Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#48.180.13':445
- '21#.#48.27.172':445
- '21#.#48.35.160':445
- '21#.#48.168.81':445
- '21#.#48.235.226':445
- '21#.#48.189.175':445
- '21#.#48.49.91':445
- '21#.#48.149.219':445
- '21#.#48.110.174':445
- '21#.#48.62.101':445
- '21#.#48.143.245':445
- '21#.#48.210.242':445
- '21#.#48.224.251':445
- '21#.#48.90.198':445
- '21#.#48.160.85':445
- '21#.#48.6.190':445
- '21#.#48.64.148':445
- '21#.#48.255.47':445
- '21#.#48.143.63':445
- '21#.#48.188.59':445
- '21#.#48.42.94':445
- '21#.#48.133.110':445
- '21#.#48.64.91':139
- '21#.#48.97.163':139
- '21#.#48.9.42':445
- '21#.#48.0.82':445
- '21#.#48.134.153':445
- '21#.#48.27.227':445
- '21#.#48.61.106':445
- '21#.#48.68.96':445
- '21#.#48.110.47':445
- '21#.#48.141.134':445
- '21#.#48.31.160':445
- '21#.#48.236.140':445
- '21#.#48.28.141':445
- '21#.#48.42.94':139
- '21#.#48.133.110':139
- '21#.#48.31.160':139
- '21#.#48.134.153':139
- '21#.#48.9.42':139
- '21#.#48.0.82':139
- '21#.#48.143.63':139
- '21#.#48.188.59':139
- '21#.#48.141.134':139
- '21#.#48.68.96':139
- '21#.#48.110.47':139
- '21#.#48.235.226':139
- '21#.#48.255.47':139
- '21#.#48.236.140':139
- '21#.#48.28.141':139
- '21#.#48.27.227':139
- '21#.#48.61.106':139
- '21#.#48.29.12':445
- '21#.#48.81.35':445
- '21#.#48.59.145':445
- '21#.#48.6.168':445
- '21#.#48.39.108':445
- '21#.#48.17.190':445
- '21#.#48.205.17':445
- '21#.#48.242.59':445
- '21#.#48.117.177':445
- '21#.#48.12.17':445
- '21#.#48.88.213':445
- '21#.#48.98.76':445
- '21#.#48.24.52':445
- '21#.#48.192.70':445
- '21#.#48.4.160':445
- '21#.#48.72.15':445
- '21#.#48.19.118':445
- '21#.#48.86.168':445
- '21#.#48.57.206':139
- '21#.#48.157.121':139
- '21#.#48.94.182':139
- '21#.#48.2.159':139
- '21#.#48.97.163':445
- '21#.#48.160.14':445
- '21#.#48.114.41':139
- '21#.#48.64.91':445
- '21#.#48.86.46':139
- '21#.#48.237.4':139
- '21#.#48.143.16':139
- '21#.#48.120.31':139
- '21#.#48.26.30':139
- '21#.#48.8.201':139
- '21#.#48.153.10':139
- '21#.#48.94.143':139
- '21#.#48.183.94':139
- '21#.#48.37.149':445
- '21#.#48.77.192':445
- '21#.#48.231.5':445
- '21#.#48.239.231':445
- '21#.#48.247.7':445
- '21#.#48.214.82':445
- '21#.#48.45.161':445
- '21#.#48.186.72':445
- '21#.#48.137.3':445
- '21#.#48.226.208':445
- '21#.#48.217.186':445
- '21#.#48.188.19':445
- '21#.#48.70.36':445
- '21#.#48.8.42':445
- '21#.#48.3.216':445
- '21#.#48.209.30':445
- '21#.#48.157.42':445
- '21#.#48.29.245':445
- '21#.#48.239.231':139
- '21#.#48.247.7':139
- '21#.#48.209.30':139
- '21#.#48.226.208':139
- '21#.#48.186.72':139
- '21#.#48.137.3':139
- '21#.#48.231.5':139
- '21#.#48.77.192':139
- '21#.#48.29.245':139
- '21#.#48.70.36':139
- '21#.#48.8.42':139
- '21#.#48.160.14':139
- '21#.#48.37.149':139
- '21#.#48.157.42':139
- '21#.#48.3.216':139
- '21#.#48.217.186':139
- '21#.#48.188.19':139
- '21#.#48.214.82':139
- '21#.#48.197.68':139
- '21#.#48.249.196':139
- '21#.#48.2.164':139
- '21#.#48.128.34':139
- '21#.#48.122.161':139
- '21#.#48.214.69':139
- '21#.#48.130.150':139
- '21#.#48.161.205':139
- '21#.#48.236.118':139
- '21#.#48.31.207':139
- '21#.#48.53.215':139
- '21#.#48.45.161':139
- '21#.#48.206.120':139
- '21#.#48.60.43':139
- '21#.#48.128.130':139
- '21#.#48.11.125':139
- '21#.#48.80.37':139
- '21#.#48.111.173':139
- '21#.#48.82.34':139
- '21#.#48.7.168':139
- '21#.#48.94.154':139
- '21#.#48.188.180':139
- '21#.#48.159.174':445
- '21#.#48.122.146':139
- '21#.#48.181.64':139
- '21#.#48.95.39':139
- '21#.#48.167.62':139
- '21#.#48.233.160':139
- '21#.#48.84.28':139
- '21#.#48.184.88':139
- '21#.#48.64.179':139
- '21#.#48.129.64':139
- '21#.#48.213.245':139
- '21#.#48.107.6':139
- '21#.#48.240.3':445
- '21#.#48.53.209':445
- '21#.#48.82.46':445
- '21#.#48.103.254':445
- '21#.#48.207.172':445
- '21#.#48.122.14':445
- '21#.#48.42.121':445
- '21#.#48.180.177':445
- '21#.#48.14.175':445
- '21#.#48.32.132':445
- '21#.#48.66.228':445
- '21#.#48.196.128':445
- '21#.#48.75.133':445
- '21#.#48.250.78':445
- '21#.#48.18.52':445
- '21#.#48.92.88':445
- '21#.#48.47.86':445
- '21#.#48.234.32':445
- '21#.#48.103.254':139
- '21#.#48.207.172':139
- '21#.#48.92.88':139
- '21#.#48.32.132':139
- '21#.#48.180.177':139
- '21#.#48.14.175':139
- '21#.#48.53.209':139
- '21#.#48.82.46':139
- '21#.#48.18.52':139
- '21#.#48.159.174':139
- '21#.#48.196.128':139
- '21#.#48.240.3':139
- '21#.#48.66.228':139
- '21#.#48.47.86':139
- '21#.#48.234.32':139
- '21#.#48.75.133':139
- '21#.#48.250.78':139
- '21#.#48.122.14':139
- '21#.#48.221.206':139
- '21#.#48.41.89':139
- '21#.#48.231.18':139
- '21#.#48.234.10':139
- '21#.#48.44.34':139
- '21#.#48.32.82':139
- '21#.#48.33.152':139
- '21#.#48.68.113':139
- '21#.#48.128.242':139
- '21#.#48.20.123':139
- '21#.#48.197.229':139
- '21#.#48.42.121':139
- '21#.#48.112.43':139
- '21#.#48.75.35':139
- '21#.#48.226.213':139
- '21#.#48.82.218':139
- '21#.#48.75.209':139
- '21#.#48.6.168':139
- '21#.#48.39.108':139
- '21#.#48.72.15':139
- '21#.#48.12.17':139
- '21#.#48.242.59':139
- '21#.#48.117.177':139
- '21#.#48.81.35':139
- '21#.#48.59.145':139
- '21#.#48.4.160':139
- '21#.#48.24.52':139
- '21#.#48.88.213':139
- '21#.#48.122.146':9988
- '21#.#48.29.12':139
- '21#.#48.19.118':139
- '21#.#48.86.168':139
- '21#.#48.192.70':139
- '21#.#48.98.76':139
- '21#.#48.17.190':139
- '21#.#48.168.81':139
- '21#.#48.27.172':139
- '21#.#48.35.160':139
- '21#.#48.110.174':139
- '21#.#48.149.219':139
- '21#.#48.189.175':139
- '21#.#48.180.13':139
- '21#.#48.49.91':139
- '21#.#48.160.85':139
- '21#.#48.224.251':139
- '21#.#48.143.245':139
- '21#.#48.205.17':139
- '21#.#48.210.242':139
- '21#.#48.64.148':139
- '21#.#48.90.198':139
- '21#.#48.62.101':139
- '21#.#48.6.190':139
- '21#.#48.41.89':445
- '21#.#48.33.152':445
- '21#.#48.234.10':445
- '21#.#48.221.206':445
- '21#.#48.32.82':445
- '21#.#48.84.28':445
- '21#.#48.68.113':445
- '21#.#48.44.34':445
- '21#.#48.231.18':445
- '21#.#48.197.229':445
- '21#.#48.82.218':445
- '21#.#48.112.43':445
- '21#.#48.20.123':445
- '21#.#48.226.213':445
- '21#.#48.128.242':445
- '21#.#48.75.209':445
- '21#.#48.75.35':445
- '21#.#48.184.88':445
- '21#.#48.122.146':445
- '21#.#48.181.64':445
- '21#.#48.111.173':445
- '21#.#48.82.34':445
- '21#.#48.159.174':9988
- '21#.#48.32.82':9988
- '21#.#48.188.180':445
- '21#.#48.240.3':9988
- '21#.#48.94.154':445
- '21#.#48.213.245':445
- '21#.#48.107.6':445
- '21#.#48.167.62':445
- '21#.#48.233.160':445
- '21#.#48.95.39':445
- '21#.#48.7.168':445
- '21#.#48.64.179':445
- '21#.#48.129.64':445