241':445
- '59.##6.52.49':445
- '59.##6.221.218':445
- '59.##6.180.148':445
- '59.##6.194.124':445
- '59.#36.6.46':445
- '59.##6.247.253':9988
- '59.##6.48.192':139
- '59.##6.141.135':139
- '59.##6.243.30':139
- '59.##6.41.226':139
- '59.##6.63.167':139
- '59.##6.125.134':139
- '59.##6.204.200':139
- '59.##6.70.111':139
- '59.##6.34.240':139
- '59.##6.242.34':139
- '59.##6.237.173':139
- '59.##6.132.245':9988
- '59.##6.55.178':139
- '59.##6.215.171':9988
- '59.##6.221.214':9988
- '59.##6.225.221':9988
- '59.##6.239.149':139
- '59.##6.174.22':139
- '59.##6.48.251':139
- '59.##6.132.199':139
- '59.##6.22.195':139