Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '61.##6.112.147':445
- '61.#46.9.6':445
- '61.##6.30.171':445
- '61.##6.53.199':445
- '61.##6.10.165':445
- '61.##6.53.241':445
- '61.##6.235.119':445
- '61.##6.164.231':445
- '61.##6.180.200':445
- '61.##6.9.205':445
- '61.##6.128.59':445
- '61.##6.44.34':445
- '61.##6.65.20':445
- '61.##6.176.185':445
- '61.##6.155.51':445
- '61.##6.158.219':445
- '61.##6.223.7':445
- '61.##6.209.152':445
- '61.##6.227.199':445
- '61.##6.35.228':445
- '61.##6.125.27':445
- '61.##6.4.125':445
- '61.##6.93.209':445
- '61.##6.27.94':445
- '61.##6.126.111':445
- '61.##6.92.126':445
- '61.##6.179.225':445
- '61.##6.208.114':445
- '61.##6.218.221':445
- '61.##6.0.210':445
- '61.##6.107.224':445
- '61.##6.150.216':445
- '61.##6.160.119':445
- '61.##6.93.209':139
- '61.##6.27.94':139
- '61.##6.223.7':139
- '61.##6.209.152':139
- '61.##6.177.123':139
- '61.##6.148.218':139
- '61.##6.125.27':139
- '61.##6.4.125':139
- '61.##6.107.224':139
- '61.##6.150.216':139
- '61.##6.126.111':139
- '61.##6.92.126':139
- '61.##6.227.199':139
- '61.##6.35.228':139
- '61.##6.218.221':139
- '61.##6.0.210':139
- '61.##6.99.63':139
- '61.##6.98.55':139
- '61.##6.133.235':139
- '61.##6.124.74':139
- '61.##6.137.159':445
- '61.##6.7.219':445
- '61.##6.202.143':139
- '61.##6.80.190':445
- '61.##6.214.17':139
- '61.##6.61.214':139
- '61.##6.79.250':139
- '61.##6.54.79':139
- '61.#46.52.3':139
- '61.##6.205.144':139
- '61.##6.172.61':139
- '61.##6.29.172':139
- '61.##6.177.123':445
- '61.##6.147.76':139
- '61.##6.146.228':139
- '61.##6.149.144':139
- '61.##6.141.83':139
- '61.##6.229.111':139
- '61.##6.124.152':139
- '61.##6.171.129':139
- '61.##6.111.248':139
- '61.##6.43.124':139
- '61.##6.30.104':139
- '61.##6.180.159':139
- '61.##6.103.47':139
- '61.##6.255.202':139
- '61.##6.173.124':139
- '61.##6.90.135':139
- '61.##6.203.224':139
- '61.##6.157.18':139
- '61.##6.19.95':139
- '61.##6.141.193':139
- '61.##6.131.23':139
- '61.##6.170.74':139
- '61.##6.138.117':139
- '61.##6.176.18':139
- '61.##6.56.207':139
- '61.##6.122.192':139
- '61.##6.210.75':139
- '61.##6.246.218':139
- '61.##6.191.247':139
- '61.##6.210.65':139
- '61.##6.147.91':139
- '61.##6.119.233':139
- '61.#46.7.30':139
- '61.##6.133.82':139
- '61.##6.124.74':445
- '61.##6.99.63':445
- '61.##6.205.144':445
- '61.##6.133.235':445
- '61.##6.86.67':139
- '61.##6.189.86':139
- '61.##6.98.55':445
- '61.##6.202.143':445
- '61.##6.54.79':445
- '61.##6.214.17':445
- '61.##6.148.218':445
- '61.##6.79.250':445
- '61.##6.29.172':445
- '61.#46.52.3':445
- '61.##6.61.214':445
- '61.##6.172.61':445
- '61.##6.111.250':139
- '61.##6.141.123':139
- '61.##6.206.54':139
- '61.##6.249.205':139
- '61.##6.129.183':139
- '61.##6.127.183':139
- '61.##6.24.172':139
- '61.##6.184.24':139
- '61.##6.28.175':139
- '61.##6.24.231':139
- '61.##6.240.216':139
- '61.##6.134.99':139
- '61.##6.215.37':139
- '61.##6.54.165':139
- '61.#46.2.25':139
- '61.##6.150.2':139
- '61.##6.114.175':139
- '61.##6.27.120':139
- '61.##6.96.158':139
- '61.##6.49.226':139
- '61.##6.51.176':139
- '61.##6.154.185':139
- '61.##6.20.93':139
- '61.##6.128.116':139
- '61.##6.142.235':139
- '61.#46.19.3':139
- '61.##6.224.194':139
- '61.##6.128.167':139
- '61.##6.14.93':139
- '61.##6.41.178':139
- '61.##6.202.211':139
- '61.##6.33.98':139
- '61.##6.77.127':445
- '61.##6.125.174':445
- '61.##6.116.143':445
- '61.##6.157.189':445
- '61.##6.206.186':445
- '61.##6.11.55':445
- '61.##6.167.237':445
- '61.##6.118.47':445
- '61.##6.7.135':445
- '61.##6.100.187':445
- '61.##6.62.31':139
- '61.##6.17.215':139
- '61.##6.0.149':445
- '61.##6.15.136':445
- '61.##6.149.90':445
- '61.##6.111.171':445
- '61.##6.148.141':139
- '61.##6.118.47':139
- '61.##6.167.237':139
- '61.##6.77.127':139
- '61.##6.125.174':139
- '61.##6.189.42':139
- '61.##6.233.15':139
- '61.##6.206.186':139
- '61.##6.11.55':139
- '61.##6.15.136':139
- '61.##6.111.171':139
- '61.##6.0.149':139
- '61.##6.149.90':139
- '61.##6.116.143':139
- '61.##6.157.189':139
- '61.##6.100.187':139
- '61.##6.7.135':139
- '61.##6.230.4':139
- '61.##6.69.95':139
- '61.##6.3.139':139
- '61.##6.229.137':139
- '61.##6.80.17':139
- '61.##6.38.39':139
- '61.##6.147.230':139
- '61.##6.134.147':139
- '61.##6.242.223':139
- '61.##6.207.242':139
- '61.##6.24.95':139
- '61.##6.184.235':139
- '61.#46.53.8':139
- '61.##6.161.52':139
- '61.##6.227.207':139
- '61.##6.158.228':139
- '61.##6.189.42':445
- '61.##6.80.190':139
- '61.##6.137.159':139
- '61.##6.134.147':9988
- '61.##6.62.31':9988
- '61.##6.128.59':139
- '61.##6.44.34':139
- '61.##6.7.219':139
- '61.##6.160.119':139
- '61.##6.17.215':445
- '61.##6.69.95':9988
- '61.##6.154.185':445
- '61.##6.62.31':445
- '61.##6.3.139':9988
- '61.##6.149.90':9988
- '61.##6.118.47':9988
- '61.##6.147.230':9988
- '61.##6.235.119':139
- '61.##6.164.231':139
- '61.##6.112.147':139
- '61.#46.9.6':139
- '61.##6.179.225':139
- '61.##6.208.114':139
- '61.##6.10.165':139
- '61.##6.53.241':139
- '61.##6.155.51':139
- '61.##6.158.219':139
- '61.##6.180.200':139
- '61.##6.9.205':139
- '61.##6.30.171':139
- '61.##6.53.199':139
- '61.##6.65.20':139
- '61.##6.176.185':139
- '61.##6.51.176':445
- '61.##6.229.137':445
- '61.##6.230.4':445
- '61.##6.161.52':445
- '61.##6.3.139':445
- '61.##6.134.147':445
- '61.##6.80.17':445
- '61.##6.69.95':445
- '61.##6.147.230':445
- '61.##6.24.95':445
- '61.##6.207.242':445
- '61.##6.233.15':445
- '61.##6.184.235':445
- '61.##6.158.228':445
- '61.#46.53.8':445
- '61.##6.242.223':445
- '61.##6.227.207':445
- '61.##6.96.158':445
- '61.##6.49.226':445
- '61.##6.14.93':445
- '61.##6.41.178':445
- '61.##6.20.93':445
- '61.##6.128.116':445
- '61.##6.114.175':445
- '61.##6.27.120':445
- '61.##6.224.194':445
- '61.##6.128.167':445
- '61.##6.38.39':445
- '61.##6.148.141':445
- '61.##6.33.98':445
- '61.##6.202.211':445
- '61.##6.142.235':445
- '61.#46.19.3':445