Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#86.118.146':445
- '21#.#86.67.228':445
- '21#.#86.144.63':445
- '21#.#86.111.156':445
- '21#.#86.238.106':445
- '21#.#86.205.127':139
- '21#.#86.143.44':139
- '21#.#86.174.213':445
- '21#.#86.156.119':445
- '21#.#86.56.62':445
- '21#.#86.197.73':445
- '21#.#86.70.108':445
- '21#.#86.101.59':445
- '21#.#86.114.28':445
- '21#.#86.148.57':445
- '21#.#86.22.114':445
- '21#.#86.146.33':445
- '21#.#86.145.83':445
- '21#.#86.64.145':445
- '21#.#86.60.64':445
- '21#.#86.87.211':139
- '21#.#86.122.157':139
- '21#.#86.79.22':139
- '21#.#86.184.83':139
- '21#.#86.227.180':139
- '21#.#86.163.4':139
- '21#.#86.6.39':139
- '21#.#86.105.67':139
- '21#.#86.25.37':139
- '21#.#86.53.160':139
- '21#.#86.207.154':139
- '21#.#86.240.253':139
- '21#.#86.154.52':139
- '21#.#86.37.111':139
- '21#.#86.200.142':139
- '21#.#86.71.58':139
- '21#.#86.58.99':139
- '21#.#86.248.218':139
- '21#.#86.176.35':139
- '21#.#86.212.153':139
- '21#.#86.198.33':139
- '21#.#86.109.198':139
- '21#.#86.247.15':139
- '21#.#86.114.28':139
- '21#.#86.111.124':139
- '21#.#86.64.145':139
- '21#.#86.60.64':139
- '21#.#86.145.83':139
- '21#.#86.197.73':139
- '21#.#86.70.108':139
- '21#.#86.84.96':139
- '21#.#86.143.50':139
- '21#.#86.126.15':139
- '21#.#86.92.3':445
- '21#.#86.153.49':445
- '21#.#86.0.92':139
- '21#.#86.148.57':139
- '21#.#86.107.43':139
- '21#.#86.223.112':139
- '21#.#86.101.59':139
- '21#.#86.223.112':445
- '21#.#86.109.198':445
- '21#.#86.143.50':445
- '21#.#86.126.15':445
- '21#.#86.84.96':445
- '21#.#86.0.92':445
- '21#.#86.198.33':445
- '21#.#86.247.15':445
- '21#.#86.111.124':445
- '21#.#86.107.43':445
- '21#.#86.238.106':139
- '21#.#86.144.63':139
- '21#.#86.111.156':139
- '21#.#86.22.114':139
- '21#.#86.146.33':139
- '21#.#86.56.62':139
- '21#.#86.174.213':139
- '21#.#86.156.119':139
- '21#.#86.118.146':139
- '21#.#86.67.228':139
- '21#.#86.93.210':445
- '21#.#86.90.135':445
- '21#.#86.153.43':445
- '21#.#86.68.103':139
- '21#.#86.1.74':139
- '21#.#86.124.169':445
- '21#.#86.163.77':445
- '21#.#86.162.29':445
- '21#.#86.116.186':445
- '21#.#86.207.29':445
- '21#.#86.6.145':139
- '21#.#86.25.248':139
- '21#.#86.99.228':139
- '21#.#86.254.211':139
- '21#.#86.119.254':139
- '21#.#86.27.138':139
- '21#.#86.103.27':139
- '21#.#86.123.253':139
- '21#.#86.78.12':139
- '21#.#86.203.11':139
- '21#.#86.25.248':445
- '21#.#86.203.11':445
- '21#.#86.78.12':445
- '21#.#86.99.228':445
- '21#.#86.6.145':445
- '21#.#86.68.103':445
- '21#.#86.103.27':445
- '21#.#86.1.74':445
- '21#.#86.123.253':445
- '21#.#86.27.138':445
- '21#.#86.44.41':445
- '21#.#86.171.79':445
- '21#.#86.99.71':445
- '21#.#86.205.163':445
- '21#.#86.40.205':445
- '21#.#86.254.211':445
- '21#.#86.119.254':445
- '21#.#86.69.242':445
- '21#.#86.11.172':445
- '21#.#86.13.241':445
- '21#.#86.184.83':445
- '21#.#86.227.180':445
- '21#.#86.58.99':445
- '21#.#86.248.218':445
- '21#.#86.71.58':445
- '21#.#86.53.160':445
- '21#.#86.25.37':445
- '21#.#86.122.157':445
- '21#.#86.79.22':445
- '21#.#86.87.211':445
- '21#.#86.37.111':445
- '21#.#86.154.52':445
- '21#.#86.143.44':445
- '21#.#86.61.152':139
- '21#.#86.205.127':445
- '21#.#86.176.35':445
- '21#.#86.212.153':445
- '21#.#86.240.253':445
- '21#.#86.200.142':445
- '21#.#86.207.154':445
- '21#.#86.40.205':139
- '21#.#86.99.71':139
- '21#.#86.205.163':139
- '21#.#86.124.169':139
- '21#.#86.163.77':139
- '21#.#86.13.241':139
- '21#.#86.69.242':139
- '21#.#86.11.172':139
- '21#.#86.44.41':139
- '21#.#86.171.79':139
- '21#.#86.61.152':445
- '21#.#86.153.43':139
- '21#.#86.6.39':445
- '21#.#86.105.67':445
- '21#.#86.163.4':445
- '21#.#86.207.29':139
- '21#.#86.162.29':139
- '21#.#86.90.135':139
- '21#.#86.93.210':139
- '21#.#86.116.186':139
- '21#.#86.110.204':445
- '21#.#86.208.86':445
- '21#.#86.78.218':445
- '21#.#86.89.53':139
- '21#.#86.67.80':445
- '21#.#86.64.210':445
- '21#.#86.139.107':445
- '21#.#86.126.103':445
- '21#.#86.209.96':445
- '21#.#86.96.100':445
- '21#.#86.151.138':139
- '21#.#86.30.97':139
- '21#.#86.95.8':139
- '21#.#86.125.128':139
- '21#.#86.153.125':139
- '21#.#86.35.17':139
- '21#.#86.225.54':139
- '21#.#86.183.24':139
- '21#.#86.53.166':139
- '21#.#86.104.52':139
- '21#.#86.202.141':445
- '21#.#86.10.210':445
- '21#.#86.91.42':445
- '21#.#86.99.84':445
- '21#.#86.204.89':445
- '21#.#86.177.203':445
- '21#.#86.72.194':445
- '21#.#86.65.177':445
- '21#.#86.62.11':445
- '21#.#86.154.160':445
- '21#.#86.197.49':445
- '21#.#86.177.197':445
- '21#.#86.94.206':445
- '21#.#86.68.56':445
- '21#.#86.66.193':445
- '21#.#86.154.89':445
- '21#.#86.84.154':445
- '21#.#86.89.177':445
- '21#.#86.88.178':445
- '21#.#86.177.88':445
- '21#.#86.177.197':139
- '21#.#86.88.178':139
- '21#.#86.197.49':139
- '21#.#86.66.193':139
- '21#.#86.94.206':139
- '21#.#86.84.154':139
- '21#.#86.99.84':139
- '21#.#86.154.89':139
- '21#.#86.177.88':139
- '21#.#86.89.177':139
- '21#.#86.208.86':139
- '21#.#86.96.100':139
- '21#.#86.110.204':139
- '21#.#86.67.80':139
- '21#.#86.78.218':139
- '21#.#86.139.107':139
- '21#.#86.68.56':139
- '21#.#86.64.210':139
- '21#.#86.209.96':139
- '21#.#86.126.103':139
- '21#.#86.229.78':139
- '21#.#86.63.64':139
- '21#.#86.213.46':139
- '21#.#86.177.149':139
- '21#.#86.40.220':139
- '21#.#86.50.118':139
- '21#.#86.28.54':139
- '21#.#86.118.63':139
- '21#.#86.85.195':139
- '21#.#86.222.160':139
- '21#.#86.10.210':139
- '21#.#86.62.11':139
- '21#.#86.202.141':139
- '21#.#86.204.89':139
- '21#.#86.91.42':139
- '21#.#86.72.194':139
- '21#.#86.244.124':139
- '21#.#86.65.177':139
- '21#.#86.154.160':139
- '21#.#86.177.203':139
- '21#.#86.194.15':139
- '21#.#86.42.243':139
- '21#.#86.105.110':139
- '21#.#86.230.203':139
- '21#.#86.68.148':139
- '21#.#86.12.93':139
- '21#.#86.207.234':445
- '21#.#86.92.3':139
- '21#.#86.92.178':139
- '21#.#86.153.49':139
- '21#.#86.28.134':139
- '21#.#86.104.81':139
- '21#.#86.32.221':139
- '21#.#86.173.208':139
- '21#.#86.187.173':139
- '21#.#86.26.71':139
- '21#.#86.204.192':139
- '21#.#86.94.77':139
- '21#.#86.174.12':139
- '21#.#86.157.251':139
- '21#.#86.204.192':445
- '21#.#86.194.15':445
- '21#.#86.26.71':445
- '21#.#86.94.77':445
- '21#.#86.230.203':445
- '21#.#86.92.178':445
- '21#.#86.12.93':445
- '21#.#86.42.243':445
- '21#.#86.68.148':445
- '21#.#86.105.110':445
- '21#.#86.173.208':445
- '21#.#86.187.173':445
- '21#.#86.102.8':445
- '21#.#86.64.84':445
- '21#.#86.150.3':445
- '21#.#86.174.12':445
- '21#.#86.157.251':445
- '21#.#86.104.81':445
- '21#.#86.32.221':445
- '21#.#86.28.134':445
- '21#.#86.95.8':445
- '21#.#86.151.138':445
- '21#.#86.153.125':445
- '21#.#86.28.54':445
- '21#.#86.125.128':445
- '21#.#86.183.24':445
- '21#.#86.35.17':445
- '21#.#86.104.52':445
- '21#.#86.30.97':445
- '21#.#86.53.166':445
- '21#.#86.213.46':445
- '21#.#86.229.78':445
- '21#.#86.40.220':445
- '21#.#86.244.124':445
- '21#.#86.177.149':445
- '21#.#86.118.63':445
- '21#.#86.50.118':445
- '21#.#86.222.160':445
- '21#.#86.63.64':445
- '21#.#86.85.195':445
- '21#.#86.62.11':9988
- '21#.#86.65.177':9988
- '21#.#86.154.160':9988
- '21#.#86.202.141':9988
- '21#.#86.10.210':9988
- '21#.#86.150.3':139
- '21#.#86.207.234':139
- '21#.#86.64.84':139
- '21#.#86.213.46':9988
- '21#.#86.102.8':139
- '21#.#86.208.86':9988
- '21#.#86.96.100':9988
- '21#.#86.209.96':9988
- '21#.#86.225.54':445
- '21#.#86.89.53':445
- '21#.#86.89.177':9988
- '21#.#86.91.42':9988
- '21#.#86.88.178':9988
- '21#.#86.197.49':9988
- '21#.#86.177.197':9988