Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#1.228.167':445
- '20#.#1.124.52':445
- '20#.#1.178.1':445
- '20#.#1.27.39':445
- '20#.#1.47.225':445
- '20#.#1.135.51':445
- '20#.81.1.44':445
- '20#.#1.47.24':445
- '20#.#1.194.43':445
- '20#.#1.117.102':445
- '20#.#1.79.123':445
- '20#.#1.147.29':445
- '20#.#1.114.131':445
- '20#.#1.52.201':445
- '20#.#1.131.108':445
- '20#.#1.107.156':445
- '20#.#1.28.22':445
- '20#.#1.70.195':445
- '20#.#1.236.121':445
- '20#.#1.244.15':139
- '20#.#1.48.244':139
- '20#.#1.11.48':139
- '20#.#1.10.104':139
- '20#.#1.48.161':139
- '20#.#1.105.170':139
- '20#.#1.105.171':139
- '20#.#1.254.41':139
- '20#.#1.3.254':139
- '20#.#1.3.181':139
- '20#.#1.111.142':139
- '20#.#1.229.87':139
- '20#.#1.151.135':445
- '20#.#1.166.200':139
- '20#.#1.9.207':139
- '20#.#1.45.103':139
- '20#.#1.127.208':139
- '20#.#1.135.45':139
- '20#.#1.254.145':139
- '20#.#1.3.178':445
- '20#.#1.38.225':445
- '20#.#1.196.242':445
- '20#.#1.164.234':445
- '20#.#1.108.177':445
- '20#.#1.43.169':445
- '20#.#1.52.201':139
- '20#.#1.114.131':139
- '20#.#1.222.241':139
- '20#.#1.3.178':139
- '20#.#1.10.30':445
- '20#.#1.84.67':445
- '20#.#1.121.31':445
- '20#.#1.209.59':445
- '20#.#1.82.115':445
- '20#.#1.149.91':445
- '20#.#1.144.229':445
- '20#.#1.12.100':445
- '20#.#1.202.36':445
- '20#.#1.101.241':445
- '20#.#1.135.51':139
- '20#.#1.194.43':139
- '20#.#1.124.52':139
- '20#.#1.228.167':139
- '20#.#1.47.24':139
- '20#.#1.151.135':139
- '20#.#1.222.241':445
- '20#.#1.47.225':139
- '20#.81.1.44':139
- '20#.#1.27.39':139
- '20#.#1.131.108':139
- '20#.#1.107.156':139
- '20#.#1.147.29':139
- '20#.#1.79.123':139
- '20#.#1.70.195':139
- '20#.#1.117.102':139
- '20#.#1.178.1':139
- '20#.#1.236.121':139
- '20#.#1.28.22':139
- '20#.#1.187.200':139
- '20#.#1.12.232':139
- '20#.#1.141.46':139
- '20#.#1.66.178':139
- '20#.#1.169.189':139
- '20#.#1.255.61':139
- '20#.#1.43.135':139
- '20#.#1.114.43':139
- '20#.#1.239.54':139
- '20#.#1.156.110':139
- '20#.#1.143.152':139
- '20#.#1.148.183':139
- '20#.#1.8.109':139
- '20#.#1.27.96':139
- '20#.81.0.36':139
- '20#.#1.129.187':139
- '20#.#1.148.148':139
- '20#.#1.239.85':139
- '20#.#1.76.130':139
- '20#.#1.13.77':139
- '20#.#1.143.152':445
- '20#.#1.66.178':445
- '20#.#1.148.148':445
- '20#.#1.239.85':445
- '20#.#1.169.189':445
- '20#.#1.255.61':445
- '20#.#1.239.54':445
- '20#.#1.12.232':445
- '20#.#1.141.46':445
- '20#.#1.13.77':445
- '20#.#1.136.175':139
- '20#.#1.27.96':445
- '20#.#1.46.114':139
- '20#.#1.42.151':139
- '20#.81.0.36':445
- '20#.#1.129.187':445
- '20#.#1.76.130':445
- '20#.#1.148.183':445
- '20#.#1.8.109':445
- '20#.#1.135.96':445
- '20#.#1.229.87':445
- '20#.#1.9.207':445
- '20#.#1.166.200':445
- '20#.#1.111.142':445
- '20#.#1.135.45':445
- '20#.#1.127.208':445
- '20#.#1.3.181':445
- '20#.#1.254.145':445
- '20#.#1.45.103':445
- '20#.#1.135.96':139
- '20#.#1.54.76':139
- '20#.#1.25.209':139
- '20#.#1.41.62':139
- '20#.#1.135.119':139
- '20#.#1.7.127':139
- '20#.#1.70.38':139
- '20#.#1.57.90':139
- '20#.#1.19.152':139
- '20#.#1.249.138':139
- '20#.#1.54.76':445
- '20#.#1.25.209':445
- '20#.#1.41.62':445
- '20#.#1.135.119':445
- '20#.#1.7.127':445
- '20#.#1.249.138':445
- '20#.#1.57.90':445
- '20#.#1.19.152':445
- '20#.#1.70.38':445
- '20#.#1.187.200':445
- '20#.#1.244.15':445
- '20#.#1.48.244':445
- '20#.#1.11.48':445
- '20#.#1.10.104':445
- '20#.#1.48.161':445
- '20#.#1.105.170':445
- '20#.#1.105.171':445
- '20#.#1.254.41':445
- '20#.#1.3.254':445
- '20#.81.43.4':445
- '20#.81.68.8':445
- '20#.#1.132.2':445
- '20#.#1.243.139':139
- '20#.#1.117.134':139
- '20#.#1.108.22':445
- '20#.#1.125.56':445
- '20#.#1.31.163':445
- '20#.#1.7.177':445
- '20#.#1.176.240':445
- '20#.#1.58.91':139
- '20#.#1.158.154':139
- '20#.#1.154.32':139
- '20#.#1.36.169':139
- '20#.#1.6.155':139
- '20#.#1.130.32':139
- '20#.#1.29.244':139
- '20#.#1.202.66':139
- '20#.#1.116.140':139
- '20#.81.68.6':139
- '20#.#1.165.214':445
- '20#.#1.225.230':445
- '20#.#1.200.25':445
- '20#.#1.172.71':445
- '20#.#1.102.38':445
- '20#.81.2.1':445
- '20#.#1.151.180':445
- '20#.#1.11.241':445
- '20#.#1.243.110':445
- '20#.#1.132.54':445
- '20#.#1.14.20':445
- '20#.#1.208.218':445
- '20#.#1.39.242':445
- '20#.#1.223.45':445
- '20#.#1.140.147':445
- '20#.81.65.5':445
- '20#.#1.54.64':445
- '20#.#1.244.78':445
- '20#.#1.4.205':445
- '20#.#1.168.163':139
- '20#.#1.244.78':139
- '20#.#1.4.205':139
- '20#.#1.208.218':139
- '20#.#1.140.147':139
- '20#.81.65.5':139
- '20#.#1.200.25':139
- '20#.#1.172.71':139
- '20#.#1.54.64':139
- '20#.#1.132.54':139
- '20#.#1.14.20':139
- '20#.#1.176.240':139
- '20#.#1.108.22':139
- '20#.81.68.8':139
- '20#.#1.7.177':139
- '20#.#1.132.2':139
- '20#.#1.39.242':139
- '20#.#1.223.45':139
- '20#.#1.125.56':139
- '20#.#1.31.163':139
- '20#.#1.204.57':139
- '20#.#1.18.148':139
- '20#.#1.103.103':139
- '20#.81.6.26':139
- '20#.#1.18.204':139
- '20#.#1.5.124':139
- '20#.#1.163.164':139
- '20#.#1.164.219':139
- '20#.#1.60.123':139
- '20#.#1.159.52':139
- '20#.#1.102.38':139
- '20#.#1.11.241':139
- '20#.#1.165.214':139
- '20#.#1.225.230':139
- '20#.#1.243.110':139
- '20#.#1.166.29':139
- '20#.#1.133.165':139
- '20#.81.2.1':139
- '20#.#1.151.180':139
- '20#.#1.166.29':445
- '20#.#1.84.67':139
- '20#.#1.121.31':139
- '20#.#1.209.59':139
- '20#.#1.82.115':139
- '20#.#1.149.91':139
- '20#.#1.144.229':139
- '20#.#1.12.100':139
- '20#.#1.202.36':139
- '20#.#1.101.241':139
- '20#.81.43.4':139
- '20#.#1.38.125':139
- '20#.#1.174.50':139
- '20#.#1.209.146':139
- '20#.#1.46.116':139
- '20#.#1.146.25':139
- '20#.#1.113.193':139
- '20#.#1.247.201':139
- '20#.#1.185.146':139
- '20#.#1.156.185':139
- '20#.#1.38.125':445
- '20#.#1.174.50':445
- '20#.#1.209.146':445
- '20#.#1.46.116':445
- '20#.#1.146.25':445
- '20#.#1.113.193':445
- '20#.#1.247.201':445
- '20#.#1.185.146':445
- '20#.#1.156.185':445
- '20#.#1.242.248':445
- '20#.#1.108.177':139
- '20#.#1.38.225':139
- '20#.#1.10.30':139
- '20#.#1.164.234':139
- '20#.#1.196.242':139
- '20#.#1.122.52':445
- '20#.#1.50.70':445
- '20#.#1.43.169':139
- '20#.#1.21.50':445
- '20#.#1.242.248':139
- '20#.#1.36.169':445
- '20#.#1.6.155':445
- '20#.#1.163.164':445
- '20#.#1.168.163':445
- '20#.#1.158.154':445
- '20#.#1.116.140':445
- '20#.81.68.6':445
- '20#.#1.154.32':445
- '20#.#1.130.32':445
- '20#.#1.5.124':445
- '20#.#1.103.103':445
- '20#.81.6.26':445
- '20#.#1.133.165':445
- '20#.#1.159.52':445
- '20#.#1.204.57':445
- '20#.#1.164.219':445
- '20#.#1.60.123':445
- '20#.#1.18.148':445
- '20#.#1.18.204':445
- '20#.#1.11.241':9988
- '20#.#1.168.163':9988
- '20#.#1.225.230':9988
- '20#.#1.102.38':9988
- '20#.#1.36.169':9988
- '20#.#1.122.52':139
- '20#.#1.50.70':139
- '20#.#1.6.155':9988
- '20#.#1.21.50':139
- '20#.#1.165.214':9988
- '20#.#1.58.91':445
- '20#.#1.243.139':445
- '20#.#1.29.244':445
- '20#.#1.202.66':445
- '20#.#1.117.134':445
- '20#.#1.132.54':9988
- '20#.#1.172.71':9988
- '20#.#1.108.22':9988
- '20#.#1.244.78':9988