Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#20.89.160':445
- '20#.#20.7.123':445
- '20#.#20.107.111':139
- '20#.#20.89.160':139
- '20#.#20.247.95':445
- '20#.#20.107.111':445
- '20#.#20.164.208':139
- '20#.#20.122.187':445
- '20#.#20.186.240':445
- '20#.#20.122.176':445
- '20#.#20.55.227':445
- '20#.#20.164.1':445
- '20#.#20.176.112':445
- '20#.#20.240.83':445
- '20#.#20.7.123':139
- '20#.#20.247.95':139
- '20#.#20.186.240':139
- '20#.#20.122.187':139
- '20#.#20.90.40':139
- '20#.#20.15.47':139
- '20#.#20.0.224':139
- '20#.#20.29.163':139
- '20#.#20.11.219':139
- '20#.#20.100.101':139
- '20#.#20.22.102':139
- '20#.#20.154.180':139
- '20#.#20.172.178':139
- '20#.#20.68.23':139
- '20#.#20.181.36':139
- '20#.#20.128.127':139
- '20#.#20.123.55':139
- '20#.#20.35.184':139
- '20#.#20.77.30':139
- '20#.#20.245.74':139
- '20#.#20.250.154':139
- '20#.#20.7.75':139
- '20#.#20.182.184':139
- '20#.#20.190.133':445
- '20#.#20.152.244':445
- '20#.#20.248.163':445
- '20#.#20.241.206':445
- '20#.#20.4.136':445
- '20#.#20.79.47':445
- '20#.#20.209.73':445
- '20#.#20.25.65':445
- '20#.#20.238.156':445
- '20#.#20.29.238':445
- '20#.#20.26.178':445
- '20#.#20.4.184':445
- '20#.#20.162.6':445
- '20#.#20.8.189':445
- '20#.#20.253.155':445
- '20#.#20.117.36':445
- '20#.#20.206.116':445
- '20#.#20.205.228':445
- '20#.#20.36.206':445
- '20#.#20.172.230':445
- '20#.#20.100.23':445
- '20#.#20.98.99':445
- '20#.#20.16.203':445
- '20#.#20.143.232':445
- '20#.#20.17.150':445
- '20#.#20.32.143':445
- '20#.#20.243.5':445
- '20#.#20.241.134':445
- '20#.#20.209.188':445
- '20#.#20.54.109':445
- '20#.#20.220.2':445
- '20#.#20.43.85':445
- '20#.#20.196.107':445
- '20#.#20.50.33':445
- '20#.#20.82.94':445
- '20#.#20.114.174':445
- '20#.#20.81.238':445
- '20#.#20.205.215':445
- '20#.#20.137.32':139
- '20#.#20.36.153':445
- '20#.#20.4.170':445
- '20#.#20.8.103':445
- '20#.#20.17.228':445
- '20#.#20.106.123':445
- '20#.#20.143.222':445
- '20#.#20.250.143':445
- '20#.#20.226.48':445
- '20#.#20.222.228':445
- '20#.#20.172.178':445
- '20#.#20.68.23':445
- '20#.#20.0.224':445
- '20#.#20.100.101':445
- '20#.#20.22.102':445
- '20#.#20.57.122':445
- '20#.#20.162.88':445
- '20#.#20.154.180':445
- '20#.#20.137.32':445
- '20#.#20.49.251':445
- '20#.#20.241.14':445
- '20#.#20.55.150':139
- '20#.#20.219.35':445
- '20#.#20.14.187':445
- '20#.#20.7.71':139
- '20#.#20.130.42':139
- '20#.#20.128.130':139
- '20#.#20.188.207':139
- '20#.#20.34.193':139
- '20#.#20.240.191':445
- '20#.#20.46.29':445
- '20#.#20.78.49':445
- '20#.#20.88.166':445
- '20#.#20.147.46':445
- '20#.#20.60.226':445
- '20#.#20.39.210':445
- '20#.#20.183.32':445
- '20#.#20.184.192':445
- '20#.#20.15.47':445
- '20#.#20.49.251':139
- '20#.#20.78.49':139
- '20#.#20.143.222':139
- '20#.#20.250.143':139
- '20#.#20.88.166':139
- '20#.#20.147.46':139
- '20#.#20.183.32':139
- '20#.#20.240.191':139
- '20#.#20.46.29':139
- '20#.#20.8.103':139
- '20#.#20.17.228':139
- '20#.#20.162.88':139
- '20#.#20.57.122':139
- '20#.#20.36.153':139
- '20#.#20.226.48':139
- '20#.#20.222.228':139
- '20#.#20.106.123':139
- '20#.#20.4.170':139
- '20#.#20.184.192':139
- '20#.#20.77.30':445
- '20#.#20.7.75':445
- '20#.#20.181.36':445
- '20#.#20.128.127':445
- '20#.#20.182.184':445
- '20#.#20.29.163':445
- '20#.#20.11.219':445
- '20#.#20.245.74':445
- '20#.#20.250.154':445
- '20#.#20.219.35':139
- '20#.#20.14.187':139
- '20#.#20.60.226':139
- '20#.#20.39.210':139
- '20#.#20.241.14':139
- '20#.#20.123.55':445
- '20#.#20.90.40':445
- '20#.#20.164.208':445
- '20#.#20.35.184':445
- '20#.#20.5.247':445
- '20#.#20.49.144':139
- '20#.#20.51.29':139
- '20#.#20.154.111':139
- '20#.#20.101.171':139
- '20#.#20.7.146':445
- '20#.#20.10.114':445
- '20#.#20.13.240':445
- '20#.#20.201.250':445
- '20#.#20.218.215':445
- '20#.#20.51.82':139
- '20#.#20.74.109':139
- '20#.#20.195.58':139
- '20#.#20.2.169':139
- '20#.#20.62.17':139
- '20#.#20.11.126':139
- '20#.#20.9.39':139
- '20#.#20.51.152':139
- '20#.#20.126.51':139
- '20#.#20.106.124':445
- '20#.#20.222.220':445
- '20#.#20.109.168':445
- '20#.#20.91.137':445
- '20#.#20.208.101':445
- '20#.#20.228.187':445
- '20#.#20.242.74':445
- '20#.#20.5.219':445
- '20#.#20.93.208':445
- '20#.#20.194.18':445
- '20#.#20.173.218':445
- '20#.#20.125.251':445
- '20#.#20.250.203':445
- '20#.#20.197.68':445
- '20#.#20.124.85':445
- '20#.#20.123.165':445
- '20#.#20.71.249':445
- '20#.#20.175.147':445
- '20#.#20.175.37':445
- '20#.#20.146.116':139
- '20#.#20.175.147':139
- '20#.#20.175.37':139
- '20#.#20.125.251':139
- '20#.#20.124.85':139
- '20#.#20.123.165':139
- '20#.#20.208.101':139
- '20#.#20.222.220':139
- '20#.#20.71.249':139
- '20#.#20.91.137':139
- '20#.#20.10.114':139
- '20#.#20.7.146':139
- '20#.#20.106.124':139
- '20#.#20.197.68':139
- '20#.#20.250.203':139
- '20#.#20.13.240':139
- '20#.#20.173.218':139
- '20#.#20.201.250':139
- '20#.#20.218.215':139
- '20#.#20.109.168':139
- '20#.#20.251.42':139
- '20#.#20.107.17':139
- '20#.#20.68.119':139
- '20#.#20.236.27':139
- '20#.#20.75.184':139
- '20#.#20.252.203':139
- '20#.#20.146.252':139
- '20#.#20.127.226':139
- '20#.#20.50.184':139
- '20#.#20.194.18':139
- '20#.#20.242.74':139
- '20#.#20.228.187':139
- '20#.#20.93.208':139
- '20#.#20.5.219':139
- '20#.#20.70.145':139
- '20#.#20.119.17':139
- '20#.#20.95.245':139
- '20#.#20.227.5':139
- '20#.#20.95.245':445
- '20#.#20.172.230':139
- '20#.#20.43.85':139
- '20#.#20.209.73':139
- '20#.#20.25.65':139
- '20#.#20.196.107':139
- '20#.#20.50.33':139
- '20#.#20.81.238':139
- '20#.#20.54.109':139
- '20#.#20.220.2':139
- '20#.#20.241.206':139
- '20#.#20.4.136':139
- '20#.#20.117.36':139
- '20#.#20.206.116':139
- '20#.#20.152.244':139
- '20#.#20.238.156':139
- '20#.#20.29.238':139
- '20#.#20.248.163':139
- '20#.#20.79.47':139
- '20#.#20.205.215':139
- '20#.#20.190.133':139
- '20#.#20.164.1':139
- '20#.#20.32.143':139
- '20#.#20.243.5':139
- '20#.#20.176.112':139
- '20#.#20.240.83':139
- '20#.#20.161.133':445
- '20#.#20.122.176':139
- '20#.#20.55.227':139
- '20#.#20.16.203':139
- '20#.#20.143.232':139
- '20#.#20.82.94':139
- '20#.#20.114.174':139
- '20#.#20.100.23':139
- '20#.#20.241.134':139
- '20#.#20.209.188':139
- '20#.#20.98.99':139
- '20#.#20.17.150':139
- '20#.#20.36.206':139
- '20#.#20.146.252':445
- '20#.#20.146.116':445
- '20#.#20.50.184':445
- '20#.#20.252.203':445
- '20#.#20.195.58':445
- '20#.#20.74.109':445
- '20#.#20.62.17':445
- '20#.#20.2.169':445
- '20#.#20.51.82':445
- '20#.#20.70.145':445
- '20#.#20.68.119':445
- '20#.#20.227.5':445
- '20#.#20.119.17':445
- '20#.#20.236.27':445
- '20#.#20.75.184':445
- '20#.#20.127.226':445
- '20#.#20.251.42':445
- '20#.#20.107.17':445
- '20#.#20.51.152':445
- '20#.#20.5.247':139
- '20#.#20.162.6':139
- '20#.#20.49.144':9988
- '20#.#20.161.133':139
- '20#.#20.8.189':139
- '20#.#20.253.155':139
- '20#.#20.205.228':139
- '20#.#20.26.178':139
- '20#.#20.4.184':139
- '20#.#20.9.39':445
- '20#.#20.154.111':445
- '20#.#20.126.51':445
- '20#.#20.11.126':445
- '20#.#20.101.171':445
- '20#.#20.173.218':9988
- '20#.#20.51.152':9988
- '20#.#20.49.144':445
- '20#.#20.51.29':445