Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#10.246.140':445
- '21#.#10.129.81':445
- '21#.#10.47.168':445
- '21#.#10.150.47':445
- '21#.#10.11.102':445
- '21#.#10.18.149':445
- '21#.#10.48.13':445
- '21#.#10.159.27':445
- '21#.#10.125.58':445
- '21#.#10.221.182':445
- '21#.#10.161.189':445
- '21#.#10.113.200':445
- '21#.#10.150.98':445
- '21#.#10.168.69':445
- '21#.#10.113.53':445
- '21#.#10.124.0':445
- '21#.#10.29.134':445
- '21#.#10.153.83':445
- '21#.#10.54.174':445
- '21#.#10.225.9':445
- '21#.#10.192.211':445
- '21#.#10.54.112':445
- '21#.#10.102.109':445
- '21#.#10.192.17':445
- '21#.#10.31.230':445
- '21#.#10.149.221':445
- '21#.#10.207.84':445
- '21#.#10.32.206':445
- '21#.#10.147.138':445
- '21#.#10.23.254':445
- '21#.#10.239.23':445
- '21#.#10.189.6':445
- '21#.#10.89.62':445
- '21#.#10.241.54':445
- '21#.#10.153.83':139
- '21#.#10.54.174':139
- '21#.#10.225.9':139
- '21#.#10.192.211':139
- '21#.#10.54.112':139
- '21#.#10.102.109':139
- '21#.#10.192.17':139
- '21#.#10.31.230':139
- '21#.#10.149.221':139
- '21#.#10.207.84':139
- '21#.#10.32.206':139
- '21#.#10.147.138':139
- '21#.#10.23.254':139
- '21#.#10.239.23':139
- '21#.#10.189.6':139
- '21#.#10.89.62':139
- '21#.#10.104.74':139
- '21#.#10.195.239':139
- '21#.#10.31.244':139
- '21#.#10.0.155':139
- '21#.#10.133.9':139
- '21#.#10.243.253':139
- '21#.#10.185.53':139
- '21#.#10.44.33':139
- '21#.#10.180.69':139
- '21#.#10.201.38':139
- '21#.#10.137.30':139
- '21#.#10.210.103':139
- '21#.#10.54.206':139
- '21#.#10.74.241':139
- '21#.#10.54.193':139
- '21#.#10.26.102':139
- '21#.#10.10.47':139
- '21#.#10.104.74':445
- '21#.#10.43.164':139
- '21#.#10.4.53':139
- '21#.#10.5.152':139
- '21#.#10.135.89':139
- '21#.#10.247.223':139
- '21#.#10.162.58':139
- '21#.#10.153.76':139
- '21#.#10.63.11':139
- '21#.#10.3.223':139
- '21#.#10.55.191':139
- '21#.#10.226.91':139
- '21#.#10.125.148':139
- '21#.#10.242.206':139
- '21#.#10.200.242':139
- '21#.#10.20.114':139
- '21#.#10.207.19':139
- '21#.#10.188.93':139
- '21#.#10.251.62':139
- '21#.#10.105.73':139
- '21#.#10.250.8':139
- '21#.#10.63.3':139
- '21#.#10.236.43':139
- '21#.#10.115.15':139
- '21#.#10.152.44':139
- '21#.#10.196.218':139
- '21#.#10.38.183':139
- '21#.#10.61.82':139
- '21#.#10.91.188':139
- '21#.#10.59.13':139
- '21#.#10.170.171':139
- '21#.#10.98.228':139
- '21#.#10.46.252':139
- '21#.#10.17.38':139
- '21#.#10.161.168':139
- '21#.#10.195.239':445
- '21#.#10.31.244':445
- '21#.#10.0.155':445
- '21#.#10.133.9':445
- '21#.#10.243.253':445
- '21#.#10.185.53':445
- '21#.#10.44.33':445
- '21#.#10.180.69':445
- '21#.#10.201.38':445
- '21#.#10.137.30':445
- '21#.#10.210.103':445
- '21#.#10.54.206':445
- '21#.#10.74.241':445
- '21#.#10.54.193':445
- '21#.#10.26.102':445
- '21#.#10.10.47':445
- '21#.#10.35.85':139
- '21#.#10.220.2':139
- '21#.#10.46.53':139
- '21#.#10.178.20':139
- '21#.#10.96.188':139
- '21#.#10.79.192':139
- '21#.#10.252.253':139
- '21#.#10.211.181':139
- '21#.#10.113.116':139
- '21#.#10.90.159':139
- '21#.#10.56.165':139
- '21#.#10.198.34':139
- '21#.#10.223.42':139
- '21#.#10.209.80':139
- '21#.#10.160.165':139
- '21#.#10.139.58':139
- '21#.#10.12.193':139
- '21#.#10.91.47':139
- '21#.#10.66.188':139
- '21#.#10.210.214':139
- '21#.#10.40.161':139
- '21#.#10.56.55':139
- '21#.#10.199.227':139
- '21#.#10.103.106':139
- '21#.#10.108.246':139
- '21#.#10.129.180':139
- '21#.#10.46.135':139
- '21#.#10.46.36':139
- '21#.#10.150.96':139
- '21#.#10.212.248':139
- '21#.#10.21.237':139
- '21#.#10.233.9':139
- '21#.#10.248.232':139
- '21#.#10.55.193':139
- '21#.#10.245.221':445
- '21#.#10.109.65':445
- '21#.#10.179.36':445
- '21#.#10.202.215':445
- '21#.#10.73.150':445
- '21#.#10.89.74':445
- '21#.#10.20.8':445
- '21#.#10.37.254':445
- '21#.#10.224.139':445
- '21#.#10.232.0':445
- '21#.#10.64.122':445
- '21#.#10.101.104':445
- '21#.#10.227.74':445
- '21#.#10.121.247':445
- '21#.#10.152.121':445
- '21#.#10.74.152':445
- '21#.#10.41.37':139
- '21#.#10.245.221':139
- '21#.#10.109.65':139
- '21#.#10.179.36':139
- '21#.#10.202.215':139
- '21#.#10.73.150':139
- '21#.#10.89.74':139
- '21#.#10.20.8':139
- '21#.#10.37.254':139
- '21#.#10.64.122':139
- '21#.#10.101.104':139
- '21#.#10.224.139':139
- '21#.#10.232.0':139
- '21#.#10.227.74':139
- '21#.#10.121.247':139
- '21#.#10.152.121':139
- '21#.#10.74.152':139
- '21#.#10.18.231':139
- '21#.#10.97.107':139
- '21#.#10.86.93':139
- '21#.#10.120.35':139
- '21#.#10.107.119':139
- '21#.#10.19.94':139
- '21#.#10.4.63':139
- '21#.#10.53.173':139
- '21#.#10.29.191':139
- '21#.#10.167.84':139
- '21#.#10.175.167':139
- '21#.#10.166.22':139
- '21#.#10.85.100':139
- '21#.#10.191.89':139
- '21#.#10.35.181':139
- '21#.#10.71.146':139
- '21#.#10.184.2':139
- '21#.#10.18.231':445
- '21#.#10.233.9':9988
- '21#.#10.210.214':9988
- '21#.#10.46.36':9988
- '21#.#10.150.96':9988
- '21#.#10.199.227':9988
- '21#.#10.241.54':139
- '21#.#10.40.161':9988
- '21#.#10.91.47':9988
- '21#.#10.224.139':9988
- '21#.#10.232.0':9988
- '21#.#10.101.104':9988
- '21#.#10.74.152':9988
- '21#.#10.97.107':9988
- '21#.#10.29.191':9988
- '21#.#10.152.121':9988
- '21#.#10.167.84':9988
- '21#.#10.161.189':139
- '21#.#10.129.81':139
- '21#.#10.48.13':139
- '21#.#10.150.47':139
- '21#.#10.246.140':139
- '21#.#10.18.149':139
- '21#.#10.29.134':139
- '21#.#10.159.27':139
- '21#.#10.11.102':139
- '21#.#10.221.182':139
- '21#.#10.113.53':139
- '21#.#10.113.200':139
- '21#.#10.125.58':139
- '21#.#10.168.69':139
- '21#.#10.47.168':139
- '21#.#10.124.0':139
- '21#.#10.150.98':139
- '21#.#10.55.193':445
- '21#.#10.97.107':445
- '21#.#10.86.93':445
- '21#.#10.107.119':445
- '21#.#10.120.35':445
- '21#.#10.19.94':445
- '21#.#10.4.63':445
- '21#.#10.53.173':445
- '21#.#10.29.191':445
- '21#.#10.167.84':445
- '21#.#10.175.167':445
- '21#.#10.166.22':445
- '21#.#10.85.100':445
- '21#.#10.191.89':445
- '21#.#10.35.181':445
- '21#.#10.71.146':445
- '21#.#10.184.2':445
- '21#.#10.41.37':445
- '21#.#10.91.47':445
- '21#.#10.66.188':445
- '21#.#10.210.214':445
- '21#.#10.40.161':445
- '21#.#10.56.55':445
- '21#.#10.199.227':445
- '21#.#10.103.106':445
- '21#.#10.108.246':445
- '21#.#10.129.180':445
- '21#.#10.46.135':445
- '21#.#10.46.36':445
- '21#.#10.150.96':445
- '21#.#10.212.248':445
- '21#.#10.21.237':445
- '21#.#10.233.9':445
- '21#.#10.248.232':445