Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#30.1.246':445
- '20#.#30.1.219':445
- '20#.#30.168.10':445
- '20#.#30.223.52':445
- '20#.#30.181.43':445
- '20#.#30.64.16':445
- '20#.#30.79.45':445
- '20#.#30.61.105':445
- '20#.#30.25.186':445
- '20#.#30.27.140':445
- '20#.#30.154.68':445
- '20#.#30.80.141':445
- '20#.#30.148.137':445
- '20#.#30.29.201':445
- '20#.#30.208.65':445
- '20#.#30.151.208':445
- '20#.#30.174.129':445
- '20#.#30.74.224':445
- '20#.#30.25.142':445
- '20#.#30.105.124':445
- '20#.#30.73.233':445
- '20#.#30.48.46':445
- '20#.#30.206.113':445
- '20#.#30.97.59':445
- '20#.#30.230.69':445
- '20#.#30.16.170':445
- '20#.#30.251.161':445
- '20#.#30.21.70':445
- '20#.#30.29.150':445
- '20#.#30.54.149':445
- '20#.#30.49.151':445
- '20#.#30.34.111':445
- '20#.#30.130.239':445
- '20#.#30.25.142':139
- '20#.#30.97.59':139
- '20#.#30.73.233':139
- '20#.#30.74.224':139
- '20#.#30.206.113':139
- '20#.#30.179.175':139
- '20#.#30.230.69':139
- '20#.#30.48.46':139
- '20#.#30.251.161':139
- '20#.#30.34.111':139
- '20#.#30.29.150':139
- '20#.#30.16.170':139
- '20#.#30.49.151':139
- '20#.#30.105.124':139
- '20#.#30.130.239':139
- '20#.#30.54.149':139
- '20#.#30.246.13':139
- '20#.#30.243.15':445
- '20#.#30.15.78':445
- '20#.#30.26.197':139
- '20#.#30.174.156':445
- '20#.#30.234.9':445
- '20#.#30.197.159':445
- '20#.#30.55.15':445
- '20#.#30.213.54':445
- '20#.#30.61.219':139
- '20#.#30.58.30':139
- '20#.#30.124.176':139
- '20#.#30.21.123':139
- '20#.#30.13.3':139
- '20#.#30.102.151':139
- '20#.#30.78.144':139
- '20#.#30.48.171':139
- '20#.#30.19.246':139
- '20#.#30.209.213':139
- '20#.#30.60.4':139
- '20#.#30.79.189':139
- '20#.#30.25.115':139
- '20#.#30.115.184':139
- '20#.#30.134.40':139
- '20#.#30.34.19':139
- '20#.#30.33.90':139
- '20#.#30.111.36':139
- '20#.#30.85.239':139
- '20#.#30.73.84':139
- '20#.#30.65.80':139
- '20#.#30.181.17':139
- '20#.#30.160.11':139
- '20#.#30.54.125':139
- '20#.#30.13.170':139
- '20#.#30.166.196':139
- '20#.#30.110.221':139
- '20#.#30.225.59':139
- '20#.#30.18.200':139
- '20#.#30.190.84':445
- '20#.#30.88.190':445
- '20#.#30.174.80':445
- '20#.#30.84.212':445
- '20#.#30.222.93':139
- '20#.#30.121.222':139
- '20#.#30.34.68':139
- '20#.#30.93.13':139
- '20#.#30.4.18':139
- '20#.#30.225.92':139
- '20#.#30.109.240':139
- '20#.#30.18.182':139
- '20#.#30.26.197':445
- '20#.#30.174.80':139
- '20#.#30.13.3':445
- '20#.#30.102.151':445
- '20#.#30.88.190':139
- '20#.#30.187.117':139
- '20#.#30.84.212':139
- '20#.#30.190.84':139
- '20#.#30.124.176':445
- '20#.#30.21.123':445
- '20#.#30.179.175':445
- '20#.#30.246.13':445
- '20#.#30.78.144':445
- '20#.#30.48.171':445
- '20#.#30.61.219':445
- '20#.#30.58.30':445
- '20#.#30.35.206':139
- '20#.#30.217.83':139
- '20#.#30.16.162':139
- '20#.#30.75.158':139
- '20#.#30.37.76':139
- '20#.#30.232.93':139
- '20#.#30.230.58':139
- '20#.#30.138.148':139
- '20#.#30.141.162':139
- '20#.#30.8.21':139
- '20#.#30.117.54':139
- '20#.#30.3.240':139
- '20#.#30.167.179':139
- '20#.#30.243.23':139
- '20#.#30.181.129':139
- '20#.#30.163.116':139
- '20#.#30.191.162':139
- '20#.#30.21.70':139
- '20#.#30.58.123':139
- '20#.#30.175.243':139
- '20#.#30.25.207':139
- '20#.#30.62.216':139
- '20#.#30.103.245':139
- '20#.#30.235.216':139
- '20#.#30.127.176':139
- '20#.#30.163.79':139
- '20#.#30.0.180':139
- '20#.#30.52.180':139
- '20#.#30.238.140':139
- '20#.#30.4.107':139
- '20#.#30.90.68':139
- '20#.#30.76.199':139
- '20#.#30.193.235':139
- '20#.#30.255.93':139
- '20#.#30.85.226':139
- '20#.#30.111.228':445
- '20#.#30.32.99':445
- '20#.#30.100.39':445
- '20#.#30.167.37':445
- '20#.#30.153.188':445
- '20#.#30.222.153':445
- '20#.#30.249.231':445
- '20#.#30.20.203':445
- '20#.#30.99.3':445
- '20#.#30.244.150':445
- '20#.#30.206.193':139
- '20#.#30.3.227':445
- '20#.#30.78.244':445
- '20#.#30.145.55':445
- '20#.#30.151.109':445
- '20#.#30.109.99':445
- '20#.#30.32.99':139
- '20#.#30.249.231':139
- '20#.#30.167.37':139
- '20#.#30.111.228':139
- '20#.#30.222.153':139
- '20#.#30.23.108':139
- '20#.#30.20.203':139
- '20#.#30.153.188':139
- '20#.#30.151.109':139
- '20#.#30.3.227':139
- '20#.#30.99.3':139
- '20#.#30.109.99':139
- '20#.#30.145.55':139
- '20#.#30.100.39':139
- '20#.#30.244.150':139
- '20#.#30.78.244':139
- '20#.#30.72.38':139
- '20#.#30.42.218':139
- '20#.#30.224.146':139
- '20#.#30.75.90':139
- '20#.#30.197.69':139
- '20#.#30.150.118':139
- '20#.#30.96.207':139
- '20#.#30.104.79':139
- '20#.#30.118.104':139
- '20#.#30.118.78':139
- '20#.#30.214.240':139
- '20#.#30.71.158':139
- '20#.#30.69.160':139
- '20#.#30.151.123':139
- '20#.#30.144.251':139
- '20#.#30.73.222':139
- '20#.#30.178.24':139
- '20#.#30.243.15':139
- '20#.#30.15.78':139
- '20#.#30.163.79':9988
- '20#.#30.174.156':139
- '20#.#30.234.9':139
- '20#.#30.197.159':139
- '20#.#30.55.15':139
- '20#.#30.213.54':139
- '20#.#30.206.193':445
- '20#.#30.78.244':9988
- '20#.#30.235.216':445
- '20#.#30.85.226':445
- '20#.#30.4.107':9988
- '20#.#30.175.243':9988
- '20#.#30.151.123':9988
- '20#.#30.118.104':9988
- '20#.#30.154.68':139
- '20#.#30.1.219':139
- '20#.#30.79.45':139
- '20#.#30.223.52':139
- '20#.#30.1.246':139
- '20#.#30.64.16':139
- '20#.#30.174.129':139
- '20#.#30.61.105':139
- '20#.#30.181.43':139
- '20#.#30.27.140':139
- '20#.#30.208.65':139
- '20#.#30.80.141':139
- '20#.#30.25.186':139
- '20#.#30.29.201':139
- '20#.#30.168.10':139
- '20#.#30.151.208':139
- '20#.#30.148.137':139
- '20#.#30.75.90':445
- '20#.#30.197.69':445
- '20#.#30.151.123':445
- '20#.#30.144.251':445
- '20#.#30.104.79':445
- '20#.#30.118.104':445
- '20#.#30.224.146':445
- '20#.#30.42.218':445
- '20#.#30.71.158':445
- '20#.#30.69.160':445
- '20#.#30.23.108':445
- '20#.#30.72.38':445
- '20#.#30.73.222':445
- '20#.#30.178.24':445
- '20#.#30.118.78':445
- '20#.#30.214.240':445
- '20#.#30.150.118':445
- '20#.#30.62.216':445
- '20#.#30.58.123':445
- '20#.#30.76.199':445
- '20#.#30.25.207':445
- '20#.#30.163.79':445
- '20#.#30.103.245':445
- '20#.#30.175.243':445
- '20#.#30.127.176':445
- '20#.#30.4.107':445
- '20#.#30.0.180':445
- '20#.#30.96.207':445
- '20#.#30.238.140':445
- '20#.#30.255.93':445
- '20#.#30.90.68':445
- '20#.#30.52.180':445
- '20#.#30.193.235':445