Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#24.207.171':445
- '20#.#24.33.207':445
- '20#.#24.142.24':445
- '20#.#24.171.142':445
- '20#.#24.94.181':445
- '20#.#24.33.196':445
- '20#.#24.21.118':445
- '20#.#24.54.69':445
- '20#.#24.4.64':445
- '20#.#24.240.218':445
- '20#.#24.28.218':445
- '20#.#24.182.98':445
- '20#.#24.238.105':445
- '20#.#24.24.242':445
- '20#.#24.70.48':445
- '20#.#24.206.212':445
- '20#.#24.135.179':445
- '20#.#24.3.199':445
- '20#.#24.71.33':445
- '20#.#24.169.60':445
- '20#.#24.123.155':445
- '20#.#24.182.35':445
- '20#.#24.167.203':445
- '20#.#24.164.74':445
- '20#.#24.59.247':445
- '20#.#24.245.143':445
- '20#.#24.191.154':445
- '20#.#24.162.9':445
- '20#.#24.18.195':445
- '20#.#24.26.32':445
- '20#.#24.8.10':445
- '20#.#24.196.228':445
- '20#.#24.209.148':445
- '20#.#24.71.33':139
- '20#.#24.164.74':139
- '20#.#24.123.155':139
- '20#.#24.3.199':139
- '20#.#24.167.203':139
- '20#.#24.215.229':139
- '20#.#24.59.247':139
- '20#.#24.182.35':139
- '20#.#24.191.154':139
- '20#.#24.196.228':139
- '20#.#24.18.195':139
- '20#.#24.245.143':139
- '20#.#24.8.10':139
- '20#.#24.169.60':139
- '20#.#24.209.148':139
- '20#.#24.26.32':139
- '20#.#24.159.169':139
- '20#.#24.182.223':139
- '20#.#24.237.235':139
- '20#.#24.132.63':139
- '20#.#24.235.173':139
- '20#.#24.242.21':445
- '20#.#24.255.115':445
- '20#.#24.135.109':139
- '20#.#24.126.217':445
- '20#.#24.84.248':139
- '20#.#24.143.152':139
- '20#.#24.95.109':139
- '20#.#24.113.93':139
- '20#.#24.33.41':139
- '20#.#24.129.92':139
- '20#.#24.199.142':139
- '20#.#24.31.83':139
- '20#.#24.43.181':139
- '20#.#24.49.240':139
- '20#.#24.86.167':139
- '20#.#24.72.137':139
- '20#.#24.49.69':139
- '20#.#24.50.233':139
- '20#.#24.69.117':139
- '20#.#24.89.54':139
- '20#.#24.71.225':139
- '20#.#24.252.211':139
- '20#.#24.192.203':139
- '20#.#24.24.130':139
- '20#.#24.198.225':139
- '20#.#24.167.198':139
- '20#.#24.143.151':139
- '20#.#24.1.245':139
- '20#.#24.175.84':139
- '20#.#24.220.21':139
- '20#.#24.67.229':139
- '20#.#24.160.214':139
- '20#.#24.129.167':139
- '20#.#24.11.63':139
- '20#.#24.52.12':139
- '20#.#24.140.33':139
- '20#.#24.162.244':139
- '20#.#24.197.52':139
- '20#.#24.189.88':139
- '20#.#24.77.63':139
- '20#.#24.53.177':139
- '20#.#24.136.118':139
- '20#.#24.118.64':139
- '20#.#24.48.88':139
- '20#.#24.105.56':139
- '20#.#24.132.63':445
- '20#.#24.182.223':445
- '20#.#24.33.41':445
- '20#.#24.129.92':445
- '20#.#24.237.235':445
- '20#.#24.34.30':139
- '20#.#24.235.173':445
- '20#.#24.135.109':445
- '20#.#24.95.109':445
- '20#.#24.113.93':445
- '20#.#24.215.229':445
- '20#.#24.159.169':445
- '20#.#24.199.142':445
- '20#.#24.31.83':445
- '20#.#24.84.248':445
- '20#.#24.143.152':445
- '20#.#24.1.162':139
- '20#.#24.57.19':139
- '20#.#24.32.85':139
- '20#.#24.135.119':139
- '20#.#24.49.174':139
- '20#.#24.215.37':139
- '20#.#24.160.55':139
- '20#.#24.73.70':139
- '20#.#24.4.56':139
- '20#.#24.99.150':139
- '20#.#24.160.71':139
- '20#.#24.193.175':139
- '20#.#24.57.194':139
- '20#.#24.166.81':139
- '20#.#24.1.35':139
- '20#.#24.145.160':139
- '20#.#24.206.144':139
- '20#.#24.151.238':139
- '20#.#24.98.237':139
- '20#.#24.232.223':139
- '20#.#24.213.217':139
- '20#.#24.238.60':139
- '20#.#24.17.6':139
- '20#.#24.6.146':139
- '20#.#24.237.6':139
- '20#.#24.10.169':139
- '20#.#24.142.206':139
- '20#.#24.21.51':139
- '20#.#24.112.173':139
- '20#.124.4.1':139
- '20#.#24.162.218':139
- '20#.#24.36.118':139
- '20#.#24.9.51':139
- '20#.#24.17.197':139
- '20#.#24.161.179':445
- '20#.#24.194.145':445
- '20#.#24.126.92':445
- '20#.#24.1.212':445
- '20#.#24.231.151':445
- '20#.#24.66.132':445
- '20#.#24.125.71':445
- '20#.#24.138.153':445
- '20#.#24.227.234':445
- '20#.#24.168.69':445
- '20#.#24.236.119':139
- '20#.#24.248.237':445
- '20#.#24.27.184':445
- '20#.#24.14.106':445
- '20#.#24.204.20':445
- '20#.#24.168.68':445
- '20#.#24.194.145':139
- '20#.#24.125.71':139
- '20#.#24.1.212':139
- '20#.#24.161.179':139
- '20#.#24.66.132':139
- '20#.#24.215.34':139
- '20#.#24.138.153':139
- '20#.#24.231.151':139
- '20#.#24.248.237':139
- '20#.#24.27.184':139
- '20#.#24.227.234':139
- '20#.#24.168.68':139
- '20#.#24.14.106':139
- '20#.#24.126.92':139
- '20#.#24.168.69':139
- '20#.#24.204.20':139
- '20#.#24.176.93':139
- '20#.#24.162.209':139
- '20#.#24.236.67':139
- '20#.#24.92.118':139
- '20#.#24.134.37':139
- '20#.#24.155.108':139
- '20#.#24.3.156':139
- '20#.#24.30.180':139
- '20#.#24.109.92':139
- '20#.#24.255.82':139
- '20#.#24.77.142':139
- '20#.#24.128.176':139
- '20#.#24.25.112':139
- '20#.#24.1.138':139
- '20#.#24.150.92':139
- '20#.#24.130.163':139
- '20#.#24.58.155':139
- '20#.#24.9.51':9988
- '20#.#24.237.6':9988
- '20#.#24.21.51':9988
- '20#.#24.36.118':9988
- '20#.#24.255.115':139
- '20#.#24.28.218':139
- '20#.#24.126.217':139
- '20#.#24.242.21':139
- '20#.#24.236.119':445
- '20#.#24.231.151':9988
- '20#.#24.238.60':445
- '20#.#24.17.197':445
- '20#.#24.150.92':9988
- '20#.#24.109.92':9988
- '20#.#24.204.20':9988
- '20#.#24.176.93':9988
- '20#.#24.182.98':139
- '20#.#24.21.118':139
- '20#.#24.54.69':139
- '20#.#24.207.171':139
- '20#.#24.33.207':139
- '20#.#24.33.196':139
- '20#.#24.162.9':139
- '20#.#24.94.181':139
- '20#.#24.135.179':139
- '20#.#24.70.48':139
- '20#.#24.206.212':139
- '20#.#24.4.64':139
- '20#.#24.240.218':139
- '20#.#24.142.24':139
- '20#.#24.171.142':139
- '20#.#24.238.105':139
- '20#.#24.24.242':139
- '20#.#24.92.118':445
- '20#.#24.134.37':445
- '20#.#24.1.138':445
- '20#.#24.150.92':445
- '20#.#24.30.180':445
- '20#.#24.109.92':445
- '20#.#24.162.209':445
- '20#.#24.236.67':445
- '20#.#24.128.176':445
- '20#.#24.25.112':445
- '20#.#24.215.34':445
- '20#.#24.176.93':445
- '20#.#24.130.163':445
- '20#.#24.58.155':445
- '20#.#24.255.82':445
- '20#.#24.77.142':445
- '20#.#24.155.108':445
- '20#.#24.213.217':445
- '20#.#24.151.238':445
- '20#.#24.162.218':445
- '20#.#24.232.223':445
- '20#.#24.237.6':445
- '20#.#24.17.6':445
- '20#.#24.98.237':445
- '20#.#24.6.146':445
- '20#.#24.112.173':445
- '20#.#24.10.169':445
- '20#.#24.3.156':445
- '20#.#24.21.51':445
- '20#.#24.9.51':445
- '20#.124.4.1':445
- '20#.#24.142.206':445
- '20#.#24.36.118':445