Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '82.##4.103.159':445
- '82.##4.40.51':445
- '82.##4.67.72':445
- '82.##4.70.25':445
- '82.##4.110.180':445
- '82.##4.120.220':445
- '82.##4.120.176':445
- '82.##4.89.178':445
- '82.##4.250.1':445
- '82.##4.46.168':445
- '82.#34.37.0':445
- '82.##4.225.235':445
- '82.##4.13.91':445
- '82.##4.30.13':445
- '82.##4.211.251':445
- '82.##4.213.19':445
- '82.##4.39.128':445
- '82.##4.0.253':445
- '82.##4.16.194':445
- '82.##4.105.133':445
- '82.##4.49.151':445
- '82.##4.106.128':445
- '82.##4.117.84':445
- '82.##4.24.117':445
- '82.##4.20.129':445
- '82.##4.27.208':445
- '82.##4.188.22':445
- '82.##4.248.161':445
- '82.##4.94.19':445
- '82.##4.118.94':445
- '82.##4.126.90':445
- '82.##4.136.158':445
- '82.##4.156.98':445
- '82.##4.117.84':139
- '82.##4.24.117':139
- '82.##4.39.128':139
- '82.##4.0.253':139
- '82.##4.32.157':139
- '82.##4.219.96':139
- '82.##4.49.151':139
- '82.##4.106.128':139
- '82.##4.126.90':139
- '82.##4.136.158':139
- '82.##4.20.129':139
- '82.##4.27.208':139
- '82.##4.16.194':139
- '82.##4.105.133':139
- '82.##4.94.19':139
- '82.##4.118.94':139
- '82.##4.93.135':139
- '82.##4.251.160':139
- '82.#34.4.25':139
- '82.##4.38.23':139
- '82.##4.24.254':445
- '82.##4.166.190':445
- '82.##4.152.152':139
- '82.##4.178.227':445
- '82.##4.54.31':139
- '82.##4.211.108':139
- '82.##4.29.219':139
- '82.##4.115.252':139
- '82.##4.110.234':139
- '82.##4.171.198':139
- '82.##4.199.214':139
- '82.##4.156.114':139
- '82.##4.32.157':445
- '82.##4.191.43':139
- '82.##4.40.183':139
- '82.#34.90.7':139
- '82.##4.43.90':139
- '82.##4.92.109':139
- '82.##4.101.4':139
- '82.##4.76.149':139
- '82.##4.214.6':139
- '82.##4.215.234':139
- '82.##4.232.2':139
- '82.##4.112.104':139
- '82.##4.246.112':139
- '82.##4.44.74':139
- '82.##4.7.103':139
- '82.##4.96.231':139
- '82.##4.67.196':139
- '82.##4.198.178':139
- '82.##4.13.195':139
- '82.##4.176.70':139
- '82.##4.90.197':139
- '82.##4.56.132':139
- '82.##4.75.56':139
- '82.##4.145.111':139
- '82.##4.0.211':139
- '82.##4.52.241':139
- '82.##4.231.71':139
- '82.##4.165.230':139
- '82.##4.225.49':139
- '82.##4.35.225':139
- '82.##4.96.122':139
- '82.##4.41.62':139
- '82.##4.53.37':139
- '82.##4.78.132':139
- '82.##4.38.23':445
- '82.##4.93.135':445
- '82.##4.171.198':445
- '82.#34.4.25':445
- '82.##4.148.25':139
- '82.#34.1.15':139
- '82.##4.251.160':445
- '82.##4.152.152':445
- '82.##4.115.252':445
- '82.##4.54.31':445
- '82.##4.219.96':445
- '82.##4.29.219':445
- '82.##4.156.114':445
- '82.##4.110.234':445
- '82.##4.211.108':445
- '82.##4.199.214':445
- '82.##4.16.241':139
- '82.##4.35.17':139
- '82.##4.125.191':139
- '82.##4.240.198':139
- '82.##4.139.86':139
- '82.##4.190.92':139
- '82.##4.193.224':139
- '82.##4.252.154':139
- '82.##4.88.242':139
- '82.##4.90.233':139
- '82.##4.13.229':139
- '82.##4.30.172':139
- '82.##4.102.59':139
- '82.##4.87.102':139
- '82.##4.25.67':139
- '82.##4.134.141':139
- '82.##4.188.22':139
- '82.##4.201.225':139
- '82.##4.67.133':139
- '82.##4.112.201':139
- '82.##4.41.177':139
- '82.##4.242.192':139
- '82.##4.39.39':139
- '82.##4.63.131':139
- '82.#34.20.3':139
- '82.##4.71.140':139
- '82.##4.93.115':139
- '82.##4.64.169':139
- '82.##4.35.12':139
- '82.##4.102.62':139
- '82.##4.227.101':139
- '82.##4.19.84':139
- '82.##4.41.107':139
- '82.##4.199.132':445
- '82.##4.111.250':445
- '82.##4.43.139':445
- '82.##4.158.194':445
- '82.##4.211.6':445
- '82.##4.93.109':445
- '82.##4.46.181':445
- '82.##4.7.109':445
- '82.##4.77.196':445
- '82.##4.2.232':445
- '82.##4.243.32':139
- '82.##4.226.243':139
- '82.#34.55.3':445
- '82.##4.108.113':445
- '82.##4.232.65':445
- '82.##4.242.203':445
- '82.##4.169.65':139
- '82.##4.46.181':139
- '82.##4.7.109':139
- '82.##4.199.132':139
- '82.##4.111.250':139
- '82.##4.198.116':139
- '82.##4.231.66':139
- '82.##4.211.6':139
- '82.##4.93.109':139
- '82.##4.2.232':139
- '82.##4.77.196':139
- '82.##4.232.65':139
- '82.##4.108.113':139
- '82.##4.158.194':139
- '82.##4.43.139':139
- '82.##4.242.203':139
- '82.#34.55.3':139
- '82.##4.62.51':139
- '82.##4.150.214':139
- '82.##4.156.183':139
- '82.##4.243.6':139
- '82.##4.12.111':139
- '82.##4.66.91':139
- '82.##4.127.3':139
- '82.##4.19.94':139
- '82.##4.85.225':139
- '82.##4.246.85':139
- '82.##4.158.115':139
- '82.##4.13.54':139
- '82.##4.255.163':139
- '82.##4.183.148':139
- '82.##4.161.245':139
- '82.##4.90.29':139
- '82.##4.198.116':445
- '82.#34.20.3':9988
- '82.##4.178.227':139
- '82.##4.64.169':9988
- '82.##4.112.201':9988
- '82.##4.156.98':139
- '82.#34.37.0':139
- '82.##4.24.254':139
- '82.##4.166.190':139
- '82.##4.243.32':445
- '82.#34.55.3':9988
- '82.##4.39.39':445
- '82.##4.226.243':445
- '82.##4.158.115':9988
- '82.##4.66.91':9988
- '82.##4.242.203':9988
- '82.##4.13.54':9988
- '82.##4.40.51':139
- '82.##4.120.176':139
- '82.##4.67.72':139
- '82.##4.103.159':139
- '82.##4.120.220':139
- '82.##4.248.161':139
- '82.##4.89.178':139
- '82.##4.110.180':139
- '82.##4.250.1':139
- '82.##4.211.251':139
- '82.##4.225.235':139
- '82.##4.46.168':139
- '82.##4.30.13':139
- '82.##4.70.25':139
- '82.##4.213.19':139
- '82.##4.13.91':139
- '82.##4.242.192':445
- '82.##4.243.6':445
- '82.##4.62.51':445
- '82.##4.183.148':445
- '82.##4.156.183':445
- '82.##4.19.94':445
- '82.##4.12.111':445
- '82.##4.150.214':445
- '82.##4.127.3':445
- '82.##4.13.54':445
- '82.##4.85.225':445
- '82.##4.231.66':445
- '82.##4.158.115':445
- '82.##4.90.29':445
- '82.##4.255.163':445
- '82.##4.246.85':445
- '82.##4.161.245':445
- '82.##4.227.101':445
- '82.##4.41.177':445
- '82.##4.102.62':445
- '82.##4.112.201':445
- '82.##4.67.133':445
- '82.#34.20.3':445
- '82.##4.201.225':445
- '82.##4.63.131':445
- '82.##4.64.169':445
- '82.##4.35.12':445
- '82.##4.66.91':445
- '82.##4.169.65':445
- '82.##4.19.84':445
- '82.##4.41.107':445
- '82.##4.71.140':445
- '82.##4.93.115':445