Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#25.26.172':445
- '22#.#25.32.66':445
- '22#.#25.177.151':445
- '22#.#25.3.107':445
- '22#.#25.49.32':445
- '22#.#25.43.119':445
- '22#.#25.195.57':445
- '22#.#25.153.137':445
- '22#.#25.119.153':445
- '22#.#25.145.23':445
- '22#.#25.10.228':445
- '22#.#25.187.1':445
- '22#.#25.49.155':445
- '22#.#25.195.203':445
- '22#.#25.3.191':445
- '22#.#25.35.152':445
- '22#.#25.18.26':445
- '22#.#25.69.50':445
- '22#.#25.21.225':139
- '22#.#25.208.119':139
- '22#.#25.64.118':139
- '22#.#25.89.126':139
- '22#.#25.138.63':139
- '22#.#25.101.55':139
- '22#.#25.112.122':139
- '22#.#25.30.86':139
- '22#.#25.39.229':139
- '22#.#25.87.239':445
- '22#.#25.19.6':445
- '22#.#25.245.58':445
- '22#.#25.176.244':445
- '22#.#25.110.222':445
- '22#.#25.11.31':445
- '22#.#25.118.223':445
- '22#.#25.11.31':139
- '22#.#25.118.223':139
- '22#.#25.47.191':445
- '22#.#25.71.58':445
- '22#.#25.110.222':139
- '22#.#25.83.156':445
- '22#.#25.156.91':445
- '22#.#25.246.24':445
- '22#.#25.157.232':445
- '22#.#25.28.104':445
- '22#.#25.72.220':445
- '22#.#25.119.153':139
- '22#.#25.43.119':139
- '22#.#25.49.32':139
- '22#.#25.153.137':139
- '22#.#25.195.57':139
- '22#.#25.87.239':139
- '22#.#25.19.6':139
- '22#.#25.245.58':139
- '22#.#25.176.244':139
- '22#.#25.92.5':445
- '22#.#25.168.90':445
- '22#.#25.33.148':445
- '22#.#25.128.186':445
- '22#.#25.133.96':445
- '22#.#25.69.11':445
- '22#.#25.1.111':445
- '22#.#25.202.79':445
- '22#.#25.39.203':445
- '22#.#25.114.74':445
- '22#.#25.84.180':445
- '22#.#25.206.43':445
- '22#.#25.14.123':445
- '22#.#25.138.84':445
- '22#.#25.67.188':445
- '22#.#25.13.157':445
- '22#.#25.59.138':445
- '22#.#25.100.60':445
- '22#.#25.49.91':139
- '22#.#25.112.122':445
- '22#.#25.49.91':445
- '22#.#25.30.86':445
- '22#.#25.101.55':445
- '22#.#25.40.164':445
- '22#.#25.204.133':445
- '22#.#25.240.204':445
- '22#.#25.161.243':445
- '22#.#25.88.125':445
- '22#.#25.31.205':139
- '22#.#25.64.118':445
- '22#.#25.39.78':139
- '22#.#25.70.185':139
- '22#.#25.89.126':445
- '22#.#25.138.63':445
- '22#.#25.39.229':445
- '22#.#25.21.225':445
- '22#.#25.208.119':445
- '22#.#25.89.159':445
- '22#.#25.67.163':445
- '22#.#25.183.140':445
- '22#.#25.162.181':445
- '22#.#25.72.174':445
- '22#.#25.44.76':445
- '22#.#25.245.222':445
- '22#.#25.106.168':445
- '22#.#25.67.244':445
- '22#.#25.63.63':445
- '22#.#25.42.183':445
- '22#.#25.31.160':445
- '22#.#25.216.117':445
- '22#.#25.16.218':445
- '22#.#25.14.112':445
- '22#.#25.212.191':445
- '22#.#25.82.216':445
- '22#.#25.111.83':445
- '22#.#25.111.83':139
- '22#.#25.14.112':139
- '22#.#25.16.218':139
- '22#.#25.82.216':139
- '22#.#25.212.191':139
- '22#.#25.89.159':139
- '22#.#25.67.163':139
- '22#.#25.183.140':139
- '22#.#25.162.181':139
- '22#.#25.88.125':139
- '22#.#25.204.133':139
- '22#.#25.40.164':139
- '22#.#25.161.243':139
- '22#.#25.240.204':139
- '22#.#25.63.63':139
- '22#.#25.42.183':139
- '22#.#25.31.160':139
- '22#.#25.216.117':139
- '22#.#25.29.161':139
- '22#.#25.181.26':139
- '22#.#25.112.144':139
- '22#.#25.232.113':139
- '22#.#25.29.196':139
- '22#.#25.229.6':139
- '22#.#25.215.5':139
- '22#.#25.77.172':139
- '22#.#25.6.223':139
- '22#.#25.67.244':139
- '22#.#25.245.222':139
- '22#.#25.72.174':139
- '22#.#25.106.168':139
- '22#.#25.44.76':139
- '22#.#25.122.150':139
- '22#.#25.158.60':139
- '22#.#25.43.32':139
- '22#.#25.151.49':139
- '22#.#25.188.9':139
- '22#.#25.252.146':139
- '22#.#25.128.44':139
- '22#.#25.67.137':139
- '22#.#25.128.159':139
- '22#.#25.132.109':445
- '22#.#25.5.225':445
- '22#.#25.157.202':139
- '22#.#25.53.248':445
- '22#.#25.41.202':139
- '22#.#25.61.253':139
- '22#.#25.148.244':139
- '22#.#25.168.148':139
- '22#.#25.188.160':139
- '22#.#25.198.147':139
- '22#.#25.39.167':139
- '22#.#25.31.215':139
- '22#.#25.73.179':139
- '22#.#25.159.98':445
- '22#.#25.146.27':445
- '22#.#25.90.201':445
- '22#.#25.12.213':445
- '22#.#25.108.135':445
- '22#.#25.163.154':445
- '22#.#25.62.211':445
- '22#.#25.227.11':445
- '22#.#25.116.229':445
- '22#.#25.238.114':445
- '22#.#25.19.239':445
- '22#.#25.43.118':445
- '22#.#25.73.152':445
- '22#.#25.183.20':445
- '22#.#25.47.200':445
- '22#.#25.44.91':445
- '22#.#25.127.183':445
- '22#.#25.126.127':445
- '22#.#25.44.91':139
- '22#.#25.90.201':139
- '22#.#25.126.127':139
- '22#.#25.47.200':139
- '22#.#25.12.213':139
- '22#.#25.108.135':139
- '22#.#25.227.11':139
- '22#.#25.159.98':139
- '22#.#25.146.27':139
- '22#.#25.43.118':139
- '22#.#25.53.248':139
- '22#.#25.73.152':139
- '22#.#25.132.109':139
- '22#.#25.5.225':139
- '22#.#25.183.20':139
- '22#.#25.127.183':139
- '22#.#25.238.114':139
- '22#.#25.19.239':139
- '22#.#25.33.21':139
- '22#.#25.5.109':139
- '22#.#25.63.70':139
- '22#.#25.167.62':139
- '22#.#25.44.5':139
- '22#.#25.87.126':139
- '22#.#25.245.45':139
- '22#.#25.171.44':139
- '22#.#25.104.171':139
- '22#.#25.62.211':139
- '22#.#25.62.120':139
- '22#.#25.116.229':139
- '22#.#25.163.154':139
- '22#.#25.108.219':139
- '22#.#25.11.141':139
- '22#.#25.69.238':139
- '22#.#25.202.222':139
- '22#.#25.72.109':139
- '22#.#25.62.120':445
- '22#.#25.100.60':139
- '22#.#25.67.188':139
- '22#.#25.138.84':139
- '22#.#25.59.138':139
- '22#.#25.33.148':139
- '22#.#25.128.186':139
- '22#.#25.168.90':139
- '22#.#25.13.157':139
- '22#.#25.92.5':139
- '22#.#25.28.104':139
- '22#.#25.246.24':139
- '22#.#25.156.91':139
- '22#.#25.72.220':139
- '22#.#25.157.232':139
- '22#.#25.14.123':139
- '22#.#25.84.180':139
- '22#.#25.206.43':139
- '22#.#25.114.74':139
- '22#.#25.69.50':139
- '22#.#25.3.191':139
- '22#.#25.195.203':139
- '22#.#25.18.26':139
- '22#.#25.35.152':139
- '22#.#25.26.172':139
- '22#.#25.32.66':139
- '22#.#25.177.151':139
- '22#.#25.3.107':139
- '22#.#25.39.203':139
- '22#.#25.69.11':139
- '22#.#25.133.96':139
- '22#.#25.202.79':139
- '22#.#25.1.111':139
- '22#.#25.145.23':139
- '22#.#25.10.228':139
- '22#.#25.187.1':139
- '22#.#25.49.155':139
- '22#.#25.104.171':445
- '22#.#25.87.126':445
- '22#.#25.44.5':445
- '22#.#25.171.44':445
- '22#.#25.245.45':445
- '22#.#25.41.202':445
- '22#.#25.61.253':445
- '22#.#25.148.244':445
- '22#.#25.168.148':445
- '22#.#25.72.109':445
- '22#.#25.11.141':445
- '22#.#25.108.219':445
- '22#.#25.202.222':445
- '22#.#25.69.238':445
- '22#.#25.33.21':445
- '22#.#25.5.109':445
- '22#.#25.63.70':445
- '22#.#25.167.62':445
- '22#.#25.132.109':9988
- '22#.#25.227.11':9988
- '22#.#25.128.159':445
- '22#.#25.157.202':445
- '22#.#25.69.238':9988
- '22#.#25.83.156':139
- '22#.#25.71.58':139
- '22#.#25.73.179':9988
- '22#.#25.47.191':139
- '22#.#25.73.179':445
- '22#.#25.198.147':445
- '22#.#25.188.160':445
- '22#.#25.31.215':445
- '22#.#25.39.167':445
- '22#.#25.188.9':445
- '22#.#25.252.146':445
- '22#.#25.128.44':445
- '22#.#25.67.137':445