Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '24.##3.164.9':445
- '24.##3.99.20':445
- '24.##3.117.161':445
- '24.##3.142.48':445
- '24.##3.210.216':445
- '24.##3.187.19':445
- '24.##3.181.123':445
- '24.##3.217.92':445
- '24.##3.245.142':445
- '24.##3.26.149':445
- '24.##3.178.17':445
- '24.##3.218.60':445
- '24.##3.93.225':445
- '24.##3.251.189':445
- '24.##3.153.185':445
- '24.##3.187.57':445
- '24.##3.246.25':445
- '24.##3.31.176':445
- '24.##3.203.189':445
- '24.##3.122.75':445
- '24.##3.10.182':445
- '24.##3.10.134':445
- '24.##3.125.69':445
- '24.##3.12.170':445
- '24.##3.42.16':445
- '24.##3.187.223':445
- '24.##3.10.137':445
- '24.##3.82.179':445
- '24.##3.89.60':445
- '24.#23.7.78':445
- '24.#23.7.73':445
- '24.##3.103.124':445
- '24.##3.179.10':445
- '24.##3.254.108':445
- '24.##3.31.176':139
- '24.##3.203.189':139
- '24.##3.122.75':139
- '24.##3.10.182':139
- '24.##3.10.134':139
- '24.##3.235.171':139
- '24.##3.12.170':139
- '24.##3.42.16':139
- '24.##3.187.223':139
- '24.##3.10.137':139
- '24.##3.179.10':139
- '24.##3.187.19':139
- '24.#23.7.78':139
- '24.#23.7.73':139
- '24.##3.103.124':139
- '24.##3.82.179':139
- '24.##3.254.108':139
- '24.##3.154.189':139
- '24.##3.24.15':139
- '24.##3.156.182':139
- '24.##3.1.120':139
- '24.##3.158.101':139
- '24.##3.7.140':139
- '24.##3.66.24':139
- '24.##3.78.223':139
- '24.##3.180.75':139
- '24.##3.19.222':139
- '24.##3.227.102':139
- '24.##3.125.69':139
- '24.##3.143.235':139
- '24.##3.136.190':139
- '24.##3.252.136':139
- '24.##3.81.12':139
- '24.##3.190.133':139
- '24.##3.121.43':139
- '24.##3.166.59':139
- '24.##3.174.225':139
- '24.##3.158.174':139
- '24.##3.51.11':139
- '24.##3.10.214':139
- '24.##3.66.162':139
- '24.##3.11.102':139
- '24.##3.225.173':139
- '24.##3.254.178':139
- '24.##3.228.254':139
- '24.##3.240.73':139
- '24.##3.179.109':139
- '24.##3.141.205':139
- '24.##3.226.202':139
- '24.##3.195.228':139
- '24.##3.60.196':139
- '24.##3.245.143':139
- '24.##3.73.245':139
- '24.##3.60.144':139
- '24.##3.222.85':139
- '24.##3.158.178':139
- '24.##3.28.242':139
- '24.##3.186.73':139
- '24.##3.51.186':139
- '24.##3.225.33':139
- '24.##3.34.250':139
- '24.##3.195.72':139
- '24.##3.220.4':139
- '24.##3.229.154':139
- '24.##3.138.248':139
- '24.##3.134.115':139
- '24.##3.83.195':139
- '24.##3.87.180':139
- '24.##3.1.120':445
- '24.##3.24.15':445
- '24.##3.156.182':445
- '24.##3.154.189':445
- '24.##3.158.101':445
- '24.##3.7.140':445
- '24.##3.66.24':445
- '24.##3.78.223':445
- '24.##3.180.75':445
- '24.##3.227.102':445
- '24.##3.19.222':445
- '24.##3.235.171':445
- '24.##3.143.235':445
- '24.##3.136.190':445
- '24.##3.252.136':445
- '24.##3.81.12':445
- '24.##3.190.133':445
- '24.##3.25.119':139
- '24.##3.124.168':139
- '24.##3.65.60':139
- '24.##3.139.216':139
- '24.##3.127.86':139
- '24.##3.244.126':139
- '24.##3.240.124':139
- '24.##3.167.91':139
- '24.##3.60.36':139
- '24.##3.48.210':139
- '24.##3.96.48':139
- '24.##3.116.7':139
- '24.##3.210.116':139
- '24.##3.116.20':139
- '24.##3.36.116':139
- '24.##3.66.125':139
- '24.##3.254.149':139
- '24.##3.166.247':139
- '24.##3.181.166':139
- '24.##3.107.217':139
- '24.##3.247.107':139
- '24.##3.196.162':139
- '24.##3.78.178':139
- '24.##3.34.181':139
- '24.##3.15.103':139
- '24.##3.51.43':139
- '24.##3.33.11':139
- '24.##3.16.80':139
- '24.##3.112.99':139
- '24.##3.235.112':139
- '24.##3.255.48':139
- '24.##3.65.214':139
- '24.##3.143.89':139
- '24.##3.49.143':139
- '24.##3.62.74':445
- '24.##3.122.20':445
- '24.##3.108.176':445
- '24.##3.125.108':445
- '24.##3.149.214':445
- '24.##3.22.177':445
- '24.##3.153.216':445
- '24.##3.231.72':445
- '24.##3.9.151':445
- '24.##3.5.204':445
- '24.##3.17.16':445
- '24.##3.139.163':445
- '24.##3.24.163':445
- '24.##3.68.76':445
- '24.##3.190.236':445
- '24.##3.203.81':445
- '24.##3.230.203':445
- '24.##3.62.74':139
- '24.##3.122.20':139
- '24.##3.108.176':139
- '24.##3.125.108':139
- '24.##3.149.214':139
- '24.##3.22.177':139
- '24.##3.153.216':139
- '24.##3.231.72':139
- '24.##3.9.151':139
- '24.##3.5.204':139
- '24.##3.17.16':139
- '24.##3.139.163':139
- '24.##3.24.163':139
- '24.##3.68.76':139
- '24.##3.190.236':139
- '24.##3.203.81':139
- '24.##3.230.203':139
- '24.##3.59.147':139
- '24.##3.44.209':139
- '24.##3.16.242':139
- '24.##3.251.145':139
- '24.##3.4.186':139
- '24.##3.16.132':139
- '24.##3.193.22':139
- '24.##3.18.179':139
- '24.#23.44.9':139
- '24.##3.217.248':139
- '24.##3.138.218':139
- '24.##3.187.164':139
- '24.##3.196.240':139
- '24.##3.147.160':139
- '24.##3.46.74':139
- '24.##3.205.184':139
- '24.##3.140.145':139
- '24.##3.181.166':9988
- '24.##3.196.162':9988
- '24.##3.112.99':9988
- '24.##3.15.103':9988
- '24.##3.255.48':9988
- '24.##3.235.112':9988
- '24.##3.247.107':9988
- '24.##3.49.143':9988
- '24.##3.4.186':9988
- '24.##3.139.163':9988
- '24.##3.138.218':9988
- '24.##3.230.203':9988
- '24.##3.122.20':9988
- '24.##3.193.22':9988
- '24.##3.44.209':9988
- '24.##3.205.184':9988
- '24.##3.59.147':9988
- '24.##3.164.9':139
- '24.##3.99.20':139
- '24.##3.153.185':139
- '24.##3.142.48':139
- '24.##3.210.216':139
- '24.##3.89.60':139
- '24.##3.181.123':139
- '24.##3.217.92':139
- '24.##3.117.161':139
- '24.##3.26.149':139
- '24.##3.246.25':139
- '24.##3.218.60':139
- '24.##3.93.225':139
- '24.##3.251.189':139
- '24.##3.245.142':139
- '24.##3.187.57':139
- '24.##3.178.17':139
- '24.##3.59.147':445
- '24.##3.44.209':445
- '24.##3.16.242':445
- '24.##3.251.145':445
- '24.##3.4.186':445
- '24.##3.16.132':445
- '24.##3.193.22':445
- '24.##3.18.179':445
- '24.#23.44.9':445
- '24.##3.217.248':445
- '24.##3.138.218':445
- '24.##3.187.164':445
- '24.##3.196.240':445
- '24.##3.147.160':445
- '24.##3.46.74':445
- '24.##3.205.184':445
- '24.##3.140.145':445
- '24.##3.166.247':445
- '24.##3.181.166':445
- '24.##3.107.217':445
- '24.##3.247.107':445
- '24.##3.196.162':445
- '24.##3.78.178':445
- '24.##3.34.181':445
- '24.##3.15.103':445
- '24.##3.51.43':445
- '24.##3.33.11':445
- '24.##3.16.80':445
- '24.##3.112.99':445
- '24.##3.235.112':445
- '24.##3.255.48':445
- '24.##3.65.214':445
- '24.##3.143.89':445
- '24.##3.49.143':445