Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '14#.#16.230.83':445
- '14#.#16.67.99':445
- '14#.#16.62.200':445
- '14#.#16.156.62':445
- '14#.#16.25.48':445
- '14#.#16.207.214':445
- '14#.#16.47.106':445
- '14#.#16.13.214':445
- '14#.#16.146.214':445
- '14#.#16.77.164':445
- '14#.#16.247.11':445
- '14#.#16.249.30':445
- '14#.#16.144.154':445
- '14#.#16.86.242':445
- '14#.#16.162.77':445
- '14#.#16.154.161':445
- '14#.#16.83.168':445
- '14#.#16.47.174':445
- '14#.#16.50.122':445
- '14#.#16.33.30':445
- '14#.#16.249.19':445
- '14#.#16.214.14':445
- '14#.#16.231.213':445
- '14#.#16.102.120':445
- '14#.#16.26.74':445
- '14#.#16.106.111':445
- '14#.#16.141.69':445
- '14#.#16.4.110':445
- '14#.#16.111.76':445
- '14#.#16.150.94':445
- '14#.#16.115.14':445
- '14#.#16.170.13':445
- '14#.#16.118.158':445
- '14#.#16.47.174':139
- '14#.#16.102.120':139
- '14#.#16.249.19':139
- '14#.#16.50.122':139
- '14#.#16.231.213':139
- '14#.#16.100.46':139
- '14#.#16.26.74':139
- '14#.#16.214.14':139
- '14#.#16.141.69':139
- '14#.#16.170.13':139
- '14#.#16.111.76':139
- '14#.#16.106.111':139
- '14#.#16.115.14':139
- '14#.#16.33.30':139
- '14#.#16.118.158':139
- '14#.#16.150.94':139
- '14#.#16.148.242':139
- '14#.#16.63.178':139
- '14#.#16.139.63':139
- '14#.#16.231.224':139
- '14#.#16.114.137':139
- '14#.#16.49.147':445
- '14#.#16.234.245':445
- '14#.#16.165.90':139
- '14#.#16.221.18':445
- '14#.#16.93.74':139
- '14#.#16.112.155':139
- '14#.#16.19.92':139
- '14#.#16.21.29':139
- '14#.#16.133.182':139
- '14#.#16.224.119':139
- '14#.#16.191.101':139
- '14#.#16.11.104':139
- '14#.#16.182.19':139
- '14#.#16.61.182':139
- '14#.#16.137.151':139
- '14#.#16.190.125':139
- '14#.#16.161.120':139
- '14#.#16.27.118':139
- '14#.#16.61.61':139
- '14#.#16.171.95':139
- '14#.#16.202.250':139
- '14#.#16.43.248':139
- '14#.#16.2.38':139
- '14#.#16.71.150':139
- '14#.#16.54.244':139
- '14#.#16.61.54':139
- '14#.#16.101.35':139
- '14#.#16.11.132':139
- '14#.#16.13.31':139
- '14#.#16.86.240':139
- '14#.#16.1.112':139
- '14#.#16.76.173':139
- '14#.#16.236.64':139
- '14#.#16.209.110':139
- '14#.#16.15.147':139
- '14#.#16.96.228':139
- '14#.#16.10.239':139
- '14#.#16.0.145':139
- '14#.#16.96.0':139
- '14#.#16.73.244':139
- '14#.#16.145.8':139
- '14#.#16.84.155':139
- '14#.#16.73.223':139
- '14#.#16.120.95':139
- '14#.#16.131.119':139
- '14#.#16.231.224':445
- '14#.#16.114.137':445
- '14#.#16.133.182':445
- '14#.#16.224.119':445
- '14#.#16.165.90':445
- '14#.#16.170.201':139
- '14#.#16.63.178':445
- '14#.#16.139.63':445
- '14#.#16.19.92':445
- '14#.#16.21.29':445
- '14#.#16.100.46':445
- '14#.#16.148.242':445
- '14#.#16.191.101':445
- '14#.#16.11.104':445
- '14#.#16.93.74':445
- '14#.#16.112.155':445
- '14#.#16.216.170':139
- '14#.#16.102.45':139
- '14#.#16.39.105':139
- '14#.#16.87.201':139
- '14#.#16.191.68':139
- '14#.#16.187.161':139
- '14#.#16.37.197':139
- '14#.#16.94.57':139
- '14#.#16.22.214':139
- '14#.#16.125.27':139
- '14#.#16.166.117':139
- '14#.#16.134.89':139
- '14#.#16.159.218':139
- '14#.#16.150.139':139
- '14#.#16.135.142':139
- '14#.#16.226.31':139
- '14#.#16.168.128':139
- '14#.#16.51.248':139
- '14#.#16.202.19':139
- '14#.#16.212.229':139
- '14#.#16.243.212':139
- '14#.#16.22.122':139
- '14#.#16.54.227':139
- '14#.#16.65.155':139
- '14#.#16.99.235':139
- '14#.#16.83.37':139
- '14#.#16.182.215':139
- '14#.#16.82.45':139
- '14#.#16.204.81':139
- '14#.#16.104.151':139
- '14#.#16.230.23':139
- '14#.#16.118.221':139
- '14#.#16.156.177':139
- '14#.#16.43.251':139
- '14#.#16.17.169':445
- '14#.#16.24.202':445
- '14#.#16.112.52':445
- '14#.#16.77.112':445
- '14#.#16.139.41':445
- '14#.#16.6.50':445
- '14#.#16.222.13':445
- '14#.#16.75.26':445
- '14#.#16.106.83':445
- '14#.#16.154.92':445
- '14#.#16.83.125':139
- '14#.#16.84.202':445
- '14#.#16.236.79':445
- '14#.#16.32.39':445
- '14#.#16.137.48':445
- '14#.#16.22.169':445
- '14#.#16.24.202':139
- '14#.#16.222.13':139
- '14#.#16.77.112':139
- '14#.#16.17.169':139
- '14#.#16.6.50':139
- '14#.#16.246.42':139
- '14#.#16.75.26':139
- '14#.#16.139.41':139
- '14#.#16.236.79':139
- '14#.#16.22.169':139
- '14#.#16.84.202':139
- '14#.#16.154.92':139
- '14#.#16.32.39':139
- '14#.#16.112.52':139
- '14#.#16.106.83':139
- '14#.#16.137.48':139
- '14#.#16.41.90':139
- '14#.#16.219.140':139
- '14#.#16.79.142':139
- '14#.#16.123.52':139
- '14#.#16.148.1':139
- '14#.#16.13.210':139
- '14#.#16.45.17':139
- '14#.#16.135.251':139
- '14#.#16.253.214':139
- '14#.#16.34.20':139
- '14#.#16.81.198':139
- '14#.#16.248.103':139
- '14#.#16.239.1':139
- '14#.#16.197.35':139
- '14#.#16.42.75':139
- '14#.#16.170.240':139
- '14#.#16.97.236':139
- '14#.#16.51.248':9988
- '14#.#16.22.122':9988
- '14#.#16.148.1':9988
- '14#.#16.135.251':9988
- '14#.#16.234.245':139
- '14#.#16.247.11':139
- '14#.#16.221.18':139
- '14#.#16.49.147':139
- '14#.#16.83.125':445
- '14#.#16.137.48':9988
- '14#.#16.54.227':445
- '14#.#16.43.251':445
- '14#.#16.170.240':9988
- '14#.#16.219.140':9988
- '14#.#16.139.41':9988
- '14#.#16.75.26':9988
- '14#.#16.249.30':139
- '14#.#16.47.106':139
- '14#.#16.13.214':139
- '14#.#16.230.83':139
- '14#.#16.67.99':139
- '14#.#16.83.168':139
- '14#.#16.4.110':139
- '14#.#16.25.48':139
- '14#.#16.207.214':139
- '14#.#16.162.77':139
- '14#.#16.154.161':139
- '14#.#16.146.214':139
- '14#.#16.77.164':139
- '14#.#16.62.200':139
- '14#.#16.156.62':139
- '14#.#16.144.154':139
- '14#.#16.86.242':139
- '14#.#16.123.52':445
- '14#.#16.148.1':445
- '14#.#16.197.35':445
- '14#.#16.42.75':445
- '14#.#16.135.251':445
- '14#.#16.253.214':445
- '14#.#16.219.140':445
- '14#.#16.79.142':445
- '14#.#16.248.103':445
- '14#.#16.239.1':445
- '14#.#16.246.42':445
- '14#.#16.41.90':445
- '14#.#16.170.240':445
- '14#.#16.97.236':445
- '14#.#16.34.20':445
- '14#.#16.81.198':445
- '14#.#16.13.210':445
- '14#.#16.243.212':445
- '14#.#16.51.248':445
- '14#.#16.230.23':445
- '14#.#16.212.229':445
- '14#.#16.99.235':445
- '14#.#16.22.122':445
- '14#.#16.202.19':445
- '14#.#16.65.155':445
- '14#.#16.204.81':445
- '14#.#16.83.37':445
- '14#.#16.45.17':445
- '14#.#16.82.45':445
- '14#.#16.156.177':445
- '14#.#16.104.151':445
- '14#.#16.182.215':445
- '14#.#16.118.221':445