Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '61.##6.171.47':445
- '61.##6.72.19':445
- '61.##6.245.114':445
- '61.##6.108.236':445
- '61.##6.29.121':445
- '61.#16.80.4':445
- '61.##6.109.188':445
- '61.##6.76.101':445
- '61.##6.11.113':445
- '61.##6.88.207':445
- '61.##6.122.101':445
- '61.##6.59.61':445
- '61.##6.68.23':445
- '61.##6.160.194':445
- '61.##6.67.75':445
- '61.##6.49.140':445
- '61.##6.99.243':445
- '61.##6.216.92':139
- '61.##6.94.96':139
- '61.##6.77.251':139
- '61.##6.133.27':139
- '61.##6.78.225':445
- '61.##6.204.251':445
- '61.##6.229.94':139
- '61.##6.141.187':445
- '61.##6.29.172':445
- '61.##6.141.187':139
- '61.##6.10.218':445
- '61.##6.94.184':445
- '61.##6.125.154':139
- '61.##6.95.222':139
- '61.##6.78.225':139
- '61.##6.204.251':139
- '61.##6.221.119':445
- '61.##6.10.218':139
- '61.##6.94.184':139
- '61.#16.80.4':139
- '61.##6.99.243':139
- '61.##6.161.169':445
- '61.#16.1.51':445
- '61.##6.29.172':139
- '61.##6.170.24':445
- '61.##6.108.236':139
- '61.##6.171.47':139
- '61.##6.160.194':139
- '61.##6.245.114':139
- '61.##6.76.101':139
- '61.##6.29.121':139
- '61.##6.72.19':139
- '61.##6.109.188':139
- '61.##6.132.108':445
- '61.##6.72.95':445
- '61.##6.104.59':445
- '61.##6.92.101':445
- '61.##6.65.100':445
- '61.##6.135.73':445
- '61.##6.104.6':445
- '61.##6.118.104':445
- '61.##6.156.144':445
- '61.##6.98.87':445
- '61.##6.116.189':445
- '61.##6.214.124':445
- '61.##6.62.92':445
- '61.##6.12.12':445
- '61.##6.120.45':445
- '61.##6.5.156':445
- '61.#16.46.5':445
- '61.##6.88.121':139
- '61.##6.162.31':139
- '61.##6.168.25':139
- '61.##6.135.239':139
- '61.##6.42.229':445
- '61.##6.39.74':445
- '61.##6.118.86':139
- '61.##6.174.207':139
- '61.##6.97.115':139
- '61.##6.193.61':139
- '61.##6.102.122':139
- '61.##6.205.205':139
- '61.##6.174.92':139
- '61.##6.25.174':139
- '61.##6.54.43':139
- '61.##6.139.254':139
- '61.##6.8.200':445
- '61.##6.80.120':445
- '61.##6.113.117':445
- '61.##6.255.206':445
- '61.##6.177.244':445
- '61.##6.176.67':445
- '61.##6.164.53':445
- '61.##6.101.93':445
- '61.##6.43.49':445
- '61.##6.127.126':445
- '61.##6.122.60':445
- '61.##6.127.246':445
- '61.##6.125.221':445
- '61.##6.96.129':445
- '61.##6.166.92':445
- '61.##6.246.205':445
- '61.##6.129.247':445
- '61.##6.122.109':139
- '61.##6.127.246':139
- '61.##6.125.221':139
- '61.##6.39.74':139
- '61.##6.8.200':139
- '61.##6.246.205':139
- '61.##6.129.247':139
- '61.##6.127.126':139
- '61.##6.122.60':139
- '61.##6.77.251':445
- '61.##6.133.27':445
- '61.##6.125.154':445
- '61.##6.95.222':445
- '61.##6.229.94':445
- '61.##6.42.229':139
- '61.##6.216.92':445
- '61.##6.94.96':445
- '61.##6.96.129':139
- '61.##6.66.89':139
- '61.##6.117.66':139
- '61.##6.164.53':139
- '61.##6.233.107':139
- '61.##6.131.13':139
- '61.##6.109.131':139
- '61.##6.55.236':139
- '61.##6.71.137':139
- '61.##6.177.244':139
- '61.##6.80.120':139
- '61.##6.166.92':139
- '61.##6.255.206':139
- '61.##6.43.49':139
- '61.##6.176.67':139
- '61.##6.113.117':139
- '61.##6.101.93':139
- '61.##6.68.23':139
- '61.##6.196.137':139
- '61.##6.88.196':139
- '61.##6.214.64':139
- '61.##6.136.213':139
- '61.##6.47.70':139
- '61.##6.97.114':139
- '61.##6.16.88':139
- '61.##6.189.229':139
- '61.##6.104.168':139
- '61.##6.208.17':139
- '61.##6.105.105':139
- '61.##6.114.171':139
- '61.##6.138.185':139
- '61.##6.225.189':139
- '61.##6.23.132':139
- '61.##6.206.177':139
- '61.##6.85.124':139
- '61.##6.115.214':445
- '61.##6.165.181':445
- '61.##6.102.131':445
- '61.#16.24.9':445
- '61.##6.97.34':445
- '61.##6.130.102':445
- '61.##6.239.103':445
- '61.##6.18.144':445
- '61.##6.25.20':445
- '61.##6.20.83':445
- '61.##6.173.15':445
- '61.##6.74.191':445
- '61.##6.181.168':445
- '61.##6.214.12':445
- '61.##6.36.92':445
- '61.##6.225.191':445
- '61.##6.157.99':139
- '61.##6.165.181':139
- '61.##6.115.214':139
- '61.##6.102.131':139
- '61.#16.24.9':139
- '61.##6.97.34':139
- '61.##6.131.246':139
- '61.##6.239.103':139
- '61.##6.18.144':139
- '61.##6.20.83':139
- '61.##6.36.92':139
- '61.##6.181.168':139
- '61.##6.173.15':139
- '61.##6.225.191':139
- '61.##6.214.12':139
- '61.##6.74.191':139
- '61.##6.25.20':139
- '61.##6.130.102':139
- '61.##6.254.152':139
- '61.##6.201.53':139
- '61.#16.14.3':139
- '61.##6.4.150':139
- '61.##6.64.94':139
- '61.##6.144.159':139
- '61.##6.51.84':139
- '61.##6.112.235':139
- '61.##6.87.16':139
- '61.##6.230.207':139
- '61.##6.184.67':139
- '61.##6.102.67':139
- '61.##6.184.176':139
- '61.##6.184.41':139
- '61.##6.176.175':139
- '61.#16.89.4':139
- '61.##6.214.124':139
- '61.##6.62.92':139
- '61.#16.1.51':139
- '61.##6.132.108':139
- '61.##6.5.156':139
- '61.#16.46.5':139
- '61.##6.98.87':139
- '61.##6.116.189':139
- '61.##6.254.152':9988
- '61.#16.89.4':9988
- '61.##6.85.124':445
- '61.#16.14.3':9988
- '61.##6.170.24':139
- '61.##6.161.169':139
- '61.##6.225.189':9988
- '61.##6.97.114':9988
- '61.##6.12.12':139
- '61.##6.122.101':139
- '61.##6.59.61':139
- '61.##6.104.6':139
- '61.##6.221.119':139
- '61.##6.67.75':139
- '61.##6.49.140':139
- '61.##6.11.113':139
- '61.##6.88.207':139
- '61.##6.65.100':139
- '61.##6.72.95':139
- '61.##6.120.45':139
- '61.##6.92.101':139
- '61.##6.156.144':139
- '61.##6.135.73':139
- '61.##6.104.59':139
- '61.##6.118.104':139
- '61.##6.97.114':445
- '61.##6.4.150':445
- '61.##6.254.152':445
- '61.##6.184.41':445
- '61.#16.14.3':445
- '61.##6.112.235':445
- '61.##6.64.94':445
- '61.##6.201.53':445
- '61.##6.51.84':445
- '61.##6.102.67':445
- '61.##6.87.16':445
- '61.##6.131.246':445
- '61.##6.184.67':445
- '61.#16.89.4':445
- '61.##6.184.176':445
- '61.##6.230.207':445
- '61.##6.176.175':445
- '61.##6.144.159':445
- '61.##6.136.213':445
- '61.##6.196.137':445
- '61.##6.225.189':445
- '61.##6.214.64':445
- '61.##6.189.229':445
- '61.##6.47.70':445
- '61.##6.88.196':445
- '61.##6.16.88':445
- '61.##6.114.171':445
- '61.##6.104.168':445
- '61.##6.157.99':445
- '61.##6.105.105':445
- '61.##6.206.177':445
- '61.##6.138.185':445
- '61.##6.208.17':445
- '61.##6.23.132':445