Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#73.161.109':445
- '22#.#73.79.125':445
- '22#.#73.221.148':445
- '22#.#73.145.206':445
- '22#.#73.108.37':445
- '22#.#73.116.165':445
- '22#.#73.97.116':445
- '22#.#73.38.97':445
- '22#.#73.33.87':445
- '22#.#73.204.243':445
- '22#.#73.217.140':445
- '22#.#73.81.211':445
- '22#.#73.188.13':445
- '22#.#73.9.188':445
- '22#.#73.104.204':445
- '22#.#73.14.105':445
- '22#.#73.13.144':445
- '22#.#73.217.214':445
- '22#.#73.13.114':445
- '22#.#73.20.61':445
- '22#.#73.13.83':445
- '22#.#73.118.181':445
- '22#.#73.112.168':445
- '22#.#73.111.34':445
- '22#.#73.68.244':445
- '22#.#73.220.68':445
- '22#.#73.38.129':445
- '22#.#73.61.102':445
- '22#.#73.19.168':445
- '22#.#73.53.121':445
- '22#.#73.215.141':445
- '22#.#73.72.132':445
- '22#.#73.107.123':445
- '22#.#73.112.168':139
- '22#.#73.111.34':139
- '22#.#73.13.144':139
- '22#.#73.217.214':139
- '22#.#73.182.28':139
- '22#.#73.206.240':139
- '22#.#73.13.83':139
- '22#.#73.118.181':139
- '22#.#73.215.141':139
- '22#.#73.72.132':139
- '22#.#73.68.244':139
- '22#.#73.220.68':139
- '22#.#73.13.114':139
- '22#.#73.20.61':139
- '22#.#73.19.168':139
- '22#.#73.53.121':139
- '22#.#73.223.18':139
- '22#.#73.166.49':139
- '22#.#73.17.10':139
- '22#.#73.182.102':139
- '22#.#73.107.212':445
- '22#.#73.114.152':445
- '22#.#73.128.166':139
- '22#.#73.109.53':445
- '22#.#73.24.28':139
- '22#.#73.51.200':139
- '22#.#73.100.207':139
- '22#.#73.23.177':139
- '22#.#73.109.86':139
- '22#.#73.176.109':139
- '22#.#73.65.75':139
- '22#.#73.86.179':139
- '22#.#73.182.28':445
- '22#.#73.212.170':139
- '22#.#73.67.212':139
- '22#.#73.52.60':139
- '22#.#73.170.78':139
- '22#.#73.125.29':139
- '22#.#73.59.115':139
- '22#.#73.114.12':139
- '22#.#73.107.152':139
- '22#.#73.92.247':139
- '22#.#73.57.125':139
- '22#.#73.19.167':139
- '22#.#73.27.190':139
- '22#.#73.58.166':139
- '22#.#73.193.128':139
- '22#.#73.245.243':139
- '22#.#73.209.36':139
- '22#.#73.54.231':139
- '22#.#73.211.225':139
- '22#.#73.217.128':139
- '22#.#73.210.119':139
- '22#.#73.214.203':139
- '22#.#73.151.114':139
- '22#.#73.23.181':139
- '22#.#73.203.23':139
- '22#.#73.26.105':139
- '22#.#73.105.52':139
- '22#.#73.69.74':139
- '22#.#73.151.69':139
- '22#.#73.240.101':139
- '22#.#73.6.240':139
- '22#.#73.38.149':139
- '22#.#73.102.38':139
- '22#.#73.55.223':139
- '22#.#73.182.102':445
- '22#.#73.223.18':445
- '22#.#73.176.109':445
- '22#.#73.17.10':445
- '22#.#73.51.97':139
- '22#.#73.13.180':139
- '22#.#73.166.49':445
- '22#.#73.128.166':445
- '22#.#73.23.177':445
- '22#.#73.24.28':445
- '22#.#73.206.240':445
- '22#.#73.100.207':445
- '22#.#73.86.179':445
- '22#.#73.109.86':445
- '22#.#73.51.200':445
- '22#.#73.65.75':445
- '22#.#73.112.91':139
- '22#.#73.38.112':139
- '22#.#73.101.212':139
- '22#.#73.151.118':139
- '22#.#73.112.194':139
- '22#.#73.37.44':139
- '22#.#73.150.167':139
- '22#.#73.79.124':139
- '22#.#73.140.121':139
- '22#.#73.194.192':139
- '22#.#73.147.193':139
- '22#.#73.136.103':139
- '22#.#73.239.131':139
- '22#.#73.160.186':139
- '22#.#73.240.98':139
- '22#.#73.5.57':139
- '22#.#73.46.10':139
- '22#.#73.68.132':139
- '22#.#73.135.22':139
- '22#.#73.250.134':139
- '22#.#73.139.12':139
- '22#.#73.108.186':139
- '22#.#73.23.171':139
- '22#.#73.111.238':139
- '22#.#73.5.224':139
- '22#.#73.84.95':139
- '22#.#73.219.96':139
- '22#.#73.223.218':139
- '22#.#73.69.177':139
- '22#.#73.22.109':139
- '22#.#73.41.252':139
- '22#.#73.77.145':139
- '22#.#73.162.186':445
- '22#.#73.107.175':445
- '22#.#73.178.73':445
- '22#.#73.58.164':445
- '22#.#73.57.49':445
- '22#.#73.105.130':445
- '22#.#73.183.137':445
- '22#.#73.28.71':445
- '22#.#73.118.26':445
- '22#.#73.48.117':445
- '22#.#73.35.246':139
- '22#.#73.185.190':139
- '22#.#73.21.175':445
- '22#.#73.148.22':445
- '22#.#73.60.220':445
- '22#.#73.211.251':445
- '22#.#73.96.68':139
- '22#.#73.183.137':139
- '22#.#73.28.71':139
- '22#.#73.162.186':139
- '22#.#73.107.175':139
- '22#.#73.4.157':139
- '22#.#73.152.117':139
- '22#.#73.57.49':139
- '22#.#73.105.130':139
- '22#.#73.60.220':139
- '22#.#73.211.251':139
- '22#.#73.118.26':139
- '22#.#73.48.117':139
- '22#.#73.178.73':139
- '22#.#73.58.164':139
- '22#.#73.21.175':139
- '22#.#73.148.22':139
- '22#.#73.252.199':139
- '22#.#73.251.175':139
- '22#.#73.148.136':139
- '22#.#73.205.194':139
- '22#.#73.0.164':139
- '22#.#73.56.97':139
- '22#.#73.88.140':139
- '22#.#73.238.87':139
- '22#.#73.244.154':139
- '22#.#73.54.9':139
- '22#.#73.200.233':139
- '22#.#73.132.79':139
- '22#.#73.57.209':139
- '22#.#73.196.86':139
- '22#.#73.67.216':139
- '22#.#73.210.62':139
- '22#.#73.4.157':445
- '22#.#73.109.53':139
- '22#.#73.107.212':139
- '22#.#73.22.109':9988
- '22#.#73.111.238':9988
- '22#.#73.217.140':139
- '22#.#73.81.211':139
- '22#.#73.114.152':139
- '22#.#73.107.123':139
- '22#.#73.185.190':445
- '22#.#73.107.175':9988
- '22#.#73.108.186':445
- '22#.#73.35.246':445
- '22#.#73.200.233':9988
- '22#.#73.251.175':9988
- '22#.#73.162.186':9988
- '22#.#73.21.175':9988
- '22#.#73.97.116':139
- '22#.#73.38.97':139
- '22#.#73.161.109':139
- '22#.#73.79.125':139
- '22#.#73.38.129':139
- '22#.#73.61.102':139
- '22#.#73.108.37':139
- '22#.#73.116.165':139
- '22#.#73.104.204':139
- '22#.#73.14.105':139
- '22#.#73.33.87':139
- '22#.#73.204.243':139
- '22#.#73.221.148':139
- '22#.#73.145.206':139
- '22#.#73.188.13':139
- '22#.#73.9.188':139
- '22#.#73.139.12':445
- '22#.#73.205.194':445
- '22#.#73.252.199':445
- '22#.#73.196.86':445
- '22#.#73.148.136':445
- '22#.#73.238.87':445
- '22#.#73.0.164':445
- '22#.#73.251.175':445
- '22#.#73.88.140':445
- '22#.#73.132.79':445
- '22#.#73.244.154':445
- '22#.#73.152.117':445
- '22#.#73.200.233':445
- '22#.#73.210.62':445
- '22#.#73.57.209':445
- '22#.#73.54.9':445
- '22#.#73.67.216':445
- '22#.#73.22.109':445
- '22#.#73.250.134':445
- '22#.#73.69.177':445
- '22#.#73.135.22':445
- '22#.#73.23.171':445
- '22#.#73.111.238':445
- '22#.#73.46.10':445
- '22#.#73.68.132':445
- '22#.#73.219.96':445
- '22#.#73.223.218':445
- '22#.#73.56.97':445
- '22#.#73.96.68':445
- '22#.#73.41.252':445
- '22#.#73.77.145':445
- '22#.#73.5.224':445
- '22#.#73.84.95':445