Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '89.##3.183.222':445
- '89.##3.11.242':445
- '89.##3.228.83':445
- '89.##3.47.97':445
- '89.##3.166.15':445
- '89.##3.171.242':445
- '89.##3.0.118':445
- '89.##3.71.70':445
- '89.##3.40.176':445
- '89.##3.219.129':445
- '89.#53.4.24':445
- '89.##3.30.170':445
- '89.##3.51.167':445
- '89.##3.34.64':445
- '89.##3.215.104':445
- '89.##3.167.47':445
- '89.##3.248.171':445
- '89.##3.138.55':445
- '89.##3.169.7':445
- '89.##3.122.168':445
- '89.##3.133.128':445
- '89.##3.12.134':445
- '89.##3.235.236':445
- '89.##3.218.217':445
- '89.##3.142.219':445
- '89.##3.170.91':445
- '89.##3.10.128':445
- '89.##3.219.10':445
- '89.##3.129.156':445
- '89.##3.7.185':445
- '89.##3.161.223':445
- '89.##3.47.162':445
- '89.##3.230.211':445
- '89.##3.235.236':139
- '89.##3.218.217':139
- '89.##3.248.171':139
- '89.##3.138.55':139
- '89.##3.88.12':139
- '89.##3.95.88':139
- '89.##3.133.128':139
- '89.##3.12.134':139
- '89.##3.161.223':139
- '89.##3.47.162':139
- '89.##3.142.219':139
- '89.##3.170.91':139
- '89.##3.169.7':139
- '89.##3.122.168':139
- '89.##3.129.156':139
- '89.##3.7.185':139
- '89.##3.152.135':139
- '89.##3.240.87':139
- '89.##3.13.149':139
- '89.##3.97.43':139
- '89.#53.43.6':445
- '89.##3.209.42':445
- '89.##3.173.160':139
- '89.##3.71.240':445
- '89.##3.185.178':139
- '89.##3.230.10':139
- '89.##3.50.80':139
- '89.##3.130.187':139
- '89.##3.147.33':139
- '89.##3.211.220':139
- '89.##3.70.230':139
- '89.##3.171.70':139
- '89.##3.88.12':445
- '89.##3.232.250':139
- '89.##3.101.242':139
- '89.##3.150.83':139
- '89.##3.105.150':139
- '89.##3.100.193':139
- '89.##3.120.223':139
- '89.##3.105.48':139
- '89.##3.25.125':139
- '89.##3.237.61':139
- '89.##3.189.152':139
- '89.##3.61.182':139
- '89.##3.19.49':139
- '89.##3.116.164':139
- '89.##3.83.116':139
- '89.##3.188.2':139
- '89.##3.164.48':139
- '89.##3.97.145':139
- '89.##3.170.106':139
- '89.##3.15.184':139
- '89.##3.118.214':139
- '89.##3.53.112':139
- '89.##3.21.140':139
- '89.##3.24.25':139
- '89.##3.112.126':139
- '89.##3.77.97':139
- '89.##3.142.172':139
- '89.##3.147.120':139
- '89.##3.96.147':139
- '89.##3.168.143':139
- '89.##3.102.116':139
- '89.##3.15.86':139
- '89.##3.108.119':139
- '89.##3.161.160':139
- '89.##3.97.43':445
- '89.##3.152.135':445
- '89.##3.211.220':445
- '89.##3.13.149':445
- '89.##3.108.34':139
- '89.##3.29.111':139
- '89.##3.240.87':445
- '89.##3.173.160':445
- '89.##3.130.187':445
- '89.##3.185.178':445
- '89.##3.95.88':445
- '89.##3.50.80':445
- '89.##3.171.70':445
- '89.##3.147.33':445
- '89.##3.230.10':445
- '89.##3.70.230':445
- '89.##3.80.126':139
- '89.##3.95.22':139
- '89.##3.1.142':139
- '89.##3.211.79':139
- '89.##3.81.115':139
- '89.##3.179.33':139
- '89.##3.171.94':139
- '89.##3.195.75':139
- '89.##3.160.30':139
- '89.##3.98.51':139
- '89.##3.87.53':139
- '89.##3.156.4':139
- '89.##3.117.143':139
- '89.##3.64.224':139
- '89.##3.176.53':139
- '89.##3.30.254':139
- '89.##3.219.10':139
- '89.##3.160.3':139
- '89.##3.101.117':139
- '89.##3.47.50':139
- '89.##3.56.248':139
- '89.##3.62.105':139
- '89.##3.129.19':139
- '89.##3.175.238':139
- '89.##3.7.114':139
- '89.##3.12.64':139
- '89.##3.160.72':139
- '89.##3.93.79':139
- '89.##3.240.62':139
- '89.##3.237.119':139
- '89.##3.85.105':139
- '89.##3.92.160':139
- '89.##3.31.92':139
- '89.#53.32.8':445
- '89.##3.202.85':445
- '89.##3.160.4':445
- '89.##3.25.160':445
- '89.##3.85.219':445
- '89.##3.191.175':445
- '89.##3.8.134':445
- '89.##3.83.38':445
- '89.#53.4.15':445
- '89.##3.45.50':445
- '89.##3.57.225':139
- '89.##3.26.188':139
- '89.#53.0.0':445
- '89.##3.4.166':445
- '89.##3.89.36':445
- '89.##3.15.168':445
- '89.##3.127.215':139
- '89.##3.8.134':139
- '89.##3.83.38':139
- '89.#53.32.8':139
- '89.##3.202.85':139
- '89.##3.54.196':139
- '89.##3.48.109':139
- '89.##3.85.219':139
- '89.##3.191.175':139
- '89.#53.4.15':139
- '89.##3.45.50':139
- '89.##3.89.36':139
- '89.#53.0.0':139
- '89.##3.160.4':139
- '89.##3.25.160':139
- '89.##3.15.168':139
- '89.##3.4.166':139
- '89.##3.142.5':139
- '89.##3.99.140':139
- '89.##3.77.58':139
- '89.##3.5.125':139
- '89.##3.177.147':139
- '89.##3.41.249':139
- '89.##3.31.21':139
- '89.##3.148.53':139
- '89.##3.33.211':139
- '89.##3.93.11':139
- '89.##3.216.66':139
- '89.##3.105.156':139
- '89.##3.87.47':139
- '89.##3.206.40':139
- '89.##3.67.207':139
- '89.##3.242.163':139
- '89.##3.54.196':445
- '89.##3.57.225':9988
- '89.##3.71.240':139
- '89.##3.15.168':9988
- '89.##3.7.114':9988
- '89.##3.230.211':139
- '89.#53.4.24':139
- '89.#53.43.6':139
- '89.##3.209.42':139
- '89.##3.26.188':445
- '89.##3.99.140':9988
- '89.##3.129.19':445
- '89.##3.57.225':445
- '89.##3.77.58':9988
- '89.##3.85.105':9988
- '89.##3.8.134':9988
- '89.##3.160.4':9988
- '89.##3.11.242':139
- '89.##3.0.118':139
- '89.##3.47.97':139
- '89.##3.183.222':139
- '89.##3.171.242':139
- '89.##3.10.128':139
- '89.##3.71.70':139
- '89.##3.166.15':139
- '89.##3.219.129':139
- '89.##3.215.104':139
- '89.##3.30.170':139
- '89.##3.40.176':139
- '89.##3.34.64':139
- '89.##3.228.83':139
- '89.##3.167.47':139
- '89.##3.51.167':139
- '89.##3.62.105':445
- '89.##3.5.125':445
- '89.##3.142.5':445
- '89.##3.206.40':445
- '89.##3.77.58':445
- '89.##3.148.53':445
- '89.##3.177.147':445
- '89.##3.99.140':445
- '89.##3.31.21':445
- '89.##3.105.156':445
- '89.##3.33.211':445
- '89.##3.48.109':445
- '89.##3.216.66':445
- '89.##3.242.163':445
- '89.##3.87.47':445
- '89.##3.93.11':445
- '89.##3.67.207':445
- '89.##3.47.50':445
- '89.##3.56.248':445
- '89.##3.85.105':445
- '89.##3.237.119':445
- '89.##3.175.238':445
- '89.##3.7.114':445
- '89.##3.160.3':445
- '89.##3.101.117':445
- '89.##3.93.79':445
- '89.##3.240.62':445
- '89.##3.41.249':445
- '89.##3.127.215':445
- '89.##3.92.160':445
- '89.##3.31.92':445
- '89.##3.12.64':445
- '89.##3.160.72':445