Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '14.#5.5.12':445
- '14.##.112.109':445
- '14.##.188.82':445
- '14.##.29.107':445
- '14.#5.34.78':445
- '14.##.68.149':445
- '14.##.230.122':445
- '14.##.99.146':445
- '14.##.145.54':445
- '14.##.106.101':445
- '14.##.39.198':445
- '14.#5.0.186':445
- '14.##.128.167':445
- '14.#5.0.21':445
- '14.##.22.207':445
- '14.##.83.237':445
- '14.##.22.224':445
- '14.##.25.113':445
- '14.#5.65.25':445
- '14.##.35.166':445
- '14.##.68.167':445
- '14.##.96.254':445
- '14.##.43.143':445
- '14.##.46.202':445
- '14.#5.76.65':445
- '14.##.98.238':445
- '14.#5.13.34':445
- '14.##.216.153':445
- '14.##.95.249':445
- '14.##.72.162':445
- '14.##.188.13':445
- '14.##.143.236':445
- '14.##.103.110':445
- '14.#5.74.22':445
- '14.##.25.113':139
- '14.#5.65.25':139
- '14.##.35.166':139
- '14.##.68.167':139
- '14.##.96.254':139
- '14.##.43.143':139
- '14.#5.76.65':139
- '14.##.46.202':139
- '14.##.98.238':139
- '14.#5.13.34':139
- '14.##.216.153':139
- '14.##.95.249':139
- '14.##.72.162':139
- '14.##.188.13':139
- '14.##.143.236':139
- '14.##.103.110':139
- '14.#5.74.22':139
- '14.##.46.154':139
- '14.##.131.108':139
- '14.##.15.193':139
- '14.#5.93.67':139
- '14.#5.13.48':139
- '14.##.158.86':139
- '14.##.206.161':139
- '14.##.142.186':139
- '14.#5.14.67':139
- '14.##.123.73':139
- '14.##.202.234':139
- '14.##.130.70':139
- '14.#5.31.99':139
- '14.##.195.246':139
- '14.#5.45.10':139
- '14.#5.16.92':139
- '14.##.158.234':139
- '14.##.161.214':139
- '14.##.120.162':139
- '14.##.209.132':139
- '14.##.11.178':139
- '14.##.212.106':139
- '14.##.231.182':139
- '14.##.91.232':139
- '14.##.13.192':139
- '14.##.132.35':139
- '14.##.117.220':139
- '14.##.36.187':139
- '14.##.129.104':139
- '14.##.125.100':139
- '14.##.173.103':139
- '14.#5.5.54':139
- '14.##.177.202':139
- '14.#5.84.46':139
- '14.##.67.103':139
- '14.#5.13.78':139
- '14.#5.82.19':139
- '14.##.214.81':139
- '14.##.21.103':139
- '14.##.11.140':139
- '14.##.160.19':139
- '14.##.33.156':139
- '14.##.19.221':139
- '14.#5.3.92':139
- '14.##.126.73':139
- '14.##.135.231':139
- '14.##.12.148':139
- '14.##.113.238':139
- '14.#5.17.69':139
- '14.##.112.126':139
- '14.##.60.110':139
- '14.##.46.154':445
- '14.##.131.108':445
- '14.##.15.193':445
- '14.#5.93.67':445
- '14.#5.13.48':445
- '14.##.158.86':445
- '14.##.206.161':445
- '14.##.142.186':445
- '14.#5.14.67':445
- '14.##.123.73':445
- '14.##.202.234':445
- '14.##.130.70':445
- '14.#5.31.99':445
- '14.##.195.246':445
- '14.#5.45.10':445
- '14.#5.16.92':445
- '14.##.158.234':445
- '14.#5.5.144':139
- '14.##.232.192':139
- '14.##.17.164':139
- '14.##.198.66':139
- '14.##.118.43':139
- '14.##.200.137':139
- '14.##.232.74':139
- '14.##.239.42':139
- '14.##.228.224':139
- '14.##.188.140':139
- '14.#5.58.98':139
- '14.##.79.183':139
- '14.##.237.26':139
- '14.##.109.97':139
- '14.##.22.109':139
- '14.##.121.233':139
- '14.##.97.154':139
- '14.##.131.102':139
- '14.##.25.130':139
- '14.##.220.176':139
- '14.##.247.219':139
- '14.##.156.179':139
- '14.##.26.235':139
- '14.##.58.234':139
- '14.#5.238.7':139
- '14.##.16.227':139
- '14.##.110.203':139
- '14.##.146.80':139
- '14.##.161.11':139
- '14.##.45.165':139
- '14.##.244.216':139
- '14.##.105.173':139
- '14.##.155.169':139
- '14.##.183.128':139
- '14.##.90.172':445
- '14.##.192.90':445
- '14.##.157.107':445
- '14.##.172.157':445
- '14.##.123.40':445
- '14.##.224.247':445
- '14.##.235.83':445
- '14.##.148.118':445
- '14.##.173.150':445
- '14.##.121.189':445
- '14.##.185.49':445
- '14.##.39.114':445
- '14.##.62.152':445
- '14.##.107.42':445
- '14.##.201.244':445
- '14.#5.10.20':445
- '14.##.128.54':445
- '14.##.90.172':139
- '14.##.192.90':139
- '14.##.157.107':139
- '14.##.172.157':139
- '14.##.123.40':139
- '14.##.224.247':139
- '14.##.235.83':139
- '14.##.148.118':139
- '14.##.107.42':139
- '14.##.121.189':139
- '14.##.185.49':139
- '14.##.39.114':139
- '14.##.62.152':139
- '14.##.128.54':139
- '14.##.173.150':139
- '14.#5.10.20':139
- '14.##.201.244':139
- '14.##.207.34':139
- '14.##.68.206':139
- '14.##.184.150':139
- '14.##.34.222':139
- '14.##.177.216':139
- '14.##.55.222':139
- '14.##.19.243':139
- '14.#5.6.203':139
- '14.##.65.235':139
- '14.#5.26.83':139
- '14.##.80.226':139
- '14.##.124.230':139
- '14.##.112.12':139
- '14.##.124.50':139
- '14.#5.46.22':139
- '14.##.128.125':139
- '14.#5.46.25':139
- '14.##.177.216':9988
- '14.##.55.222':9988
- '14.##.19.243':9988
- '14.#5.6.203':9988
- '14.##.25.130':9988
- '14.##.58.234':9988
- '14.##.247.219':9988
- '14.##.131.102':9988
- '14.##.68.206':9988
- '14.##.235.83':9988
- '14.##.39.114':9988
- '14.##.185.49':9988
- '14.#5.10.20':9988
- '14.##.65.235':9988
- '14.##.34.222':9988
- '14.##.121.189':9988
- '14.##.128.125':9988
- '14.##.112.109':139
- '14.#5.5.12':139
- '14.##.188.82':139
- '14.##.29.107':139
- '14.#5.34.78':139
- '14.##.68.149':139
- '14.##.230.122':139
- '14.##.99.146':139
- '14.##.145.54':139
- '14.##.106.101':139
- '14.##.39.198':139
- '14.#5.0.186':139
- '14.##.128.167':139
- '14.##.22.224':139
- '14.##.22.207':139
- '14.##.83.237':139
- '14.#5.0.21':139
- '14.##.207.34':445
- '14.##.68.206':445
- '14.##.184.150':445
- '14.##.34.222':445
- '14.##.177.216':445
- '14.##.55.222':445
- '14.##.19.243':445
- '14.#5.6.203':445
- '14.##.65.235':445
- '14.#5.26.83':445
- '14.##.80.226':445
- '14.##.124.230':445
- '14.##.112.12':445
- '14.##.124.50':445
- '14.#5.46.22':445
- '14.##.128.125':445
- '14.#5.46.25':445
- '14.##.131.102':445
- '14.##.25.130':445
- '14.##.220.176':445
- '14.##.247.219':445
- '14.##.156.179':445
- '14.##.26.235':445
- '14.##.58.234':445
- '14.#5.238.7':445
- '14.##.16.227':445
- '14.##.45.165':445
- '14.##.146.80':445
- '14.##.161.11':445
- '14.##.110.203':445
- '14.##.244.216':445
- '14.##.105.173':445
- '14.##.155.169':445
- '14.##.183.128':445