Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '64.##5.168.108':139
- '64.##5.142.240':139
- '64.##5.38.38':139
- '64.##5.9.140':139
- '64.##5.162.220':139
- '64.##5.162.105':139
- '64.##5.137.150':139
- '64.##5.245.16':139
- '64.#65.1.0':139
- '64.##5.28.50':139
- '64.##5.78.128':139
- '64.##5.140.37':139
- '64.##5.96.62':139
- '64.##5.34.254':139
- '64.##5.62.94':139
- '64.##5.87.48':139
- '64.##5.56.152':139
- '64.##5.153.157':139
- '64.##5.156.54':139
- '64.##5.36.183':139
- '64.##5.0.110':139
- '64.##5.74.244':139
- '64.##5.80.50':139
- '64.##5.58.216':445
- '64.##5.205.58':445
- '64.##5.216.20':445
- '64.##5.23.28':139
- '64.##5.0.117':445
- '64.##5.156.190':445
- '64.##5.127.144':445
- '64.##5.136.164':445
- '64.##5.64.226':445
- '64.#65.2.80':445
- '64.##5.13.164':445
- '64.##5.242.141':139
- '64.##5.32.225':139
- '64.##5.100.191':139
- '64.##5.249.51':139
- '64.##5.91.205':139
- '64.##5.41.24':139
- '64.##5.59.109':139
- '64.##5.171.196':139
- '64.##5.177.235':139
- '64.##5.196.233':139
- '64.##5.197.87':139
- '64.##5.139.98':139
- '64.##5.114.199':445
- '64.##5.73.69':445
- '64.##5.106.218':445
- '64.##5.242.225':445
- '64.##5.123.242':445
- '64.##5.64.166':445
- '64.##5.125.197':445
- '64.##5.100.120':445
- '64.##5.16.235':445
- '64.##5.171.206':445
- '64.##5.129.117':445
- '64.##5.226.40':445
- '64.##5.15.186':445
- '64.##5.59.64':445
- '64.##5.81.172':445
- '64.##5.164.72':445
- '64.#65.1.20':445
- '64.##5.221.240':445
- '64.##5.19.28':445
- '64.##5.8.174':445
- '64.##5.177.125':445
- '64.##5.126.221':445
- '64.##5.17.88':445
- '64.##5.64.226':139
- '64.##5.127.144':139
- '64.##5.13.164':139
- '64.##5.156.190':139
- '64.#65.2.80':139
- '64.##5.136.164':139
- '64.#65.6.7':139
- '64.##5.47.194':139
- '64.##5.127.16':139
- '64.##5.101.227':139
- '64.##5.46.82':139
- '64.##5.205.58':139
- '64.##5.170.123':445
- '64.##5.89.227':445
- '64.##5.246.113':445
- '64.##5.64.179':445
- '64.##5.154.170':445
- '64.##5.26.34':445
- '64.##5.216.20':139
- '64.##5.58.216':139
- '64.##5.0.117':139
- '64.##5.51.68':445
- '64.##5.135.236':445
- '64.##5.112.0':139
- '64.##5.148.90':139
- '64.##5.167.114':139
- '64.##5.27.134':139
- '64.##5.103.65':139
- '64.##5.44.225':139
- '64.##5.59.240':139
- '64.##5.125.74':139
- '64.##5.240.90':139
- '64.##5.42.27':139
- '64.##5.157.106':139
- '64.##5.49.170':139
- '64.##5.157.236':139
- '64.##5.133.86':139
- '64.##5.187.78':139
- '64.##5.159.213':139
- '64.##5.145.18':139
- '64.##5.101.133':139
- '64.##5.215.158':139
- '64.##5.85.109':139
- '64.##5.232.75':139
- '64.##5.145.52':139
- '64.##5.114.6':139
- '64.##5.50.139':139
- '64.##5.102.146':139
- '64.##5.85.146':139
- '64.##5.211.222':139
- '64.##5.182.11':139
- '64.##5.73.126':139
- '64.##5.249.135':139
- '64.##5.104.249':139
- '64.##5.15.246':139
- '64.##5.196.3':139
- '64.##5.81.184':139
- '64.##5.75.75':139
- '64.##5.226.190':139
- '64.##5.83.125':139
- '64.##5.190.168':139
- '64.##5.121.221':139
- '64.##5.35.87':139
- '64.##5.229.254':139
- '64.##5.223.219':139
- '64.##5.218.206':139
- '64.##5.161.190':139
- '64.##5.87.217':139
- '64.##5.133.166':139
- '64.##5.36.183':445
- '64.##5.140.37':445
- '64.##5.156.54':445
- '64.##5.80.50':445
- '64.##5.0.110':445
- '64.##5.9.140':445
- '64.##5.142.240':445
- '64.##5.162.105':445
- '64.##5.168.108':445
- '64.##5.162.220':445
- '64.##5.38.38':445
- '64.##5.74.244':445
- '64.#65.6.7':445
- '64.##5.47.194':445
- '64.##5.127.16':445
- '64.##5.101.227':445
- '64.##5.46.82':445
- '64.##5.87.48':445
- '64.##5.34.254':445
- '64.##5.153.157':445
- '64.##5.96.62':445
- '64.##5.56.152':445
- '64.##5.62.94':445
- '64.##5.177.235':445
- '64.##5.242.141':445
- '64.##5.171.196':445
- '64.##5.139.98':445
- '64.##5.196.233':445
- '64.##5.23.28':445
- '64.##5.208.235':139
- '64.##5.122.34':139
- '64.##5.134.32':139
- '64.##5.23.254':139
- '64.##5.79.88':139
- '64.##5.197.87':445
- '64.##5.137.150':445
- '64.##5.245.16':445
- '64.#65.1.0':445
- '64.##5.28.50':445
- '64.##5.78.128':445
- '64.##5.91.205':445
- '64.##5.100.191':445
- '64.##5.59.109':445
- '64.##5.32.225':445
- '64.##5.41.24':445
- '64.##5.249.51':445
- '64.##5.32.84':445
- '64.##5.156.35':445
- '64.##5.175.193':445
- '64.##5.60.181':445
- '64.##5.196.59':445
- '64.##5.80.118':445
- '64.##5.54.133':445
- '64.##5.208.54':445
- '64.##5.120.229':445
- '64.##5.163.183':445
- '64.##5.90.21':445
- '64.##5.109.125':445
- '64.##5.117.195':139
- '64.##5.19.113':139
- '64.##5.206.225':139
- '64.##5.201.108':139
- '64.##5.146.177':139
- '64.##5.240.193':445
- '64.##5.193.194':445
- '64.##5.106.134':445
- '64.##5.22.51':445
- '64.##5.96.179':445
- '64.##5.176.240':445
- '64.##5.73.201':445
- '64.##5.106.228':445
- '64.##5.77.134':445
- '64.##5.8.217':445
- '64.#65.5.6':445
- '64.##5.183.151':445
- '64.##5.117.239':445
- '64.##5.14.194':445
- '64.##5.70.210':445
- '64.##5.108.242':445
- '64.##5.48.208':445
- '64.##5.151.80':445
- '64.##5.77.81':445
- '64.##5.241.73':445
- '64.##5.22.149':445
- '64.##5.187.144':445
- '64.##5.194.23':445
- '64.##5.55.41':445
- '64.##5.9.132':445
- '64.##5.88.10':445
- '64.##5.163.107':445
- '64.##5.173.41':445
- '64.##5.27.158':445
- '64.##5.120.229':139
- '64.##5.54.133':139
- '64.##5.90.21':139
- '64.##5.80.118':139
- '64.##5.163.183':139
- '64.##5.208.54':139
- '64.##5.77.81':139
- '64.##5.241.73':139
- '64.##5.22.149':139
- '64.##5.187.144':139
- '64.##5.194.23':139
- '64.##5.156.35':139
- '64.##5.176.240':139
- '64.##5.96.179':139
- '64.##5.22.51':139
- '64.##5.240.193':139
- '64.##5.193.194':139
- '64.##5.106.134':139
- '64.##5.175.193':139
- '64.##5.32.84':139
- '64.##5.196.59':139
- '64.##5.109.125':139
- '64.##5.60.181':139
- '64.##5.70.210':139
- '64.##5.117.239':139
- '64.##5.48.208':139
- '64.##5.183.151':139
- '64.##5.108.242':139
- '64.##5.14.194':139
- '64.##5.155.20':139
- '64.##5.78.93':139
- '64.##5.20.213':139
- '64.#65.97.9':139
- '64.##5.212.175':139
- '64.##5.106.228':139
- '64.##5.163.107':139
- '64.##5.9.132':139
- '64.##5.27.158':139
- '64.##5.55.41':139
- '64.##5.173.41':139
- '64.##5.88.10':139
- '64.##5.77.134':139
- '64.##5.73.201':139
- '64.#65.5.6':139
- '64.##5.151.80':139
- '64.##5.8.217':139
- '64.##5.16.235':139
- '64.##5.125.197':139
- '64.##5.129.117':139
- '64.##5.64.166':139
- '64.##5.171.206':139
- '64.##5.100.120':139
- '64.##5.170.123':139
- '64.##5.89.227':139
- '64.##5.246.113':139
- '64.##5.64.179':139
- '64.##5.154.170':139
- '64.##5.73.69':139
- '64.##5.177.125':139
- '64.##5.19.28':139
- '64.##5.17.88':139
- '64.##5.221.240':139
- '64.##5.126.221':139
- '64.##5.8.174':139
- '64.##5.106.218':139
- '64.##5.114.199':139
- '64.##5.123.242':139
- '64.##5.226.40':139
- '64.##5.242.225':139
- '64.##5.161.148':445
- '64.##5.211.160':445
- '64.##5.250.168':445
- '64.##5.33.193':445
- '64.##5.45.147':445
- '64.##5.194.211':445
- '64.##5.45.82':445
- '64.##5.14.150':445
- '64.##5.17.181':445
- '64.##5.58.194':445
- '64.##5.31.159':445
- '64.##5.150.125':445
- '64.##5.128.108':445
- '64.##5.60.211':445
- '64.##5.135.236':139
- '64.##5.26.34':139
- '64.##5.51.68':139
- '64.##5.119.148':445
- '64.##5.109.117':445
- '64.##5.142.231':445
- '64.##5.61.200':445
- '64.##5.22.251':445
- '64.##5.12.96':445
- '64.##5.48.208':9988
- '64.##5.108.242':9988
- '64.##5.73.201':9988
- '64.#65.5.6':9988
- '64.##5.106.228':9988
- '64.##5.117.239':9988
- '64.##5.128.108':139
- '64.##5.60.211':139
- '64.##5.117.195':9988
- '64.##5.20.213':9988
- '64.##5.146.177':9988
- '64.##5.156.35':9988
- '64.##5.155.20':445
- '64.##5.78.93':445
- '64.##5.20.213':445
- '64.#65.97.9':445
- '64.##5.212.175':445
- '64.##5.201.108':445
- '64.##5.19.113':445
- '64.##5.106.134':9988
- '64.##5.117.195':445
- '64.##5.146.177':445
- '64.##5.206.225':445
- '64.##5.17.181':139
- '64.##5.45.82':139
- '64.##5.31.159':139
- '64.##5.194.211':139
- '64.##5.58.194':139
- '64.##5.14.150':139
- '64.##5.15.186':139
- '64.##5.59.64':139
- '64.##5.81.172':139
- '64.##5.164.72':139
- '64.#65.1.20':139
- '64.##5.211.160':139
- '64.##5.61.200':139
- '64.##5.109.117':139
- '64.##5.12.96':139
- '64.##5.119.148':139
- '64.##5.22.251':139
- '64.##5.142.231':139
- '64.##5.250.168':139
- '64.##5.161.148':139
- '64.##5.45.147':139
- '64.##5.150.125':139
- '64.##5.33.193':139