Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#13.16.44':139
- '22#.#13.206.208':445
- '22#.#13.209.48':445
- '22#.#13.206.208':139
- '22#.#13.16.44':445
- '22#.#13.71.168':139
- '22#.#13.190.199':139
- '22#.#13.36.60':139
- '22#.#13.221.171':139
- '22#.#13.110.226':445
- '22#.#13.147.53':445
- '22#.#13.251.202':445
- '22#.#13.42.250':445
- '22#.#13.205.151':445
- '22#.#13.36.242':445
- '22#.#13.0.23':445
- '22#.#13.119.253':445
- '22#.#13.247.30':445
- '22#.#13.126.119':445
- '22#.#13.15.139':139
- '22#.#13.255.35':139
- '22#.#13.107.44':139
- '22#.#13.165.209':139
- '22#.#13.126.61':139
- '22#.#13.154.137':139
- '22#.#13.167.154':139
- '22#.#13.247.37':139
- '22#.#13.137.247':139
- '22#.#13.154.197':139
- '22#.#13.231.148':139
- '22#.#13.202.231':139
- '22#.#13.224.155':139
- '22#.#13.121.125':139
- '22#.#13.5.230':139
- '22#.#13.106.133':139
- '22#.#13.34.167':139
- '22#.#13.165.106':139
- '22#.#13.21.179':139
- '22#.#13.81.17':445
- '22#.#13.127.199':445
- '22#.#13.215.178':445
- '22#.#13.17.140':445
- '22#.#13.239.128':445
- '22#.#13.24.27':445
- '22#.#13.48.24':445
- '22#.#13.85.239':445
- '22#.#13.173.106':445
- '22#.#13.33.224':445
- '22#.#13.35.110':445
- '22#.#13.153.35':445
- '22#.#13.34.246':445
- '22#.#13.110.34':445
- '22#.#13.211.152':445
- '22#.#13.182.211':445
- '22#.#13.126.76':445
- '22#.#13.235.114':445
- '22#.#13.34.11':445
- '22#.#13.150.165':445
- '22#.#13.56.5':445
- '22#.#13.150.211':445
- '22#.#13.104.5':445
- '22#.#13.46.56':445
- '22#.#13.180.44':445
- '22#.#13.151.117':445
- '22#.#13.224.45':445
- '22#.#13.44.224':445
- '22#.#13.16.126':445
- '22#.#13.39.127':445
- '22#.#13.75.185':445
- '22#.#13.238.60':445
- '22#.#13.192.113':445
- '22#.#13.224.152':445
- '22#.#13.94.101':445
- '22#.#13.121.94':445
- '22#.#13.249.112':445
- '22#.#13.41.212':445
- '22#.#13.73.168':139
- '22#.#13.49.143':445
- '22#.#13.217.73':445
- '22#.#13.73.168':445
- '22#.#13.130.66':445
- '22#.#13.0.178':445
- '22#.#13.134.107':445
- '22#.#13.16.114':445
- '22#.#13.65.174':445
- '22#.#13.134.151':445
- '22#.#13.167.154':445
- '22#.#13.165.209':445
- '22#.#13.15.139':445
- '22#.#13.154.197':445
- '22#.#13.107.44':445
- '22#.#13.255.35':445
- '22#.#13.137.247':445
- '22#.#13.154.137':445
- '22#.#13.126.61':445
- '22#.#13.247.37':445
- '22#.#13.152.231':445
- '22#.#13.18.88':445
- '22#.#13.81.115':445
- '22#.#13.97.198':445
- '22#.#13.43.22':445
- '22#.#13.12.21':139
- '22#.#13.234.229':139
- '22#.#13.240.231':445
- '22#.#13.51.26':445
- '22#.#13.123.240':445
- '22#.#13.199.244':445
- '22#.#13.75.222':445
- '22#.#13.117.176':445
- '22#.#13.163.213':445
- '22#.#13.159.251':445
- '22#.#13.132.81':445
- '22#.#13.5.139':445
- '22#.#13.8.91':445
- '22#.#13.44.201':445
- '22#.#13.159.251':139
- '22#.#13.8.91':139
- '22#.#13.199.244':139
- '22#.#13.75.222':139
- '22#.#13.44.201':139
- '22#.#13.123.240':139
- '22#.#13.81.115':139
- '22#.#13.132.81':139
- '22#.#13.5.139':139
- '22#.#13.163.213':139
- '22#.#13.217.73':139
- '22#.#13.0.178':139
- '22#.#13.130.66':139
- '22#.#13.49.143':139
- '22#.#13.65.174':139
- '22#.#13.16.114':139
- '22#.#13.117.176':139
- '22#.#13.134.151':139
- '22#.#13.134.107':139
- '22#.#13.231.148':445
- '22#.#13.202.231':445
- '22#.#13.224.155':445
- '22#.#13.121.125':445
- '22#.#13.5.230':445
- '22#.#13.106.133':445
- '22#.#13.34.167':445
- '22#.#13.165.106':445
- '22#.#13.21.179':445
- '22#.#13.190.199':445
- '22#.#13.18.88':139
- '22#.#13.43.22':139
- '22#.#13.97.198':139
- '22#.#13.152.231':139
- '22#.#13.240.231':139
- '22#.#13.221.171':445
- '22#.#13.71.168':445
- '22#.#13.51.26':139
- '22#.#13.36.60':445
- '22#.#13.70.86':139
- '22#.#13.166.48':445
- '22#.#13.192.186':139
- '22#.#13.215.137':139
- '22#.#13.122.7':445
- '22#.#13.1.150':445
- '22#.#13.13.199':445
- '22#.#13.215.11':445
- '22#.#13.205.101':445
- '22#.#13.202.225':139
- '22#.#13.251.177':139
- '22#.#13.138.186':139
- '22#.#13.192.193':139
- '22#.#13.66.227':139
- '22#.#13.59.162':139
- '22#.#13.62.170':139
- '22#.#13.225.202':139
- '22#.#13.193.8':139
- '22#.#13.243.83':139
- '22#.#13.111.108':445
- '22#.#13.52.125':445
- '22#.#13.182.230':445
- '22#.#13.78.147':445
- '22#.#13.61.98':445
- '22#.#13.115.52':445
- '22#.#13.111.218':445
- '22#.#13.166.38':445
- '22#.#13.246.87':445
- '22#.#13.74.138':445
- '22#.#13.134.6':445
- '22#.#13.160.24':445
- '22#.#13.53.164':445
- '22#.#13.1.65':445
- '22#.#13.188.149':445
- '22#.#13.143.207':445
- '22#.#13.155.205':445
- '22#.#13.100.138':445
- '22#.#13.207.239':445
- '22#.#13.207.239':139
- '22#.#13.143.207':139
- '22#.#13.188.149':139
- '22#.#13.100.138':139
- '22#.#13.155.205':139
- '22#.#13.78.147':139
- '22#.#13.111.108':139
- '22#.#13.74.138':139
- '22#.#13.182.230':139
- '22#.#13.160.24':139
- '22#.#13.1.150':139
- '22#.#13.122.7':139
- '22#.#13.215.11':139
- '22#.#13.166.48':139
- '22#.#13.205.101':139
- '22#.#13.1.65':139
- '22#.#13.134.6':139
- '22#.#13.13.199':139
- '22#.#13.53.164':139
- '22#.#13.167.136':139
- '22#.213.0.1':139
- '22#.#13.126.88':139
- '22#.#13.136.126':139
- '22#.#13.67.109':139
- '22#.#13.170.231':139
- '22#.#13.142.95':139
- '22#.#13.232.13':139
- '22#.#13.228.198':139
- '22#.#13.164.244':139
- '22#.#13.166.38':139
- '22#.#13.115.52':139
- '22#.#13.52.125':139
- '22#.#13.61.98':139
- '22#.#13.246.87':139
- '22#.#13.11.219':139
- '22#.#13.82.102':139
- '22#.#13.111.218':139
- '22#.#13.101.131':139
- '22#.#13.101.131':445
- '22#.#13.224.152':139
- '22#.#13.249.112':139
- '22#.#13.39.127':139
- '22#.#13.75.185':139
- '22#.#13.41.212':139
- '22#.#13.16.126':139
- '22#.#13.150.211':139
- '22#.#13.94.101':139
- '22#.#13.121.94':139
- '22#.#13.192.113':139
- '22#.#13.127.199':139
- '22#.#13.239.128':139
- '22#.#13.17.140':139
- '22#.#13.81.17':139
- '22#.#13.85.239':139
- '22#.#13.48.24':139
- '22#.#13.238.60':139
- '22#.#13.173.106':139
- '22#.#13.24.27':139
- '22#.#13.36.242':139
- '22#.#13.247.30':139
- '22#.#13.147.53':139
- '22#.#13.251.202':139
- '22#.#13.126.119':139
- '22#.#13.110.226':139
- '22#.#13.209.48':139
- '22#.#13.0.23':139
- '22#.#13.119.253':139
- '22#.#13.205.151':139
- '22#.#13.56.5':139
- '22#.#13.46.56':139
- '22#.#13.104.5':139
- '22#.#13.150.165':139
- '22#.#13.224.45':139
- '22#.#13.42.250':139
- '22#.#13.151.117':139
- '22#.#13.44.224':139
- '22#.#13.180.44':139
- '22#.#13.192.193':445
- '22#.#13.66.227':445
- '22#.#13.170.231':445
- '22#.#13.142.95':445
- '22#.#13.138.186':445
- '22#.#13.193.8':445
- '22#.#13.243.83':445
- '22#.#13.251.177':445
- '22#.#13.59.162':445
- '22#.#13.228.198':445
- '22#.#13.164.244':445
- '22#.#13.126.88':445
- '22#.#13.11.219':445
- '22#.#13.82.102':445
- '22#.#13.136.126':445
- '22#.#13.232.13':445
- '22#.#13.67.109':445
- '22#.#13.167.136':445
- '22#.213.0.1':445
- '22#.#13.211.152':139
- '22#.#13.235.114':139
- '22#.#13.35.110':139
- '22#.#13.153.35':139
- '22#.#13.34.11':139
- '22#.#13.33.224':139
- '22#.#13.215.178':139
- '22#.#13.182.211':139
- '22#.#13.126.76':139
- '22#.#13.110.34':139
- '22#.#13.202.225':445
- '22#.#13.192.186':445
- '22#.#13.62.170':445
- '22#.#13.225.202':445
- '22#.#13.215.137':445
- '22#.#13.78.147':9988
- '22#.#13.34.246':139
- '22#.#13.70.86':445
- '22#.#13.143.207':9988