Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#35.162.166':445
- '20#.#35.120.172':445
- '20#.#35.201.27':445
- '20#.#35.239.247':445
- '20#.#35.159.38':445
- '20#.#35.156.141':445
- '20#.#35.174.156':445
- '20#.#35.186.154':445
- '20#.#35.58.186':445
- '20#.#35.186.154':139
- '20#.#35.58.186':139
- '20#.#35.120.172':139
- '20#.#35.159.38':139
- '20#.#35.156.141':139
- '20#.#35.41.175':445
- '20#.#35.241.41':445
- '20#.#35.174.156':139
- '20#.#35.10.84':139
- '20#.#35.90.53':139
- '20#.#35.148.0':139
- '20#.#35.203.58':139
- '20#.#35.4.75':139
- '20#.#35.202.164':139
- '20#.#35.61.18':139
- '20#.#35.16.61':139
- '20#.#35.210.246':139
- '20#.#35.7.192':139
- '20#.#35.114.251':139
- '20#.#35.255.170':139
- '20#.#35.10.84':445
- '20#.#35.253.0':139
- '20#.#35.221.132':139
- '20#.#35.133.20':139
- '20#.#35.47.188':139
- '20#.#35.9.48':139
- '20#.#35.212.118':139
- '20#.#35.91.10':445
- '20#.#35.108.104':445
- '20#.#35.20.41':445
- '20#.#35.14.164':445
- '20#.#35.60.194':445
- '20#.#35.237.14':445
- '20#.#35.24.129':445
- '20#.#35.27.3':445
- '20#.#35.15.62':445
- '20#.#35.90.49':445
- '20#.#35.90.131':445
- '20#.#35.142.162':445
- '20#.#35.49.143':445
- '20#.#35.74.146':445
- '20#.#35.171.204':445
- '20#.#35.127.10':445
- '20#.#35.13.127':445
- '20#.#35.127.194':445
- '20#.#35.180.29':445
- '20#.#35.175.69':445
- '20#.#35.81.243':445
- '20#.#35.38.13':445
- '20#.#35.41.175':139
- '20#.#35.239.247':139
- '20#.#35.162.166':139
- '20#.#35.241.41':139
- '20#.#35.201.27':139
- '20#.#35.87.3':445
- '20#.#35.79.202':445
- '20#.#35.227.121':445
- '20#.#35.146.227':445
- '20#.#35.129.132':445
- '20#.#35.25.187':445
- '20#.#35.109.120':445
- '20#.#35.137.11':445
- '20#.#35.233.187':445
- '20#.#35.114.154':139
- '20#.#35.178.78':445
- '20#.#35.91.59':445
- '20#.#35.179.109':445
- '20#.#35.21.112':445
- '20#.#35.189.229':445
- '20#.#35.98.92':445
- '20#.#35.115.55':445
- '20#.#35.157.169':445
- '20#.#35.98.42':445
- '20#.#35.114.154':445
- '20#.#35.133.123':445
- '20#.#35.61.18':445
- '20#.#35.16.61':445
- '20#.#35.53.219':445
- '20#.#35.110.3':445
- '20#.#35.155.62':445
- '20#.#35.37.236':445
- '20#.#35.51.72':445
- '20#.#35.44.18':139
- '20#.#35.212.201':139
- '20#.#35.87.130':139
- '20#.#35.142.252':139
- '20#.#35.80.159':139
- '20#.#35.50.204':139
- '20#.#35.26.234':139
- '20#.#35.17.109':139
- '20#.#35.90.123':139
- '20#.#35.27.175':445
- '20#.#35.197.27':445
- '20#.#35.71.220':445
- '20#.#35.174.212':445
- '20#.#35.252.196':445
- '20#.#35.157.134':139
- '20#.#35.56.157':139
- '20#.#35.45.179':445
- '20#.#35.134.101':139
- '20#.#35.157.169':139
- '20#.#35.98.42':139
- '20#.#35.91.59':139
- '20#.#35.189.229':139
- '20#.#35.98.92':139
- '20#.#35.174.212':139
- '20#.#35.27.175':139
- '20#.#35.115.55':139
- '20#.#35.71.220':139
- '20#.#35.37.236':139
- '20#.#35.51.72':139
- '20#.#35.133.123':139
- '20#.#35.53.219':139
- '20#.#35.110.3':139
- '20#.#35.21.112':139
- '20#.#35.178.78':139
- '20#.#35.155.62':139
- '20#.#35.179.109':139
- '20#.#35.203.58':445
- '20#.#35.4.75':445
- '20#.#35.133.20':445
- '20#.#35.47.188':445
- '20#.#35.90.53':445
- '20#.#35.210.246':445
- '20#.#35.7.192':445
- '20#.#35.148.0':445
- '20#.#35.202.164':445
- '20#.#35.45.179':139
- '20#.#35.253.0':445
- '20#.#35.197.27':139
- '20#.#35.252.196':139
- '20#.#35.114.251':445
- '20#.#35.9.48':445
- '20#.#35.212.118':445
- '20#.#35.255.170':445
- '20#.#35.221.132':445
- '20#.#35.163.72':445
- '20#.#35.77.54':139
- '20#.#35.73.14':139
- '20#.#35.181.170':139
- '20#.#35.77.4':139
- '20#.#35.116.23':139
- '20#.#35.72.242':445
- '20#.#35.235.222':445
- '20#.#35.106.105':139
- '20#.#35.124.163':445
- '20#.#35.146.87':139
- '20#.#35.137.110':139
- '20#.#35.140.146':139
- '20#.#35.245.168':139
- '20#.#35.39.35':139
- '20#.#35.89.17':139
- '20#.#35.155.52':139
- '20#.#35.214.214':139
- '20#.#35.100.237':139
- '20#.#35.90.221':445
- '20#.#35.122.31':445
- '20#.#35.131.24':445
- '20#.#35.58.48':445
- '20#.#35.227.235':445
- '20#.#35.170.49':445
- '20#.#35.168.200':445
- '20#.#35.210.227':445
- '20#.#35.195.61':445
- '20#.#35.68.196':445
- '20#.#35.38.73':445
- '20#.#35.171.218':445
- '20#.#35.197.11':445
- '20#.#35.102.78':445
- '20#.#35.229.26':445
- '20#.#35.19.23':445
- '20#.#35.144.3':445
- '20#.#35.216.21':445
- '20#.#35.19.23':139
- '20#.#35.131.24':139
- '20#.#35.216.21':139
- '20#.#35.229.26':139
- '20#.#35.58.48':139
- '20#.#35.227.235':139
- '20#.#35.210.227':139
- '20#.#35.90.221':139
- '20#.#35.122.31':139
- '20#.#35.171.218':139
- '20#.#35.235.222':139
- '20#.#35.124.163':139
- '20#.#35.72.242':139
- '20#.#35.197.11':139
- '20#.#35.102.78':139
- '20#.#35.144.3':139
- '20#.#35.68.196':139
- '20#.#35.38.73':139
- '20#.#35.85.56':139
- '20#.#35.23.24':139
- '20#.#35.37.107':139
- '20#.#35.249.108':139
- '20#.#35.83.61':139
- '20#.#35.136.128':139
- '20#.#35.14.129':139
- '20#.#35.194.151':139
- '20#.#35.75.7':139
- '20#.#35.168.200':139
- '20#.#35.169.246':139
- '20#.#35.195.61':139
- '20#.#35.170.49':139
- '20#.#35.58.247':139
- '20#.#35.63.174':139
- '20#.#35.204.244':139
- '20#.#35.231.142':139
- '20#.#35.225.230':139
- '20#.#35.169.246':445
- '20#.#35.171.204':139
- '20#.#35.127.10':139
- '20#.#35.13.127':139
- '20#.#35.127.194':139
- '20#.#35.20.41':139
- '20#.#35.108.104':139
- '20#.#35.60.194':139
- '20#.#35.14.164':139
- '20#.#35.91.10':139
- '20#.#35.40.83':139
- '20#.#35.163.72':139
- '20#.#35.89.17':9988
- '20#.#35.106.105':9988
- '20#.#35.142.162':139
- '20#.#35.90.131':139
- '20#.#35.74.146':139
- '20#.#35.49.143':139
- '20#.#35.90.49':139
- '20#.#35.25.187':139
- '20#.#35.109.120':139
- '20#.#35.137.11':139
- '20#.#35.233.187':139
- '20#.#35.81.243':139
- '20#.#35.175.69':139
- '20#.#35.40.83':445
- '20#.#35.38.13':139
- '20#.#35.180.29':139
- '20#.#35.237.14':139
- '20#.#35.24.129':139
- '20#.#35.27.3':139
- '20#.#35.15.62':139
- '20#.#35.227.121':139
- '20#.#35.79.202':139
- '20#.#35.129.132':139
- '20#.#35.146.227':139
- '20#.#35.87.3':139
- '20#.#35.75.7':445
- '20#.#35.136.128':445
- '20#.#35.83.61':445
- '20#.#35.194.151':445
- '20#.#35.14.129':445
- '20#.#35.146.87':445
- '20#.#35.137.110':445
- '20#.#35.140.146':445
- '20#.#35.245.168':445
- '20#.#35.225.230':445
- '20#.#35.63.174':445
- '20#.#35.58.247':445
- '20#.#35.231.142':445
- '20#.#35.204.244':445
- '20#.#35.85.56':445
- '20#.#35.23.24':445
- '20#.#35.37.107':445
- '20#.#35.249.108':445
- '20#.#35.124.163':9988
- '20#.#35.58.48':9988
- '20#.#35.116.23':445
- '20#.#35.106.105':445
- '20#.#35.131.24':9988
- '20#.#35.168.200':9988
- '20#.#35.225.230':9988
- '20#.#35.122.31':9988
- '20#.#35.170.49':9988
- '20#.#35.100.237':445
- '20#.#35.89.17':445
- '20#.#35.39.35':445
- '20#.#35.214.214':445
- '20#.#35.155.52':445
- '20#.#35.77.54':445
- '20#.#35.73.14':445
- '20#.#35.181.170':445
- '20#.#35.77.4':445