Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- '87.##.155.242':139
- '87.##.32.156':139
- '87.##.210.106':139
- '87.#7.56.54':139
- '87.#7.75.14':139
- '87.#7.7.171':445
- '87.##.155.242':445
- '87.##.75.175':445
- '87.##.210.106':445
- '87.#7.49.15':445
- '87.##.228.206':445
- '87.##.145.191':445
- '87.##.217.23':445
- '87.##.106.126':445
- '87.##.115.142':445
- '87.##.75.175':139
- '87.##.150.205':445
- '87.#7.7.171':139
- '87.#7.56.54':445
- '87.##.121.133':139
- '87.##.80.209':139
- '87.##.44.108':139
- '87.##.96.246':139
- '87.##.52.191':139
- '87.##.45.152':139
- '87.##.225.58':139
- '87.#7.35.99':139
- '87.##.151.176':139
- '87.##.104.214':139
- '87.##.86.116':139
- '87.##.137.190':139
- '87.##.142.193':139
- '87.##.96.163':139
- '87.##.26.149':139
- '87.##.118.202':139
- '87.#7.1.199':139
- '87.##.110.53':139
- '87.##.142.83':445
- '87.##.25.181':445
- '87.##.179.227':445
- '87.##.10.183':445
- '87.##.114.153':445
- '87.##.28.133':445
- '87.##.194.28':445
- '87.##.192.194':445
- '87.##.203.176':445
- '87.##.203.107':445
- '87.##.51.204':445
- '87.##.107.168':445
- '87.##.191.96':445
- '87.##.174.190':445
- '87.##.80.107':445
- '87.##.231.166':445
- '87.##.221.121':445
- '87.#7.48.81':445
- '87.##.156.47':445
- '87.##.85.244':445
- '87.##.95.102':445
- '87.##.20.195':445
- '87.##.69.145':445
- '87.#7.71.95':445
- '87.#7.1.44':445
- '87.##.176.184':445
- '87.##.165.20':445
- '87.##.213.102':445
- '87.##.110.222':445
- '87.##.13.140':445
- '87.##.127.152':445
- '87.##.182.54':445
- '87.##.158.123':445
- '87.##.107.201':445
- '87.#7.48.93':445
- '87.##.184.110':445
- '87.#7.31.48':445
- '87.#7.90.81':445
- '87.##.239.12':445
- '87.##.149.226':445
- '87.#7.91.98':445
- '87.#7.0.217':445
- '87.##.185.147':445
- '87.##.109.110':445
- '87.##.173.127':445
- '87.##.12.133':445
- '87.#7.119.8':445
- '87.##.80.209':445
- '87.##.52.191':445
- '87.##.96.246':445
- '87.##.121.133':445
- '87.#7.35.99':445
- '87.##.151.176':445
- '87.#7.4.31':445
- '87.##.225.58':445
- '87.##.45.152':445
- '87.##.18.244':445
- '87.#7.83.85':139
- '87.##.214.179':139
- '87.##.229.78':445
- '87.##.84.229':445
- '87.##.246.225':139
- '87.#7.11.16':139
- '87.#7.66.38':139
- '87.#7.9.247':139
- '87.#7.9.247':445
- '87.##.176.122':445
- '87.#7.227.1':445
- '87.##.149.11':445
- '87.#7.11.62':445
- '87.#7.86.89':445
- '87.#7.91.79':445
- '87.##.78.201':445
- '87.##.226.102':445
- '87.#7.15.9':445
- '87.##.44.108':445
- '87.##.109.110':139
- '87.##.173.127':139
- '87.##.115.83':139
- '87.#7.119.8':139
- '87.##.18.244':139
- '87.##.194.149':139
- '87.##.176.122':139
- '87.##.149.11':139
- '87.#7.11.62':139
- '87.#7.4.31':139
- '87.#7.0.217':139
- '87.#7.91.98':139
- '87.#7.23.69':139
- '87.##.149.226':139
- '87.##.133.207':139
- '87.##.12.133':139
- '87.##.239.12':139
- '87.##.185.147':139
- '87.#7.227.1':139
- '87.##.104.214':445
- '87.##.86.116':445
- '87.##.142.193':445
- '87.##.137.190':445
- '87.##.96.163':445
- '87.##.26.149':445
- '87.##.118.202':445
- '87.##.110.53':445
- '87.#7.1.199':445
- '87.#7.15.9':139
- '87.#7.91.79':139
- '87.#7.86.89':139
- '87.##.226.102':139
- '87.##.78.201':139
- '87.##.32.156':445
- '87.#7.75.14':445
- '87.##.229.78':139
- '87.##.84.229':139
- '87.#7.18.76':445
- '87.##.141.223':139
- '87.##.247.116':445
- '87.#7.36.34':139
- '87.#7.2.61':139
- '87.##.247.116':139
- '87.##.200.50':445
- '87.##.78.137':445
- '87.#7.71.51':445
- '87.#7.8.72':445
- '87.##.62.228':139
- '87.##.81.226':139
- '87.#7.29.99':139
- '87.##.174.129':139
- '87.#7.67.82':139
- '87.##.149.52':139
- '87.##.45.200':139
- '87.##.188.66':139
- '87.##.37.209':139
- '87.#7.8.179':445
- '87.##.45.248':445
- '87.##.80.211':445
- '87.##.16.141':445
- '87.#7.39.64':445
- '87.#7.26.40':445
- '87.#7.92.22':445
- '87.##.109.122':445
- '87.##.169.53':445
- '87.##.104.247':445
- '87.##.109.170':445
- '87.##.37.208':445
- '87.##.146.175':445
- '87.##.114.125':445
- '87.#7.59.79':445
- '87.#7.25.32':445
- '87.#7.4.167':445
- '87.##.213.124':445
- '87.##.31.215':445
- '87.##.201.137':139
- '87.##.37.208':139
- '87.##.31.215':139
- '87.##.109.170':139
- '87.#7.4.167':139
- '87.#7.39.64':139
- '87.##.16.141':139
- '87.##.169.53':139
- '87.#7.25.32':139
- '87.#7.216.2':139
- '87.##.200.50':139
- '87.##.78.137':139
- '87.#7.71.51':139
- '87.#7.8.72':139
- '87.#7.8.179':139
- '87.##.213.124':139
- '87.#7.59.79':139
- '87.##.146.175':139
- '87.##.114.125':139
- '87.##.80.211':139
- '87.##.101.96':139
- '87.##.16.203':139
- '87.##.252.213':139
- '87.##.124.141':139
- '87.#7.3.101':139
- '87.##.162.203':139
- '87.##.137.163':139
- '87.#7.240.2':139
- '87.##.203.239':139
- '87.##.45.248':139
- '87.##.109.122':139
- '87.##.85.145':139
- '87.#7.26.40':139
- '87.##.104.247':139
- '87.##.92.111':139
- '87.##.246.89':139
- '87.#7.92.22':139
- '87.##.96.130':139
- '87.##.158.123':139
- '87.##.13.140':139
- '87.##.85.244':139
- '87.##.182.54':139
- '87.#7.31.48':139
- '87.#7.90.81':139
- '87.#7.48.93':139
- '87.##.127.152':139
- '87.##.107.201':139
- '87.##.179.227':139
- '87.##.114.153':139
- '87.##.10.183':139
- '87.##.231.166':139
- '87.##.28.133':139
- '87.##.192.194':139
- '87.##.203.107':139
- '87.##.194.28':139
- '87.##.203.176':139
- '87.##.20.195':139
- '87.##.217.23':139
- '87.##.228.206':139
- '87.#7.1.44':139
- '87.##.145.191':139
- '87.##.106.126':139
- '87.##.115.142':139
- '87.##.191.210':445
- '87.#7.49.15':139
- '87.##.150.205':139
- '87.##.95.102':139
- '87.##.69.145':139
- '87.##.165.20':139
- '87.##.213.102':139
- '87.##.110.222':139
- '87.#7.71.95':139
- '87.##.142.83':139
- '87.##.184.110':139
- '87.##.176.184':139
- '87.##.25.181':139
- '87.##.137.163':445
- '87.##.162.203':445
- '87.#7.3.101':445
- '87.##.203.239':445
- '87.##.174.129':445
- '87.##.201.137':445
- '87.##.62.228':445
- '87.#7.29.99':445
- '87.##.149.52':445
- '87.##.252.213':445
- '87.##.246.89':445
- '87.##.96.130':445
- '87.##.85.145':445
- '87.##.92.111':445
- '87.#7.240.2':445
- '87.##.16.203':445
- '87.##.124.141':445
- '87.##.101.96':445
- '87.#7.67.82':445
- '87.##.174.190':139
- '87.##.51.204':139
- '87.#7.18.76':139
- '87.##.191.96':139
- '87.##.107.168':139
- '87.##.156.47':139
- '87.##.221.121':139
- '87.##.80.107':139
- '87.#7.48.81':139
- '87.##.45.200':445
- '87.#7.2.61':445
- '87.##.188.66':445
- '87.##.81.226':445
- '87.##.141.223':445
- '87.#7.25.32':9988
- '87.##.191.210':139
- '87.#7.36.34':445
- '87.##.247.116':9988