Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '60.##.111.246':445
- '60.##.159.20':445
- '60.##.227.109':445
- '60.##.117.235':445
- '60.##.235.169':139
- '60.#6.70.74':139
- '60.##.215.30':139
- '60.##.218.141':139
- '60.##.227.161':445
- '60.##.162.21':445
- '60.##.25.121':445
- '60.#6.55.63':445
- '60.##.137.136':445
- '60.##.207.174':445
- '60.#6.22.53':445
- '60.##.174.148':445
- '60.##.117.235':139
- '60.##.159.20':139
- '60.##.174.148':139
- '60.##.227.109':139
- '60.##.133.171':445
- '60.##.202.209':445
- '60.##.111.246':139
- '60.##.84.238':445
- '60.#6.55.63':139
- '60.##.227.161':139
- '60.##.108.198':139
- '60.##.25.121':139
- '60.##.137.136':139
- '60.##.207.174':139
- '60.##.162.21':139
- '60.#6.22.53':139
- '60.##.49.150':139
- '60.##.62.151':139
- '60.#6.85.90':139
- '60.#6.67.20':139
- '60.#6.31.38':139
- '60.##.52.205':139
- '60.##.153.70':139
- '60.##.44.254':139
- '60.#6.67.43':139
- '60.##.224.74':139
- '60.##.49.209':139
- '60.##.187.223':139
- '60.##.83.254':139
- '60.##.208.207':139
- '60.##.35.242':139
- '60.##.13.125':139
- '60.##.157.213':139
- '60.##.215.30':445
- '60.##.124.51':139
- '60.#6.11.32':139
- '60.#6.70.74':445
- '60.##.108.198':445
- '60.##.218.141':445
- '60.##.235.169':445
- '60.##.198.203':139
- '60.#6.63.2':139
- '60.##.233.231':139
- '60.##.187.51':139
- '60.##.75.219':139
- '60.##.145.130':139
- '60.#6.246.4':139
- '60.##.252.195':139
- '60.#6.8.35':139
- '60.#6.34.41':139
- '60.##.232.125':139
- '60.#6.98.18':139
- '60.##.152.40':139
- '60.##.165.74':139
- '60.##.109.44':139
- '60.##.88.141':139
- '60.##.250.41':139
- '60.##.133.171':139
- '60.##.99.140':139
- '60.##.125.248':139
- '60.#6.13.79':139
- '60.##.216.111':139
- '60.##.202.209':139
- '60.##.149.167':139
- '60.##.132.131':139
- '60.##.221.64':139
- '60.##.209.139':139
- '60.##.225.143':139
- '60.##.238.195':139
- '60.##.239.215':139
- '60.##.204.186':139
- '60.##.247.238':139
- '60.##.226.201':139
- '60.##.19.101':139
- '60.##.128.121':139
- '60.##.123.226':139
- '60.##.190.55':139
- '60.##.131.209':139
- '60.##.149.41':139
- '60.##.111.70':139
- '60.##.88.141':445
- '60.#6.8.35':445
- '60.##.165.74':445
- '60.#6.34.41':445
- '60.##.128.121':445
- '60.##.19.101':445
- '60.##.109.44':445
- '60.##.152.40':445
- '60.##.149.167':445
- '60.##.250.41':445
- '60.##.99.140':445
- '60.##.125.248':445
- '60.##.232.125':445
- '60.#6.98.18':445
- '60.#6.13.79':445
- '60.##.216.111':445
- '60.##.204.186':445
- '60.##.221.64':445
- '60.##.239.215':445
- '60.##.95.200':445
- '60.##.247.238':445
- '60.##.84.238':139
- '60.##.225.143':445
- '60.##.132.131':445
- '60.##.226.201':445
- '60.##.149.41':445
- '60.##.123.226':445
- '60.##.111.70':445
- '60.##.238.195':445
- '60.##.209.139':445
- '60.##.190.55':445
- '60.##.131.209':445
- '60.##.215.75':139
- '60.##.22.193':139
- '60.#6.77.17':139
- '60.#6.33.49':139
- '60.##.71.105':139
- '60.##.219.154':139
- '60.##.250.179':139
- '60.##.135.25':139
- '60.#6.35.84':139
- '60.##.92.105':139
- '60.#6.62.86':139
- '60.##.143.35':139
- '60.##.131.117':139
- '60.##.157.229':139
- '60.##.191.30':139
- '60.##.26.222':139
- '60.##.204.249':445
- '60.##.163.83':445
- '60.##.200.162':445
- '60.##.200.200':445
- '60.#6.3.233':445
- '60.##.166.165':445
- '60.##.89.227':445
- '60.##.203.209':445
- '60.##.223.249':139
- '60.#6.32.32':139
- '60.##.154.233':139
- '60.##.199.80':139
- '60.##.31.249':445
- '60.##.236.190':445
- '60.##.114.153':139
- '60.##.82.200':445
- '60.##.250.179':445
- '60.##.135.25':445
- '60.##.215.75':445
- '60.##.22.193':445
- '60.##.114.153':445
- '60.#6.32.32':445
- '60.##.71.105':445
- '60.##.154.233':445
- '60.##.92.105':445
- '60.##.26.222':445
- '60.#6.35.84':445
- '60.##.191.30':445
- '60.#6.77.17':445
- '60.#6.33.49':445
- '60.##.131.117':445
- '60.##.157.229':445
- '60.##.149.98':139
- '60.##.120.246':139
- '60.##.161.248':139
- '60.##.151.198':139
- '60.##.106.103':139
- '60.##.228.224':139
- '60.##.255.11':139
- '60.##.11.152':139
- '60.##.219.154':445
- '60.##.105.123':139
- '60.##.199.80':445
- '60.##.223.249':445
- '60.#6.55.42':139
- '60.##.107.54':139
- '60.##.122.171':139
- '60.##.84.152':139
- '60.##.153.70':445
- '60.##.44.254':445
- '60.##.62.151':445
- '60.##.49.150':445
- '60.##.52.205':445
- '60.#6.246.4':445
- '60.##.233.231':445
- '60.#6.31.38':445
- '60.##.224.74':445
- '60.##.13.125':445
- '60.##.187.223':445
- '60.##.35.242':445
- '60.#6.67.20':445
- '60.##.83.254':445
- '60.##.208.207':445
- '60.#6.85.90':445
- '60.#6.27.7':139
- '60.#6.81.83':139
- '60.##.157.213':445
- '60.##.39.120':139
- '60.##.44.147':139
- '60.##.144.222':139
- '60.##.191.103':139
- '60.##.164.65':139
- '60.##.187.51':445
- '60.##.252.195':445
- '60.#6.63.2':445
- '60.##.198.203':445
- '60.##.145.130':445
- '60.#6.11.32':445
- '60.##.75.219':445
- '60.##.124.51':445
- '60.##.82.200':139
- '60.##.200.200':139
- '60.##.236.190':139
- '60.##.204.249':139
- '60.##.166.165':139
- '60.##.203.209':139
- '60.##.200.162':139
- '60.##.163.83':139
- '60.##.236.233':445
- '60.##.176.105':445
- '60.##.188.78':445
- '60.#6.13.4':445
- '60.##.31.249':139
- '60.##.89.227':139
- '60.##.206.54':445
- '60.##.150.109':445
- '60.##.191.103':445
- '60.##.164.65':445
- '60.#6.27.7':445
- '60.#6.81.83':445
- '60.##.49.209':445
- '60.#6.67.43':445
- '60.##.44.147':445
- '60.##.144.222':445
- '60.#6.3.233':139
- '60.##.236.233':139
- '60.##.188.78':139
- '60.#6.13.4':139
- '60.##.206.54':139
- '60.##.39.120':445
- '60.##.176.105':139
- '60.##.150.109':139
- '60.##.59.236':445
- '60.##.34.136':445
- '60.##.55.129':445
- '60.##.15.216':445
- '60.##.180.74':445
- '60.##.222.24':445
- '60.##.49.249':445
- '60.#6.11.83':445
- '60.##.65.180':445
- '60.##.109.244':445
- '60.##.63.147':445
- '60.#6.59.14':445
- '60.##.27.214':445
- '60.#6.45.94':445
- '60.##.244.53':445
- '60.##.208.160':445
- '60.#6.9.204':445
- '60.##.61.249':445
- '60.##.64.132':445
- '60.##.175.169':445
- '60.##.93.143':445
- '60.##.29.231':445
- '60.##.138.223':445
- '60.#6.222.9':445
- '60.##.170.167':445
- '60.##.53.165':445
- '60.##.194.53':445
- '60.##.73.166':445
- '60.#6.85.45':445
- '60.##.55.220':445
- '60.#6.8.14':445
- '60.##.127.253':445
- '60.##.59.236':9988
- '60.#6.8.14':9988
- '60.##.228.84':139
- '60.##.244.53':9988
- '60.##.175.169':9988
- '60.#6.9.204':9988
- '60.#6.85.45':9988
- '60.##.55.220':9988
- '60.##.215.16':139
- '60.##.213.217':139
- '60.##.219.216':139
- '60.##.216.214':139
- '60.#6.27.70':139
- '60.##.120.138':139
- '60.##.13.240':139
- '60.#6.54.50':139
- '60.##.102.192':445
- '60.##.186.150':445
- '60.##.228.12':9988
- '60.##.247.185':9988
- '60.##.33.124':445
- '60.#6.49.36':445
- '60.##.19.144':445
- '60.#6.35.19':445
- '60.##.116.155':9988
- '60.#6.2.216':9988
- '60.##.138.223':9988
- '60.##.93.143':9988
- '60.##.100.144':9988
- '60.##.127.220':9988
- '60.##.194.238':9988
- '60.##.230.222':9988
- '60.##.55.220':139
- '60.##.64.132':139
- '60.##.127.253':139
- '60.#6.85.45':139
- '60.##.61.249':139
- '60.##.138.223':139
- '60.##.175.169':139
- '60.#6.9.204':139
- '60.##.222.24':139
- '60.##.194.53':139
- '60.#6.11.83':139
- '60.##.180.74':139
- '60.##.53.165':139
- '60.#6.8.14':139
- '60.##.73.166':139
- '60.##.170.167':139
- '60.##.127.220':139
- '60.##.228.12':139
- '60.##.230.222':139
- '60.##.100.144':139
- '60.##.93.247':139
- '60.##.247.185':139
- '60.##.123.105':139
- '60.#6.11.94':139
- '60.##.29.231':139
- '60.##.105.175':139
- '60.#6.222.9':139
- '60.##.93.143':139
- '60.#6.2.216':139
- '60.##.194.238':139
- '60.##.158.232':139
- '60.##.116.155':139
- '60.#6.11.94':445
- '60.##.93.247':445
- '60.##.228.12':445
- '60.##.123.105':445
- '60.##.186.150':139
- '60.##.19.144':139
- '60.##.247.185':445
- '60.##.102.192':139
- '60.##.116.155':445
- '60.#6.2.216':445
- '60.##.105.175':445
- '60.##.158.232':445
- '60.##.100.144':445
- '60.##.127.220':445
- '60.##.194.238':445
- '60.##.230.222':445
- '60.#6.45.94':139
- '60.##.55.129':139
- '60.##.208.160':139
- '60.##.27.214':139
- '60.##.34.136':139
- '60.##.49.249':139
- '60.##.15.216':139
- '60.##.59.236':139
- '60.#6.49.36':139
- '60.##.63.147':139
- '60.#6.35.19':139
- '60.##.33.124':139
- '60.##.109.244':139
- '60.##.244.53':139
- '60.#6.59.14':139
- '60.##.65.180':139
- '60.##.180.234':445
- '60.##.195.156':445
- '60.##.188.28':445
- '60.##.226.39':445
- '60.##.122.27':445
- '60.##.87.198':445
- '60.##.136.153':445
- '60.##.62.180':445
- '60.##.199.191':139
- '60.##.135.14':445
- '60.##.44.119':139
- '60.#6.46.4':139
- '60.#6.44.87':445
- '60.##.165.134':445
- '60.##.217.206':445
- '60.##.25.163':445
- '60.##.186.28':445
- '60.#6.29.82':445
- '60.##.97.112':445
- '60.##.185.209':445
- '60.##.108.178':445
- '60.#6.90.45':445
- '60.##.23.160':445
- '60.#6.89.10':445
- '60.##.15.248':445
- '60.##.112.36':445
- '60.##.244.154':445
- '60.##.79.175':445
- '60.##.21.109':445
- '60.##.64.127':445
- '60.##.63.242':445
- '60.##.36.134':445
- '60.##.15.109':445
- '60.##.170.19':445
- '60.#6.15.86':445
- '60.#6.9.0':445
- '60.##.169.109':445
- '60.##.44.119':445
- '60.##.81.177':445
- '60.##.179.133':445
- '60.##.31.186':445
- '60.##.33.238':445
- '60.##.95.200':139
- '60.##.169.182':445
- '60.#6.21.34':445
- '60.##.182.21':445
- '60.##.228.209':445
- '60.#6.238.5':445
- '60.#6.9.0':139
- '60.##.15.109':139
- '60.##.31.186':139
- '60.##.228.209':139
- '60.##.179.133':139
- '60.##.169.109':139
- '60.##.170.19':139
- '60.##.81.177':139
- '60.##.169.182':139
- '60.##.182.21':139
- '60.#6.46.4':445
- '60.##.199.191':445
- '60.#6.238.5':139
- '60.#6.15.86':139
- '60.#6.21.34':139
- '60.##.33.238':139
- '60.#6.84.33':445
- '60.##.93.186':445
- '60.##.132.154':445
- '60.##.91.247':445
- '60.##.13.240':445
- '60.##.213.217':445
- '60.##.132.75':445
- '60.##.193.184':445
- '60.##.48.179':139
- '60.##.25.194':139
- '60.##.108.178':139
- '60.#6.90.45':139
- '60.##.223.94':139
- '60.##.95.103':445
- '60.##.194.84':139
- '60.#6.71.10':139
- '60.##.91.247':139
- '60.##.93.186':139
- '60.##.132.154':139
- '60.##.95.103':139
- '60.##.193.184':139
- '60.##.184.220':139
- '60.#6.84.33':139
- '60.##.132.75':139
- '60.##.184.220':445
- '60.##.219.216':445
- '60.##.215.16':445
- '60.##.216.214':445
- '60.##.228.84':445
- '60.##.120.138':445
- '60.#6.54.50':445
- '60.#6.27.70':445
- '60.##.188.28':139
- '60.##.226.39':139
- '60.#6.44.87':139
- '60.##.165.134':139
- '60.##.180.234':139
- '60.##.195.156':139
- '60.##.62.180':139
- '60.##.136.153':139
- '60.##.194.84':445
- '60.#6.71.10':445
- '60.##.48.179':445
- '60.##.25.194':445
- '60.##.217.206':139
- '60.##.25.163':139
- '60.##.223.94':445
- '60.##.135.14':139
- '60.##.36.134':139
- '60.##.185.209':139
- '60.##.97.112':139
- '60.##.112.36':139
- '60.##.23.160':139
- '60.#6.89.10':139
- '60.##.186.28':139
- '60.#6.29.82':139
- '60.##.79.175':139
- '60.##.15.248':139
- '60.##.122.27':139
- '60.##.87.198':139
- '60.##.64.127':139
- '60.##.21.109':139
- '60.##.244.154':139
- '60.##.63.242':139