Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '81.##.19.102':139
- '81.##.38.244':139
- '81.##.101.162':139
- '81.##.164.91':445
- '81.##.99.245':139
- '81.##.150.95':139
- '81.#0.22.68':139
- '81.#0.96.15':139
- '81.##.236.61':139
- '81.#0.127.8':139
- '81.##.221.184':445
- '81.#0.11.30':445
- '81.#0.82.85':445
- '81.##.205.208':445
- '81.##.43.165':445
- '81.##.177.224':445
- '81.##.198.135':445
- '81.##.224.173':445
- '81.#0.98.87':445
- '81.##.198.101':445
- '81.##.180.147':139
- '81.##.229.206':139
- '81.##.184.174':139
- '81.##.173.246':139
- '81.#0.6.120':139
- '81.#0.10.33':139
- '81.##.128.134':139
- '81.##.77.170':139
- '81.##.56.219':139
- '81.#0.2.83':139
- '81.#0.96.55':139
- '81.##.73.150':139
- '81.#0.0.246':139
- '81.##.126.124':139
- '81.##.189.62':139
- '81.##.108.126':139
- '81.#0.74.14':139
- '81.##.160.234':139
- '81.##.218.231':139
- '81.##.102.246':139
- '81.##.79.109':445
- '81.##.219.75':445
- '81.##.250.55':445
- '81.##.189.97':445
- '81.##.220.112':445
- '81.##.102.206':445
- '81.##.26.125':445
- '81.##.184.64':445
- '81.##.64.120':445
- '81.#0.14.85':445
- '81.#0.4.67':445
- '81.##.119.149':445
- '81.##.25.189':445
- '81.#0.3.132':445
- '81.##.164.91':139
- '81.#0.68.43':445
- '81.#0.2.219':445
- '81.##.166.166':445
- '81.##.72.224':445
- '81.#0.9.25':445
- '81.##.93.179':445
- '81.#0.28.8':445
- '81.#0.6.71':445
- '81.##.185.28':445
- '81.#0.8.60':445
- '81.#0.53.67':445
- '81.##.23.190':445
- '81.##.87.233':445
- '81.#0.1.6':445
- '81.##.89.153':445
- '81.##.130.217':445
- '81.#0.16.97':445
- '81.##.137.82':445
- '81.#0.78.34':445
- '81.##.177.81':445
- '81.##.152.26':445
- '81.##.15.158':445
- '81.##.182.252':445
- '81.##.214.188':445
- '81.##.96.174':445
- '81.##.10.188':445
- '81.##.243.226':445
- '81.##.216.236':445
- '81.##.40.117':445
- '81.##.159.69':445
- '81.#0.28.1':445
- '81.#0.48.78':445
- '81.##.253.155':445
- '81.##.149.102':445
- '81.#0.5.160':445
- '81.##.232.83':445
- '81.##.180.147':445
- '81.##.229.206':445
- '81.##.184.174':445
- '81.##.173.246':445
- '81.#0.6.120':445
- '81.##.56.219':445
- '81.##.128.134':445
- '81.#0.2.83':445
- '81.#0.10.33':445
- '81.##.77.170':445
- '81.##.195.236':139
- '81.#0.77.88':139
- '81.##.155.90':139
- '81.##.128.147':445
- '81.##.91.101':445
- '81.##.200.39':139
- '81.#0.1.200':139
- '81.##.39.243':139
- '81.#0.69.59':139
- '81.#0.30.78':139
- '81.##.171.70':445
- '81.##.88.158':445
- '81.#0.135.3':445
- '81.##.233.217':445
- '81.##.236.101':445
- '81.##.76.151':445
- '81.##.248.213':445
- '81.##.54.122':445
- '81.##.25.254':445
- '81.##.223.248':445
- '81.#0.96.55':445
- '81.#0.135.3':139
- '81.##.88.158':139
- '81.##.171.70':139
- '81.##.233.217':139
- '81.##.236.101':139
- '81.##.76.151':139
- '81.##.248.213':139
- '81.##.54.122':139
- '81.##.25.254':139
- '81.##.223.248':139
- '81.#0.48.78':139
- '81.##.149.102':139
- '81.##.216.236':139
- '81.##.159.69':139
- '81.#0.28.1':139
- '81.#0.5.160':139
- '81.##.253.155':139
- '81.##.40.117':139
- '81.##.232.83':139
- '81.##.243.226':139
- '81.##.108.126':445
- '81.##.160.234':445
- '81.#0.0.246':445
- '81.##.19.102':445
- '81.##.38.244':445
- '81.#0.127.8':445
- '81.##.236.61':445
- '81.##.73.150':445
- '81.##.189.62':445
- '81.##.126.124':445
- '81.#0.96.15':445
- '81.#0.74.14':445
- '81.##.101.162':445
- '81.##.128.147':139
- '81.##.91.101':139
- '81.##.99.245':445
- '81.##.150.95':445
- '81.##.218.231':445
- '81.#0.22.68':445
- '81.##.102.246':445
- '81.##.179.203':445
- '81.#0.19.6':445
- '81.##.121.156':445
- '81.##.50.154':445
- '81.#0.43.3':445
- '81.##.62.157':445
- '81.##.195.239':445
- '81.##.106.179':445
- '81.##.105.203':445
- '81.##.207.105':445
- '81.##.37.210':139
- '81.##.207.217':139
- '81.##.105.227':139
- '81.##.78.123':139
- '81.##.227.120':139
- '81.#0.83.26':139
- '81.##.133.82':139
- '81.#0.54.92':139
- '81.##.93.184':139
- '81.#0.30.24':139
- '81.##.220.99':445
- '81.##.120.145':445
- '81.#0.20.84':445
- '81.##.45.232':445
- '81.##.123.177':445
- '81.##.110.153':445
- '81.#0.90.93':445
- '81.##.117.207':445
- '81.##.250.107':445
- '81.##.43.251':445
- '81.#0.38.82':445
- '81.#0.78.38':445
- '81.##.99.248':445
- '81.#0.65.0':445
- '81.#0.90.44':445
- '81.##.33.132':445
- '81.##.252.111':445
- '81.##.132.94':445
- '81.#0.80.78':445
- '81.#0.75.66':445
- '81.##.84.202':139
- '81.#0.38.82':139
- '81.#0.78.38':139
- '81.##.99.248':139
- '81.#0.65.0':139
- '81.#0.90.44':139
- '81.##.33.132':139
- '81.##.252.111':139
- '81.##.132.94':139
- '81.#0.80.78':139
- '81.#0.75.66':139
- '81.#0.43.3':139
- '81.##.121.156':139
- '81.##.179.203':139
- '81.##.50.154':139
- '81.#0.19.6':139
- '81.##.62.157':139
- '81.##.195.239':139
- '81.##.106.179':139
- '81.##.105.203':139
- '81.##.207.105':139
- '81.##.88.190':139
- '81.##.154.152':139
- '81.##.191.132':139
- '81.#0.106.5':139
- '81.##.113.210':139
- '81.##.107.102':139
- '81.#0.25.55':139
- '81.##.15.254':139
- '81.##.88.139':139
- '81.##.121.26':139
- '81.##.220.99':139
- '81.##.120.145':139
- '81.#0.20.84':139
- '81.##.45.232':139
- '81.##.123.177':139
- '81.##.110.153':139
- '81.#0.90.93':139
- '81.##.117.207':139
- '81.##.250.107':139
- '81.##.43.251':139
- '81.#0.16.97':139
- '81.##.137.82':139
- '81.##.96.174':139
- '81.#0.4.67':139
- '81.#0.78.34':139
- '81.##.182.252':139
- '81.#0.8.60':139
- '81.##.15.158':139
- '81.##.10.188':139
- '81.##.214.188':139
- '81.##.250.55':139
- '81.#0.14.85':139
- '81.##.219.75':139
- '81.##.102.206':139
- '81.##.189.97':139
- '81.##.184.64':139
- '81.##.64.120':139
- '81.##.177.81':139
- '81.##.26.125':139
- '81.##.152.26':139
- '81.#0.98.87':139
- '81.##.221.184':139
- '81.##.43.165':139
- '81.##.87.233':139
- '81.#0.82.85':139
- '81.##.177.224':139
- '81.##.198.135':139
- '81.##.224.173':139
- '81.#0.11.30':139
- '81.##.198.101':139
- '81.#0.6.71':139
- '81.##.89.153':139
- '81.#0.53.67':139
- '81.#0.28.8':139
- '81.##.185.28':139
- '81.##.205.208':139
- '81.##.79.109':139
- '81.##.130.217':139
- '81.##.23.190':139
- '81.#0.1.6':139
- '81.##.220.112':139
- '81.##.105.227':445
- '81.##.37.210':445
- '81.##.227.120':445
- '81.##.84.202':445
- '81.##.78.123':445
- '81.#0.54.92':445
- '81.#0.83.26':445
- '81.#0.30.24':445
- '81.##.207.217':445
- '81.##.93.184':445
- '81.##.88.190':445
- '81.##.154.152':445
- '81.##.191.132':445
- '81.#0.106.5':445
- '81.##.113.210':445
- '81.##.107.102':445
- '81.#0.25.55':445
- '81.##.15.254':445
- '81.##.88.139':445
- '81.##.121.26':445
- '81.##.119.149':139
- '81.##.25.189':139
- '81.#0.3.132':139
- '81.#0.83.26':9988
- '81.#0.68.43':139
- '81.##.93.179':139
- '81.#0.2.219':139
- '81.##.72.224':139
- '81.#0.9.25':139
- '81.##.166.166':139
- '81.##.106.179':9988
- '81.#0.65.0':9988
- '81.##.121.156':9988
- '81.##.133.82':445
- '81.##.50.154':9988
- '81.##.110.153':9988
- '81.##.113.210':9988
- '81.##.117.207':9988
- '81.##.45.232':9988
- '81.##.250.107':9988