Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '13#.#68.198.181':139
- '13#.#68.219.241':139
- '13#.#68.101.132':139
- '13#.#68.72.101':139
- '13#.#68.245.154':139
- '13#.#68.91.200':139
- '13#.#68.187.239':139
- '13#.#68.180.120':139
- '13#.#68.4.227':445
- '13#.#68.219.134':445
- '13#.#68.34.120':445
- '13#.#68.25.38':445
- '13#.#68.36.187':445
- '13#.#68.45.186':445
- '13#.#68.101.22':445
- '13#.#68.116.43':445
- '13#.#68.97.236':445
- '13#.#68.6.92':445
- '13#.#68.112.137':139
- '13#.#68.91.200':445
- '13#.#68.101.243':445
- '13#.#68.10.41':139
- '13#.#68.170.194':139
- '13#.#68.65.42':139
- '13#.#68.97.105':139
- '13#.#68.245.154':445
- '13#.#68.101.132':445
- '13#.#68.72.101':445
- '13#.#68.101.243':139
- '13#.#68.6.92':139
- '13#.#68.187.239':445
- '13#.#68.180.120':445
- '13#.#68.198.181':445
- '13#.#68.219.241':445
- '13#.#68.140.90':445
- '13#.#68.152.38':445
- '13#.#68.147.6':445
- '13#.#68.60.4':445
- '13#.#68.197.18':445
- '13#.#68.131.84':445
- '13#.#68.4.81':445
- '13#.#68.141.124':445
- '13#.#68.134.141':445
- '13#.#68.30.80':445
- '13#.#68.116.43':139
- '13#.#68.97.236':139
- '13#.#68.219.134':139
- '13#.#68.34.120':139
- '13#.#68.4.227':139
- '13#.#68.65.141':445
- '13#.#68.45.186':139
- '13#.#68.101.22':139
- '13#.#68.82.107':445
- '13#.#68.111.82':445
- '13#.#68.52.144':445
- '13#.#68.108.53':445
- '13#.#68.51.170':445
- '13#.#68.61.184':445
- '13#.#68.194.159':445
- '13#.#68.170.10':445
- '13#.#68.37.78':445
- '13#.#68.17.5':445
- '13#.#68.103.21':445
- '13#.#68.227.233':445
- '13#.#68.209.195':445
- '13#.#68.71.90':445
- '13#.#68.200.185':445
- '13#.#68.107.103':445
- '13#.#68.104.242':445
- '13#.#68.0.86':445
- '13#.#68.128.45':445
- '13#.#68.51.239':445
- '13#.#68.52.215':445
- '13#.#68.199.148':445
- '13#.#68.131.171':445
- '13#.#68.3.194':445
- '13#.#68.86.112':445
- '13#.#68.155.128':445
- '13#.#68.65.42':445
- '13#.#68.97.105':445
- '13#.#68.78.234':139
- '13#.#68.112.137':445
- '13#.#68.146.63':445
- '13#.#68.96.161':445
- '13#.#68.10.41':445
- '13#.#68.170.194':445
- '13#.#68.6.76':445
- '13#.#68.248.76':445
- '13#.#68.14.31':445
- '13#.#68.110.14':445
- '13#.#68.30.33':445
- '13#.#68.70.143':445
- '13#.#68.112.248':445
- '13#.#68.201.117':445
- '13#.#68.63.162':445
- '13#.#68.59.106':445
- '13#.#68.87.130':445
- '13#.#68.73.215':445
- '13#.#68.82.94':445
- '13#.#68.233.144':445
- '13#.#68.112.233':445
- '13#.#68.227.188':445
- '13#.#68.37.39':445
- '13#.#68.49.159':139
- '13#.#68.73.215':139
- '13#.#68.82.94':139
- '13#.#68.199.148':139
- '13#.#68.131.171':139
- '13#.#68.227.188':139
- '13#.#68.37.39':139
- '13#.#68.59.106':139
- '13#.#68.87.130':139
- '13#.#68.86.112':139
- '13#.#68.155.128':139
- '13#.#68.51.239':139
- '13#.#68.146.63':139
- '13#.#68.96.161':139
- '13#.#68.128.45':139
- '13#.#68.3.194':139
- '13#.#68.52.215':139
- '13#.#68.0.86':139
- '13#.#68.195.151':139
- '13#.#68.43.194':139
- '13#.#68.30.33':139
- '13#.#68.70.143':139
- '13#.#68.17.38':139
- '13#.#68.210.209':139
- '13#.#68.67.114':139
- '13#.#68.37.140':139
- '13#.#68.201.117':139
- '13#.#68.63.162':139
- '13#.#68.14.31':139
- '13#.#68.233.144':139
- '13#.#68.112.233':139
- '13#.#68.248.76':139
- '13#.#68.112.248':139
- '13#.#68.110.14':139
- '13#.#68.6.76':139
- '13#.#68.36.187':139
- '13#.#68.57.155':139
- '13#.#68.11.191':139
- '13#.#68.110.65':139
- '13#.#68.33.168':139
- '13#.#68.231.31':139
- '13#.#68.151.174':445
- '13#.#68.51.234':139
- '13#.#68.32.6':139
- '13#.#68.5.23':139
- '13#.#68.128.57':139
- '13#.#68.87.185':139
- '13#.#68.36.80':139
- '13#.#68.100.168':139
- '13#.#68.83.253':139
- '13#.#68.44.136':139
- '13#.#68.57.167':139
- '13#.#68.6.114':139
- '13#.#68.187.53':445
- '13#.#68.40.41':445
- '13#.#68.224.47':445
- '13#.#68.13.224':445
- '13#.#68.241.167':445
- '13#.#68.145.241':445
- '13#.#68.188.32':445
- '13#.#68.248.246':445
- '13#.#68.77.57':445
- '13#.#68.240.33':445
- '13#.#68.33.215':445
- '13#.#68.49.158':445
- '13#.#68.80.112':445
- '13#.#68.161.87':445
- '13#.#68.24.240':445
- '13#.#68.157.151':445
- '13#.#68.112.49':445
- '13#.#68.80.206':139
- '13#.#68.13.224':139
- '13#.#68.40.41':139
- '13#.#68.77.57':139
- '13#.#68.224.47':139
- '13#.#68.248.246':139
- '13#.#68.241.167':139
- '13#.#68.187.53':139
- '13#.#68.188.32':139
- '13#.#68.24.240':139
- '13#.#68.151.174':139
- '13#.#68.112.49':139
- '13#.#68.49.158':139
- '13#.#68.157.151':139
- '13#.#68.33.215':139
- '13#.#68.240.33':139
- '13#.#68.80.112':139
- '13#.#68.161.87':139
- '13#.#68.179.165':139
- '13#.#68.141.47':139
- '13#.#68.255.195':139
- '13#.#68.223.25':139
- '13#.#68.22.39':139
- '13#.#68.43.13':139
- '13#.#68.155.45':139
- '13#.#68.61.163':139
- '13#.#68.90.135':139
- '13#.#68.40.183':139
- '13#.#68.172.86':139
- '13#.#68.145.241':139
- '13#.#68.88.52':139
- '13#.#68.74.32':139
- '13#.#68.46.58':139
- '13#.#68.35.95':139
- '13#.#68.94.109':139
- '13#.#68.141.124':139
- '13#.#68.134.141':139
- '13#.#68.152.38':139
- '13#.#68.147.6':139
- '13#.#68.227.233':139
- '13#.#68.209.195':139
- '13#.#68.131.84':139
- '13#.#68.4.81':139
- '13#.#68.197.18':139
- '13#.#68.224.47':9988
- '13#.#68.83.253':9988
- '13#.#68.77.57':9988
- '13#.#68.13.224':9988
- '13#.#68.30.80':139
- '13#.#68.60.4':139
- '13#.#68.32.6':9988
- '13#.#68.65.141':139
- '13#.#68.194.159':139
- '13#.#68.170.10':139
- '13#.#68.82.107':139
- '13#.#68.111.82':139
- '13#.#68.140.90':139
- '13#.#68.25.38':139
- '13#.#68.51.170':139
- '13#.#68.61.184':139
- '13#.#68.108.53':139
- '13#.#68.107.103':139
- '13#.#68.104.242':139
- '13#.#68.17.5':139
- '13#.#68.103.21':139
- '13#.#68.37.78':139
- '13#.#68.52.144':139
- '13#.#68.71.90':139
- '13#.#68.200.185':139
- '13#.#68.49.158':9988
- '13#.#68.141.47':445
- '13#.#68.155.45':445
- '13#.#68.223.25':445
- '13#.#68.179.165':445
- '13#.#68.43.13':445
- '13#.#68.80.206':445
- '13#.#68.61.163':445
- '13#.#68.22.39':445
- '13#.#68.90.135':445
- '13#.#68.172.86':445
- '13#.#68.35.95':445
- '13#.#68.88.52':445
- '13#.#68.40.183':445
- '13#.#68.46.58':445
- '13#.#68.255.195':445
- '13#.#68.94.109':445
- '13#.#68.74.32':445
- '13#.#68.57.155':445
- '13#.#68.11.191':445
- '13#.#68.110.65':445
- '13#.#68.33.168':445
- '13#.#68.231.31':445
- '13#.#68.80.112':9988
- '13#.#68.51.234':445
- '13#.#68.32.6':445
- '13#.#68.5.23':445
- '13#.#68.128.57':445
- '13#.#68.87.185':445
- '13#.#68.36.80':445
- '13#.#68.100.168':445
- '13#.#68.83.253':445
- '13#.#68.44.136':445
- '13#.#68.57.167':445
- '13#.#68.6.114':445