Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '68.##8.125.26':445
- '68.##8.55.72':445
- '68.##8.43.214':445
- '68.##8.2.188':445
- '68.##8.147.38':445
- '68.##8.200.33':445
- '68.##8.129.214':445
- '68.##8.80.20':445
- '68.##8.34.198':445
- '68.##8.47.152':139
- '68.##8.72.104':139
- '68.##8.19.64':139
- '68.##8.14.231':139
- '68.##8.160.24':445
- '68.##8.198.220':445
- '68.##8.191.43':445
- '68.##8.251.190':445
- '68.##8.86.168':445
- '68.##8.72.104':445
- '68.##8.133.20':139
- '68.##8.14.231':445
- '68.##8.47.152':445
- '68.##8.27.138':139
- '68.##8.119.27':139
- '68.##8.203.132':139
- '68.##8.76.144':139
- '68.##8.19.64':445
- '68.##8.55.154':445
- '68.##8.212.252':445
- '68.##8.181.50':445
- '68.##8.7.114':445
- '68.##8.131.119':445
- '68.##8.46.120':445
- '68.##8.176.54':445
- '68.##8.93.143':445
- '68.##8.46.120':139
- '68.##8.71.169':445
- '68.##8.163.142':445
- '68.##8.61.254':445
- '68.##8.70.108':445
- '68.##8.251.190':139
- '68.##8.160.24':139
- '68.##8.167.92':445
- '68.##8.191.43':139
- '68.##8.46.137':445
- '68.##8.42.127':445
- '68.##8.10.96':445
- '68.##8.85.109':445
- '68.##8.117.132':445
- '68.##8.55.21':445
- '68.##8.4.151':445
- '68.##8.53.84':445
- '68.##8.0.216':445
- '68.##8.198.220':139
- '68.##8.7.114':139
- '68.##8.55.154':139
- '68.##8.86.168':139
- '68.##8.181.50':139
- '68.##8.93.143':139
- '68.##8.131.119':139
- '68.##8.212.252':139
- '68.##8.176.54':139
- '68.##8.200.33':139
- '68.##8.2.188':139
- '68.##8.125.26':139
- '68.##8.34.198':139
- '68.##8.43.214':139
- '68.##8.80.20':139
- '68.##8.147.38':139
- '68.##8.55.72':139
- '68.##8.129.214':139
- '68.##8.243.92':139
- '68.##8.48.51':139
- '68.##8.93.128':139
- '68.##8.115.254':139
- '68.##8.174.132':139
- '68.##8.162.80':139
- '68.##8.155.234':139
- '68.##8.244.92':139
- '68.##8.148.251':445
- '68.##8.130.126':445
- '68.##8.162.174':445
- '68.##8.70.132':445
- '68.##8.96.222':445
- '68.##8.204.11':445
- '68.##8.186.102':445
- '68.##8.212.178':445
- '68.##8.19.186':445
- '68.##8.130.162':139
- '68.##8.117.122':139
- '68.##8.191.174':139
- '68.##8.219.11':139
- '68.##8.214.251':139
- '68.##8.165.98':139
- '68.##8.210.89':139
- '68.##8.144.58':139
- '68.##8.98.139':139
- '68.##8.101.106':139
- '68.##8.11.206':139
- '68.#48.1.80':139
- '68.##8.145.42':139
- '68.##8.76.43':139
- '68.##8.61.125':139
- '68.##8.106.61':139
- '68.##8.116.10':139
- '68.##8.125.116':139
- '68.##8.127.115':445
- '68.##8.70.132':139
- '68.##8.96.222':139
- '68.##8.57.190':139
- '68.##8.127.115':139
- '68.##8.212.178':139
- '68.##8.19.186':139
- '68.##8.130.126':139
- '68.##8.162.174':139
- '68.##8.190.180':139
- '68.##8.228.202':139
- '68.##8.52.145':139
- '68.##8.168.83':139
- '68.##8.9.218':139
- '68.##8.176.14':139
- '68.##8.27.71':139
- '68.##8.105.190':139
- '68.##8.197.82':139
- '68.##8.204.11':139
- '68.##8.105.190':445
- '68.##8.197.82':445
- '68.##8.228.202':445
- '68.##8.52.145':445
- '68.##8.190.180':445
- '68.##8.57.190':445
- '68.##8.176.14':445
- '68.##8.27.71':445
- '68.##8.9.218':445
- '68.##8.133.20':445
- '68.##8.203.132':445
- '68.##8.186.102':139
- '68.##8.148.251':139
- '68.##8.119.27':445
- '68.##8.168.83':445
- '68.##8.76.144':445
- '68.##8.27.138':445
- '68.##8.131.162':445
- '68.##8.12.190':139
- '68.##8.59.158':139
- '68.##8.46.115':139
- '68.##8.207.12':139
- '68.##8.10.55':445
- '68.##8.90.133':445
- '68.##8.134.125':139
- '68.##8.188.86':139
- '68.##8.22.206':139
- '68.#48.2.5':139
- '68.##8.174.236':139
- '68.##8.224.164':139
- '68.##8.152.215':139
- '68.##8.224.251':139
- '68.##8.245.142':139
- '68.##8.53.81':139
- '68.##8.210.110':139
- '68.##8.55.65':445
- '68.##8.5.125':445
- '68.##8.110.155':445
- '68.##8.186.10':445
- '68.##8.120.90':445
- '68.##8.102.202':445
- '68.##8.241.102':445
- '68.##8.67.169':445
- '68.##8.219.90':445
- '68.##8.10.18':445
- '68.##8.144.251':445
- '68.##8.65.193':445
- '68.##8.147.219':445
- '68.##8.155.113':445
- '68.##8.172.122':445
- '68.##8.18.172':445
- '68.##8.25.81':445
- '68.##8.66.20':445
- '68.##8.78.116':139
- '68.##8.10.18':139
- '68.##8.186.10':139
- '68.##8.172.122':139
- '68.##8.18.172':139
- '68.##8.110.155':139
- '68.##8.67.169':139
- '68.##8.120.90':139
- '68.##8.5.125':139
- '68.##8.66.20':139
- '68.##8.144.251':139
- '68.##8.10.55':139
- '68.##8.65.193':139
- '68.##8.147.219':139
- '68.##8.155.113':139
- '68.##8.25.81':139
- '68.##8.55.65':139
- '68.##8.90.133':139
- '68.##8.219.90':139
- '68.##8.205.43':139
- '68.##8.50.54':139
- '68.##8.144.192':139
- '68.##8.246.58':139
- '68.##8.115.21':139
- '68.##8.116.115':139
- '68.##8.107.230':139
- '68.##8.21.253':139
- '68.##8.16.106':139
- '68.##8.111.7':139
- '68.##8.164.126':139
- '68.##8.102.202':139
- '68.##8.241.102':139
- '68.##8.181.174':139
- '68.##8.163.207':139
- '68.##8.90.164':139
- '68.##8.174.90':139
- '68.##8.85.109':139
- '68.##8.117.132':139
- '68.##8.54.130':139
- '68.##8.131.162':139
- '68.##8.53.84':139
- '68.##8.0.216':139
- '68.##8.42.127':139
- '68.##8.10.96':139
- '68.##8.10.171':139
- '68.##8.181.74':139
- '68.##8.69.118':139
- '68.##8.58.51':139
- '68.##8.196.14':139
- '68.##8.80.64':139
- '68.##8.117.81':139
- '68.##8.13.70':139
- '68.##8.164.12':139
- '68.##8.55.21':139
- '68.##8.13.70':445
- '68.##8.164.12':445
- '68.##8.181.74':445
- '68.##8.69.118':445
- '68.##8.10.171':445
- '68.##8.54.130':445
- '68.##8.117.81':445
- '68.##8.80.64':445
- '68.##8.196.14':445
- '68.##8.61.254':139
- '68.##8.70.108':139
- '68.##8.4.151':139
- '68.##8.46.137':139
- '68.##8.167.92':139
- '68.##8.58.51':445
- '68.##8.71.169':139
- '68.##8.163.142':139
- '68.##8.59.158':9988
- '68.##8.107.230':445
- '68.##8.21.253':445
- '68.##8.205.43':445
- '68.##8.50.54':445
- '68.##8.78.116':445
- '68.##8.224.164':445
- '68.##8.115.21':445
- '68.##8.116.115':445
- '68.##8.246.58':445
- '68.##8.90.164':445
- '68.##8.174.90':445
- '68.##8.111.7':445
- '68.##8.164.126':445
- '68.##8.16.106':445
- '68.##8.144.192':445
- '68.##8.181.174':445
- '68.##8.163.207':445
- '68.##8.152.215':445
- '68.##8.134.125':445
- '68.##8.188.86':445
- '68.##8.12.190':445
- '68.##8.59.158':445
- '68.##8.18.172':9988
- '68.##8.115.21':9988
- '68.##8.174.90':9988
- '68.##8.163.207':9988
- '68.##8.207.12':445
- '68.##8.53.81':445
- '68.##8.210.110':445
- '68.##8.174.236':445
- '68.#48.2.5':445
- '68.##8.22.206':445
- '68.##8.46.115':445
- '68.##8.224.251':445
- '68.##8.245.142':445