Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#25.14.184':139
- '22#.#25.93.15':139
- '22#.#25.184.42':139
- '22#.#25.85.31':139
- '22#.#25.54.242':139
- '22#.#25.32.10':139
- '22#.#25.157.165':139
- '22#.#25.85.21':139
- '22#.#25.20.33':139
- '22#.#25.74.129':139
- '22#.#25.33.140':139
- '22#.#25.252.102':139
- '22#.#25.40.39':139
- '22#.#25.164.81':139
- '22#.#25.175.167':445
- '22#.#25.60.223':139
- '22#.#25.94.69':139
- '22#.#25.122.81':139
- '22#.#25.248.127':139
- '22#.#25.59.181':139
- '22#.#25.113.186':139
- '22#.#25.60.223':445
- '22#.#25.164.81':445
- '22#.#25.18.74':139
- '22#.#25.61.166':139
- '22#.#25.76.62':139
- '22#.#25.113.186':445
- '22#.#25.248.127':445
- '22#.#25.59.181':445
- '22#.#25.252.102':445
- '22#.#25.40.39':445
- '22#.#25.82.214':139
- '22#.#25.30.200':139
- '22#.#25.135.203':139
- '22#.#25.172.169':139
- '22#.#25.222.156':139
- '22#.#25.7.238':139
- '22#.#25.129.79':139
- '22#.#25.253.144':139
- '22#.#25.83.149':139
- '22#.#25.152.135':139
- '22#.#25.149.152':139
- '22#.#25.251.151':139
- '22#.#25.160.62':139
- '22#.#25.170.161':139
- '22#.#25.175.120':139
- '22#.#25.40.8':139
- '22#.#25.162.44':139
- '22#.#25.155.48':139
- '22#.#25.33.248':139
- '22#.#25.35.94':139
- '22#.#25.132.222':139
- '22#.#25.188.239':139
- '22#.#25.109.11':445
- '22#.#25.244.10':445
- '22#.#25.232.223':445
- '22#.#25.52.172':445
- '22#.#25.16.163':445
- '22#.#25.199.153':139
- '22#.#25.20.76':139
- '22#.#25.253.226':139
- '22#.#25.45.145':445
- '22#.#25.185.254':445
- '22#.#25.132.222':445
- '22#.#25.162.44':445
- '22#.#25.35.94':445
- '22#.#25.170.161':445
- '22#.#25.160.62':445
- '22#.#25.166.235':445
- '22#.#25.15.228':445
- '22#.#25.60.182':445
- '22#.#25.33.248':445
- '22#.#25.155.48':445
- '22#.#25.251.151':445
- '22#.#25.175.167':139
- '22#.#25.253.226':445
- '22#.#25.15.228':139
- '22#.#25.60.182':139
- '22#.#25.166.235':139
- '22#.#25.175.120':445
- '22#.#25.40.8':445
- '22#.#25.188.239':445
- '22#.#25.199.153':445
- '22#.#25.20.76':445
- '22#.#25.94.69':445
- '22#.#25.95.27':445
- '22#.#25.204.243':445
- '22#.#25.26.231':445
- '22#.#25.156.149':445
- '22#.#25.231.156':445
- '22#.#25.202.92':139
- '22#.#25.27.90':139
- '22#.#25.13.246':139
- '22#.#25.123.146':445
- '22#.#25.40.186':445
- '22#.#25.36.126':445
- '22#.#25.9.166':445
- '22#.#25.245.17':445
- '22#.#25.20.91':445
- '22#.#25.40.186':139
- '22#.#25.2.36':445
- '22#.#25.126.223':445
- '22#.#25.146.227':445
- '22#.#25.95.54':445
- '22#.#25.234.165':445
- '22#.#25.152.133':445
- '22#.#25.14.63':139
- '22#.#25.12.14':139
- '22#.#25.124.42':139
- '22#.#25.193.98':139
- '22#.#25.148.27':139
- '22#.#25.9.52':139
- '22#.#25.60.155':139
- '22#.#25.121.113':139
- '22#.#25.44.73':139
- '22#.#25.16.186':139
- '22#.#25.31.80':139
- '22#.#25.157.33':139
- '22#.#25.68.25':139
- '22#.#25.30.29':139
- '22#.#25.15.169':139
- '22#.#25.133.63':139
- '22#.#25.216.41':139
- '22#.#25.172.59':139
- '22#.#25.218.70':139
- '22#.#25.249.67':139
- '22#.#25.105.167':139
- '22#.#25.172.169':445
- '22#.#25.30.200':445
- '22#.#25.7.238':445
- '22#.#25.85.21':445
- '22#.#25.74.129':445
- '22#.#25.82.214':445
- '22#.#25.135.203':445
- '22#.#25.253.144':445
- '22#.#25.129.79':445
- '22#.#25.61.166':445
- '22#.#25.32.10':445
- '22#.#25.54.242':445
- '22#.#25.85.31':445
- '22#.#25.14.184':445
- '22#.#25.122.81':445
- '22#.#25.33.140':445
- '22#.#25.20.33':445
- '22#.#25.222.156':445
- '22#.#25.157.165':445
- '22#.#25.184.42':445
- '22#.#25.93.15':445
- '22#.#25.36.126':139
- '22#.#25.156.149':139
- '22#.#25.146.227':139
- '22#.#25.95.54':139
- '22#.#25.126.223':139
- '22#.#25.204.243':139
- '22#.#25.123.146':139
- '22#.#25.95.27':139
- '22#.#25.231.156':139
- '22#.#25.26.231':139
- '22#.#25.152.133':139
- '22#.#25.76.62':445
- '22#.#25.18.74':445
- '22#.#25.152.135':445
- '22#.#25.149.152':445
- '22#.#25.83.149':445
- '22#.#25.234.165':139
- '22#.#25.245.17':139
- '22#.#25.9.166':139
- '22#.#25.2.36':139
- '22#.#25.20.91':139
- '22#.#25.45.38':445
- '22#.#25.181.77':445
- '22#.#25.106.36':445
- '22#.#25.78.62':445
- '22#.#25.130.62':445
- '22#.#25.138.72':445
- '22#.#25.171.139':445
- '22#.#25.60.134':445
- '22#.#25.189.224':445
- '22#.#25.59.27':445
- '22#.#25.21.251':445
- '22#.#25.121.114':445
- '22#.#25.16.189':139
- '22#.#25.104.24':139
- '22#.#25.121.94':139
- '22#.#25.118.177':139
- '22#.#25.94.118':139
- '22#.#25.138.250':139
- '22#.#25.224.244':445
- '22#.#25.121.244':139
- '22#.#25.214.172':139
- '22#.#25.117.96':139
- '22#.#25.88.254':445
- '22#.#25.247.155':445
- '22#.#25.60.219':445
- '22#.#25.147.165':445
- '22#.#25.181.106':445
- '22#.#25.216.40':445
- '22#.#25.150.246':445
- '22#.#25.52.61':445
- '22#.#25.163.108':445
- '22#.#25.21.54':445
- '22#.#25.200.57':445
- '22#.#25.208.107':445
- '22#.#25.201.150':445
- '22#.#25.230.249':445
- '22#.#25.68.125':445
- '22#.#25.222.3':445
- '22#.#25.48.220':445
- '22#.#25.14.37':445
- '22#.#25.139.76':445
- '22#.#25.31.191':445
- '22#.#25.129.247':445
- '22#.#25.230.249':139
- '22#.#25.208.107':139
- '22#.#25.222.3':139
- '22#.#25.60.134':139
- '22#.#25.68.125':139
- '22#.#25.139.76':139
- '22#.#25.48.220':139
- '22#.#25.129.247':139
- '22#.#25.201.150':139
- '22#.#25.31.191':139
- '22#.#25.171.139':139
- '22#.#25.138.72':139
- '22#.#25.78.62':139
- '22#.#25.130.62':139
- '22#.#25.121.114':139
- '22#.#25.224.244':139
- '22#.#25.21.251':139
- '22#.#25.189.224':139
- '22#.#25.59.27':139
- '22#.#25.181.77':139
- '22#.#25.106.36':139
- '22#.#25.12.150':139
- '22#.#25.162.207':139
- '22#.#25.84.218':139
- '22#.#25.150.246':139
- '22#.#25.111.191':139
- '22#.#25.53.126':139
- '22#.#25.43.103':139
- '22#.#25.211.14':139
- '22#.#25.206.88':139
- '22#.#25.7.172':139
- '22#.#25.216.40':139
- '22#.#25.181.106':139
- '22#.#25.60.219':139
- '22#.#25.147.165':139
- '22#.#25.14.37':139
- '22#.#25.200.57':139
- '22#.#25.21.54':139
- '22#.#25.52.61':139
- '22#.#25.163.108':139
- '22#.#25.88.254':139
- '22#.#25.247.155':139
- '22#.#25.111.191':445
- '22#.#25.244.10':139
- '22#.#25.45.145':139
- '22#.#25.109.11':139
- '22#.#25.52.172':139
- '22#.#25.16.163':139
- '22#.#25.18.129':445
- '22#.#25.129.109':445
- '22#.#25.39.18':445
- '22#.#25.185.254':139
- '22#.#25.12.122':445
- '22#.#25.232.223':139
- '22#.#25.151.204':139
- '22#.#25.131.151':139
- '22#.#25.204.208':139
- '22#.#25.52.186':139
- '22#.#25.208.108':139
- '22#.#25.37.68':139
- '22#.#25.45.38':139
- '22#.#25.67.212':139
- '22#.#25.37.233':139
- '22#.#25.50.238':139
- '22#.#25.10.170':445
- '22#.#25.38.106':445
- '22#.#25.151.204':445
- '22#.#25.50.238':445
- '22#.#25.131.151':445
- '22#.#25.67.212':445
- '22#.#25.37.68':445
- '22#.#25.149.77':445
- '22#.#25.204.208':445
- '22#.#25.57.56':445
- '22#.#25.37.233':445
- '22#.#25.39.104':445
- '22#.#25.67.46':445
- '22#.#25.81.103':445
- '22#.#25.153.156':445
- '22#.#25.156.126':445
- '22#.#25.52.186':445
- '22#.#25.169.201':445
- '22#.#25.214.36':445
- '22#.#25.1.98':445
- '22#.#25.208.108':445
- '22#.#25.117.96':445
- '22#.#25.121.244':445
- '22#.#25.214.172':445
- '22#.#25.16.189':445
- '22#.#25.104.24':445
- '22#.#25.21.251':9988
- '22#.#25.189.224':9988
- '22#.#25.106.36':9988
- '22#.#25.138.250':445
- '22#.#25.121.114':9988
- '22#.#25.121.94':445
- '22#.#25.206.88':445
- '22#.#25.7.172':445
- '22#.#25.162.207':445
- '22#.#25.84.218':445
- '22#.#25.12.150':445
- '22#.#25.118.177':445
- '22#.#25.94.118':445
- '22#.#25.43.103':445
- '22#.#25.211.14':445
- '22#.#25.53.126':445
- '22#.#25.67.46':139
- '22#.#25.149.77':139
- '22#.#25.57.56':139
- '22#.#25.81.103':139
- '22#.#25.39.104':139
- '22#.#25.10.170':139
- '22#.#25.214.36':139
- '22#.#25.1.98':139
- '22#.#25.38.106':139
- '22#.#25.169.201':139
- '22#.#25.156.126':139
- '22#.#25.208.107':9988
- '22#.#25.31.191':9988
- '22#.#25.68.125':9988
- '22#.#25.171.139':9988
- '22#.#25.60.134':9988
- '22#.#25.12.122':139
- '22#.#25.153.156':139
- '22#.#25.39.18':139
- '22#.#25.129.109':139
- '22#.#25.18.129':139