Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#01.142.55':445
- '22#.#01.172.69':445
- '22#.#01.228.89':445
- '22#.#01.131.164':445
- '22#.#01.201.22':445
- '22#.#01.60.201':445
- '22#.#01.30.172':445
- '22#.#01.251.178':445
- '22#.#01.140.4':445
- '22#.#01.129.126':445
- '22#.#01.139.221':445
- '22#.#01.90.194':445
- '22#.#01.193.0':445
- '22#.#01.89.192':445
- '22#.#01.189.251':445
- '22#.#01.221.234':445
- '22#.#01.128.148':445
- '22#.#01.90.196':445
- '22#.#01.34.252':445
- '22#.#01.181.120':445
- '22#.#01.39.146':445
- '22#.#01.35.200':445
- '22#.#01.133.7':445
- '22#.#01.42.50':445
- '22#.#01.51.193':445
- '22#.#01.82.216':445
- '22#.#01.253.56':445
- '22#.#01.47.87':445
- '22#.#01.21.52':445
- '22#.#01.211.20':445
- '22#.#01.122.195':445
- '22#.#01.165.23':445
- '22#.#01.218.243':445
- '22#.#01.133.7':139
- '22#.#01.42.50':139
- '22#.#01.128.148':139
- '22#.#01.90.196':139
- '22#.#01.196.149':139
- '22#.#01.28.47':139
- '22#.#01.39.146':139
- '22#.#01.35.200':139
- '22#.#01.122.195':139
- '22#.#01.165.23':139
- '22#.#01.51.193':139
- '22#.#01.82.216':139
- '22#.#01.34.252':139
- '22#.#01.181.120':139
- '22#.#01.21.52':139
- '22#.#01.211.20':139
- '22#.#01.19.56':139
- '22#.#01.4.56':139
- '22#.#01.198.247':139
- '22#.#01.170.175':139
- '22#.#01.111.184':445
- '22#.#01.61.104':445
- '22#.#01.112.112':445
- '22#.#01.184.111':445
- '22#.#01.217.174':139
- '22#.#01.71.70':139
- '22#.#01.114.49':139
- '22#.#01.210.77':139
- '22#.#01.151.46':139
- '22#.#01.159.152':139
- '22#.#01.253.73':139
- '22#.#01.46.253':139
- '22#.#01.132.2':139
- '22#.#01.99.118':139
- '22#.#01.14.122':139
- '22#.#01.121.231':139
- '22#.#01.169.89':139
- '22#.#01.16.202':139
- '22#.#01.66.99':139
- '22#.#01.90.66':139
- '22#.#01.130.137':139
- '22#.#01.219.49':139
- '22#.#01.183.135':139
- '22#.#01.3.182':139
- '22#.#01.20.142':139
- '22#.#01.28.191':139
- '22#.#01.148.49':139
- '22#.#01.173.147':139
- '22#.#01.178.236':139
- '22#.#01.44.49':139
- '22#.#01.167.57':139
- '22#.#01.254.190':139
- '22#.#01.33.124':139
- '22#.#01.1.77':139
- '22#.#01.8.109':139
- '22#.#01.28.198':139
- '22#.#01.11.91':139
- '22#.#01.166.225':139
- '22#.#01.65.151':139
- '22#.#01.131.116':139
- '22#.#01.11.174':139
- '22#.#01.101.68':139
- '22#.#01.151.160':139
- '22#.#01.172.151':139
- '22#.#01.135.30':139
- '22#.#01.198.247':445
- '22#.#01.170.175':445
- '22#.#01.151.46':445
- '22#.#01.159.152':445
- '22#.#01.19.111':139
- '22#.#01.162.102':139
- '22#.#01.19.56':445
- '22#.#01.4.56':445
- '22#.#01.114.49':445
- '22#.#01.210.77':445
- '22#.#01.196.149':445
- '22#.#01.28.47':445
- '22#.#01.253.73':445
- '22#.#01.46.253':445
- '22#.#01.217.174':445
- '22#.#01.71.70':445
- '22#.#01.5.234':139
- '22#.#01.33.233':139
- '22#.#01.176.21':139
- '22#.#01.119.211':139
- '22#.#01.107.230':139
- '22#.#01.91.32':139
- '22#.#01.218.33':139
- '22#.#01.29.74':139
- '22#.#01.167.76':139
- '22#.#01.219.216':139
- '22#.#01.166.165':139
- '22#.#01.114.196':139
- '22#.#01.54.228':139
- '22#.#01.77.8':139
- '22#.#01.38.27':139
- '22#.#01.117.57':139
- '22#.#01.218.190':139
- '22#.#01.179.162':139
- '22#.#01.82.186':139
- '22#.#01.196.247':139
- '22#.#01.171.53':139
- '22#.#01.22.159':139
- '22#.#01.111.179':139
- '22#.#01.62.249':139
- '22#.#01.135.192':139
- '22#.#01.134.184':139
- '22#.#01.59.151':139
- '22#.#01.176.147':139
- '22#.#01.97.183':139
- '22#.#01.112.78':139
- '22#.#01.234.29':139
- '22#.#01.244.17':139
- '22#.#01.0.151':445
- '22#.#01.7.63':445
- '22#.#01.64.229':445
- '22#.#01.237.62':445
- '22#.#01.58.36':445
- '22#.#01.2.59':445
- '22#.#01.14.69':445
- '22#.#01.53.166':445
- '22#.#01.80.209':445
- '22#.#01.0.206':445
- '22#.#01.4.248':139
- '22#.#01.11.84':139
- '22#.#01.198.139':445
- '22#.#01.152.20':445
- '22#.#01.62.61':445
- '22#.#01.45.0':445
- '22#.#01.188.136':139
- '22#.#01.14.69':139
- '22#.#01.53.166':139
- '22#.#01.0.151':139
- '22#.#01.7.63':139
- '22#.#01.96.54':139
- '22#.#01.70.3':139
- '22#.#01.58.36':139
- '22#.#01.2.59':139
- '22#.#01.198.139':139
- '22#.#01.62.61':139
- '22#.#01.64.229':139
- '22#.#01.152.20':139
- '22#.#01.80.209':139
- '22#.#01.45.0':139
- '22#.#01.237.62':139
- '22#.#01.0.206':139
- '22#.#01.59.41':139
- '22#.#01.73.187':139
- '22#.#01.241.43':139
- '22#.#01.243.240':139
- '22#.#01.59.85':139
- '22#.#01.138.194':139
- '22#.#01.29.112':139
- '22#.#01.3.117':139
- '22#.#01.163.74':139
- '22#.#01.95.163':139
- '22#.#01.191.83':139
- '22#.#01.142.3':139
- '22#.#01.5.109':139
- '22#.#01.3.72':139
- '22#.#01.86.190':139
- '22#.#01.70.97':139
- '22#.#01.184.111':139
- '22#.#01.111.184':139
- '22#.#01.134.184':9988
- '22#.#01.112.112':139
- '22#.#01.139.221':139
- '22#.#01.90.194':139
- '22#.#01.61.104':139
- '22#.#01.218.243':139
- '22#.#01.4.248':445
- '22#.#01.11.84':445
- '22#.#01.171.53':445
- '22#.#01.22.159':445
- '22#.#01.45.0':9988
- '22#.#01.237.62':9988
- '22#.#01.163.74':9988
- '22#.#01.70.3':9988
- '22#.#01.30.172':139
- '22#.#01.251.178':139
- '22#.#01.142.55':139
- '22#.#01.172.69':139
- '22#.#01.253.56':139
- '22#.#01.47.87':139
- '22#.#01.201.22':139
- '22#.#01.60.201':139
- '22#.#01.189.251':139
- '22#.#01.221.234':139
- '22#.#01.140.4':139
- '22#.#01.129.126':139
- '22#.#01.228.89':139
- '22#.#01.131.164':139
- '22#.#01.193.0':139
- '22#.#01.89.192':139
- '22#.#01.62.249':445
- '22#.#01.241.43':445
- '22#.#01.243.240':445
- '22#.#01.5.109':445
- '22#.#01.3.72':445
- '22#.#01.29.112':445
- '22#.#01.3.117':445
- '22#.#01.59.41':445
- '22#.#01.73.187':445
- '22#.#01.191.83':445
- '22#.#01.142.3':445
- '22#.#01.96.54':445
- '22#.#01.70.3':445
- '22#.#01.86.190':445
- '22#.#01.70.97':445
- '22#.#01.163.74':445
- '22#.#01.95.163':445
- '22#.#01.112.78':445
- '22#.#01.82.186':445
- '22#.#01.244.17':445
- '22#.#01.97.183':445
- '22#.#01.179.162':445
- '22#.#01.111.179':445
- '22#.#01.196.247':445
- '22#.#01.218.190':445
- '22#.#01.188.136':445
- '22#.#01.59.151':445
- '22#.#01.59.85':445
- '22#.#01.138.194':445
- '22#.#01.135.192':445
- '22#.#01.234.29':445
- '22#.#01.176.147':445
- '22#.#01.134.184':445