Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '81.##6.31.117':139
- '81.##6.158.183':139
- '81.##6.220.93':445
- '81.##6.13.179':139
- '81.##6.37.246':139
- '81.##6.158.183':445
- '81.##6.37.246':445
- '81.##6.31.117':445
- '81.##6.13.179':445
- '81.##6.204.125':445
- '81.##6.142.54':445
- '81.##6.107.142':445
- '81.##6.208.210':445
- '81.##6.149.74':445
- '81.##6.4.108':445
- '81.##6.23.148':445
- '81.##6.138.141':445
- '81.##6.25.226':445
- '81.##6.16.37':445
- '81.##6.28.147':139
- '81.##6.241.53':139
- '81.##6.152.120':139
- '81.##6.167.185':139
- '81.##6.53.168':139
- '81.##6.128.35':139
- '81.##6.122.182':139
- '81.##6.20.33':139
- '81.##6.121.127':139
- '81.##6.146.121':139
- '81.#06.58.3':139
- '81.##6.65.198':139
- '81.##6.219.117':139
- '81.##6.143.205':139
- '81.##6.127.16':139
- '81.##6.114.124':139
- '81.##6.55.60':139
- '81.##6.80.103':139
- '81.##6.206.136':139
- '81.##6.47.83':139
- '81.##6.16.111':445
- '81.##6.224.222':445
- '81.##6.176.217':445
- '81.##6.222.176':445
- '81.##6.40.87':445
- '81.##6.67.218':445
- '81.##6.162.186':445
- '81.##6.50.115':445
- '81.##6.114.244':445
- '81.##6.127.111':445
- '81.##6.220.93':139
- '81.##6.107.199':445
- '81.##6.138.141':139
- '81.##6.204.125':139
- '81.##6.40.180':445
- '81.##6.217.91':445
- '81.##6.243.142':445
- '81.##6.181.33':445
- '81.##6.91.180':445
- '81.##6.253.148':445
- '81.##6.165.196':445
- '81.##6.254.78':445
- '81.##6.23.103':445
- '81.##6.125.75':445
- '81.##6.87.166':445
- '81.##6.136.0':445
- '81.##6.73.86':445
- '81.##6.173.90':445
- '81.##6.88.66':445
- '81.##6.190.22':445
- '81.##6.91.161':445
- '81.##6.39.225':445
- '81.##6.34.213':445
- '81.##6.21.83':445
- '81.##6.158.64':445
- '81.##6.196.31':445
- '81.##6.23.78':445
- '81.##6.118.224':445
- '81.##6.22.177':445
- '81.##6.216.155':445
- '81.##6.155.169':445
- '81.#06.3.1':445
- '81.##6.93.231':445
- '81.##6.158.216':445
- '81.##6.211.0':445
- '81.##6.156.206':445
- '81.##6.244.158':445
- '81.##6.120.154':445
- '81.#06.2.19':445
- '81.##6.152.120':445
- '81.##6.128.35':445
- '81.##6.53.168':445
- '81.##6.241.53':445
- '81.##6.121.127':445
- '81.##6.122.182':445
- '81.##6.98.213':445
- '81.##6.146.121':445
- '81.##6.20.33':445
- '81.##6.194.201':445
- '81.##6.184.32':445
- '81.##6.147.214':445
- '81.##6.161.207':445
- '81.##6.32.162':445
- '81.##6.251.57':445
- '81.##6.223.69':139
- '81.##6.100.198':139
- '81.##6.43.166':139
- '81.##6.145.240':139
- '81.##6.208.91':445
- '81.##6.107.172':445
- '81.##6.99.120':445
- '81.##6.4.195':445
- '81.##6.113.91':445
- '81.##6.98.111':445
- '81.##6.206.184':445
- '81.##6.91.206':445
- '81.##6.225.115':445
- '81.##6.82.125':445
- '81.##6.4.195':139
- '81.##6.113.91':139
- '81.##6.156.206':139
- '81.##6.194.201':139
- '81.##6.107.172':139
- '81.##6.225.115':139
- '81.##6.82.125':139
- '81.##6.99.120':139
- '81.##6.98.111':139
- '81.##6.211.0':139
- '81.#06.2.19':139
- '81.##6.93.231':139
- '81.##6.98.213':139
- '81.#06.3.1':139
- '81.##6.155.169':139
- '81.##6.244.158':139
- '81.##6.120.154':139
- '81.##6.216.155':139
- '81.##6.158.216':139
- '81.##6.206.184':139
- '81.##6.114.124':445
- '81.##6.206.136':445
- '81.##6.65.198':445
- '81.##6.219.117':445
- '81.##6.55.60':445
- '81.#06.58.3':445
- '81.##6.167.185':445
- '81.##6.47.83':445
- '81.##6.80.103':445
- '81.##6.143.205':445
- '81.##6.161.207':139
- '81.##6.32.162':139
- '81.##6.91.206':139
- '81.##6.208.91':139
- '81.##6.184.32':139
- '81.##6.28.147':445
- '81.##6.127.16':445
- '81.##6.147.214':139
- '81.##6.251.57':139
- '81.##6.23.148':139
- '81.##6.108.63':445
- '81.##6.136.170':445
- '81.##6.113.239':139
- '81.##6.199.223':139
- '81.##6.37.138':445
- '81.##6.213.59':445
- '81.##6.99.211':445
- '81.##6.41.189':445
- '81.##6.23.55':445
- '81.##6.101.129':139
- '81.##6.237.232':139
- '81.##6.211.27':139
- '81.##6.19.247':139
- '81.##6.167.237':139
- '81.##6.178.10':139
- '81.##6.76.21':139
- '81.##6.129.31':139
- '81.##6.242.210':139
- '81.##6.159.121':139
- '81.##6.185.219':445
- '81.##6.6.228':445
- '81.#06.87.6':445
- '81.##6.239.239':445
- '81.##6.12.45':445
- '81.##6.37.63':445
- '81.##6.23.141':445
- '81.#06.1.12':445
- '81.##6.128.87':445
- '81.##6.97.90':445
- '81.##6.239.30':445
- '81.##6.38.48':445
- '81.##6.37.226':445
- '81.##6.170.82':445
- '81.##6.139.241':445
- '81.##6.12.24':445
- '81.##6.172.118':445
- '81.##6.30.54':445
- '81.##6.68.164':445
- '81.##6.50.94':445
- '81.##6.12.24':139
- '81.##6.68.164':139
- '81.##6.38.48':139
- '81.##6.37.226':139
- '81.##6.50.94':139
- '81.##6.239.30':139
- '81.##6.239.239':139
- '81.##6.172.118':139
- '81.##6.30.54':139
- '81.##6.139.241':139
- '81.##6.108.63':139
- '81.##6.136.170':139
- '81.##6.23.55':139
- '81.##6.41.189':139
- '81.##6.37.138':139
- '81.##6.170.82':139
- '81.##6.185.219':139
- '81.##6.213.59':139
- '81.##6.99.211':139
- '81.##6.12.45':139
- '81.##6.3.149':139
- '81.##6.0.240':139
- '81.#06.39.3':139
- '81.##6.52.132':139
- '81.##6.181.228':139
- '81.##6.15.237':139
- '81.##6.178.228':139
- '81.##6.166.183':139
- '81.##6.141.99':139
- '81.##6.183.3':139
- '81.##6.37.63':139
- '81.##6.128.87':139
- '81.##6.6.228':139
- '81.#06.87.6':139
- '81.##6.97.90':139
- '81.##6.144.1':139
- '81.##6.44.144':139
- '81.##6.23.141':139
- '81.#06.1.12':139
- '81.##6.253.148':139
- '81.##6.34.213':139
- '81.##6.67.218':139
- '81.##6.162.186':139
- '81.##6.21.83':139
- '81.##6.158.64':139
- '81.##6.22.177':139
- '81.##6.91.161':139
- '81.##6.39.225':139
- '81.##6.114.244':139
- '81.##6.127.111':139
- '81.##6.176.217':139
- '81.##6.217.91':139
- '81.##6.243.142':139
- '81.##6.222.176':139
- '81.##6.40.87':139
- '81.##6.50.115':139
- '81.##6.224.222':139
- '81.##6.16.111':139
- '81.##6.118.224':139
- '81.##6.208.210':139
- '81.##6.149.74':139
- '81.##6.136.0':139
- '81.##6.73.86':139
- '81.##6.142.54':139
- '81.##6.25.226':139
- '81.##6.16.37':139
- '81.##6.107.142':139
- '81.##6.4.108':139
- '81.##6.88.66':139
- '81.##6.190.22':139
- '81.##6.23.103':139
- '81.##6.196.31':139
- '81.##6.23.78':139
- '81.##6.125.75':139
- '81.##6.87.166':139
- '81.##6.173.90':139
- '81.##6.165.196':139
- '81.##6.254.78':139
- '81.##6.19.247':445
- '81.##6.167.237':445
- '81.##6.15.237':445
- '81.##6.178.228':445
- '81.##6.237.232':445
- '81.##6.242.210':445
- '81.##6.159.121':445
- '81.##6.211.27':445
- '81.##6.178.10':445
- '81.##6.141.99':445
- '81.##6.183.3':445
- '81.#06.39.3':445
- '81.##6.144.1':445
- '81.##6.44.144':445
- '81.##6.52.132':445
- '81.##6.181.228':445
- '81.##6.166.183':445
- '81.##6.0.240':445
- '81.##6.3.149':445
- '81.##6.129.31':445
- '81.##6.242.210':9988
- '81.##6.76.21':9988
- '81.##6.52.132':9988
- '81.#06.39.3':9988
- '81.##6.101.129':9988
- '81.##6.181.33':139
- '81.##6.91.180':139
- '81.##6.107.199':139
- '81.##6.40.180':139
- '81.##6.144.1':9988
- '81.##6.113.239':445
- '81.##6.199.223':445
- '81.##6.76.21':445
- '81.##6.101.129':445
- '81.##6.108.63':9988
- '81.##6.239.30':9988
- '81.##6.37.63':9988
- '81.##6.37.138':9988
- '81.##6.37.226':9988