Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '66.##.173.49':445
- '66.##.159.55':445
- '66.##.221.10':445
- '66.##.252.140':445
- '66.#8.40.95':445
- '66.##.85.232':445
- '66.##.223.85':445
- '66.##.215.46':445
- '66.##.155.210':445
- '66.##.218.50':445
- '66.#8.7.62':445
- '66.#8.75.75':445
- '66.##.225.174':445
- '66.##.169.162':445
- '66.##.182.84':445
- '66.##.241.242':445
- '66.##.105.156':445
- '66.##.36.165':445
- '66.##.133.105':445
- '66.##.167.249':139
- '66.##.247.133':139
- '66.##.59.178':139
- '66.##.173.250':139
- '66.##.245.247':139
- '66.##.253.225':139
- '66.##.57.254':139
- '66.##.144.144':139
- '66.##.98.185':139
- '66.##.160.224':139
- '66.#8.36.50':445
- '66.##.165.169':139
- '66.##.242.222':445
- '66.#8.34.45':445
- '66.##.211.64':139
- '66.#8.60.41':139
- '66.##.27.238':139
- '66.##.129.124':139
- '66.##.146.90':139
- '66.##.104.63':445
- '66.##.74.160':445
- '66.##.183.237':445
- '66.#8.13.24':445
- '66.#8.0.180':445
- '66.##.252.42':445
- '66.##.169.162':139
- '66.#8.7.62':139
- '66.##.104.63':139
- '66.##.225.174':139
- '66.##.52.141':445
- '66.##.140.72':445
- '66.#8.37.29':445
- '66.#8.72.73':445
- '66.##.134.140':445
- '66.##.228.123':445
- '66.##.54.124':445
- '66.#8.15.54':445
- '66.##.245.89':445
- '66.##.123.176':445
- '66.##.215.46':139
- '66.##.155.210':139
- '66.##.159.55':139
- '66.#8.40.95':139
- '66.##.85.232':139
- '66.#8.34.45':139
- '66.#8.36.50':139
- '66.##.223.85':139
- '66.##.242.222':139
- '66.##.173.49':139
- '66.##.36.165':139
- '66.##.133.105':139
- '66.#8.75.75':139
- '66.##.182.84':139
- '66.##.241.242':139
- '66.##.221.10':139
- '66.##.252.140':139
- '66.##.105.156':139
- '66.##.218.50':139
- '66.##.180.174':139
- '66.#8.68.45':139
- '66.##.236.114':139
- '66.##.55.205':139
- '66.##.159.17':139
- '66.#8.42.70':139
- '66.##.183.59':139
- '66.##.41.147':139
- '66.##.70.143':139
- '66.##.117.37':139
- '66.#8.35.27':139
- '66.##.102.198':139
- '66.##.108.196':445
- '66.##.179.108':139
- '66.#8.51.80':139
- '66.##.139.194':139
- '66.##.37.139':139
- '66.##.101.96':139
- '66.#8.33.38':139
- '66.##.37.139':445
- '66.##.236.114':445
- '66.#8.33.38':445
- '66.##.139.194':445
- '66.##.117.37':445
- '66.##.180.174':445
- '66.##.159.17':445
- '66.##.55.205':445
- '66.#8.68.45':445
- '66.##.101.96':445
- '66.##.58.166':139
- '66.##.230.57':139
- '66.##.91.194':139
- '66.##.166.91':139
- '66.##.36.185':139
- '66.##.102.198':445
- '66.#8.51.80':445
- '66.##.179.108':445
- '66.#8.35.27':445
- '66.##.196.44':445
- '66.##.211.64':445
- '66.##.165.169':445
- '66.##.196.44':139
- '66.##.108.196':139
- '66.#8.60.41':445
- '66.##.129.124':445
- '66.##.160.224':445
- '66.##.146.90':445
- '66.##.27.238':445
- '66.#8.10.22':139
- '66.##.214.203':139
- '66.##.142.92':139
- '66.##.241.57':139
- '66.##.203.241':139
- '66.#8.83.51':139
- '66.##.92.153':139
- '66.#8.2.174':139
- '66.#8.28.44':139
- '66.##.184.66':139
- '66.##.142.92':445
- '66.#8.28.44':445
- '66.##.203.241':445
- '66.##.214.203':445
- '66.#8.83.51':445
- '66.#8.2.174':445
- '66.##.92.153':445
- '66.##.184.66':445
- '66.#8.10.22':445
- '66.##.241.57':445
- '66.##.247.133':445
- '66.##.167.249':445
- '66.##.59.178':445
- '66.##.173.250':445
- '66.##.245.247':445
- '66.##.253.225':445
- '66.##.57.254':445
- '66.##.144.144':445
- '66.##.98.185':445
- '66.##.193.213':445
- '66.##.202.149':445
- '66.#8.60.75':445
- '66.##.183.72':139
- '66.#8.11.56':139
- '66.#8.75.41':445
- '66.##.166.252':445
- '66.##.236.205':445
- '66.#8.35.62':445
- '66.#8.26.71':445
- '66.##.72.241':139
- '66.##.195.110':139
- '66.##.75.162':139
- '66.##.76.103':139
- '66.##.163.85':139
- '66.##.217.200':139
- '66.#8.78.27':139
- '66.##.216.93':139
- '66.##.146.131':139
- '66.##.107.247':139
- '66.##.108.206':445
- '66.##.150.196':445
- '66.##.76.185':445
- '66.##.111.194':445
- '66.##.230.237':445
- '66.#8.79.95':445
- '66.##.224.31':445
- '66.##.144.77':445
- '66.#8.88.2':445
- '66.#8.186.8':445
- '66.#8.42.37':445
- '66.##.138.129':445
- '66.##.148.102':445
- '66.##.32.214':445
- '66.#8.73.19':445
- '66.#8.6.160':445
- '66.#8.9.6':445
- '66.##.83.218':445
- '66.##.218.54':445
- '66.#8.10.96':139
- '66.##.83.218':139
- '66.##.218.54':139
- '66.##.138.129':139
- '66.#8.73.19':139
- '66.#8.6.160':139
- '66.##.76.185':139
- '66.##.111.194':139
- '66.#8.9.6':139
- '66.#8.186.8':139
- '66.#8.42.37':139
- '66.#8.60.75':139
- '66.#8.26.71':139
- '66.#8.75.41':139
- '66.##.236.205':139
- '66.##.166.252':139
- '66.##.148.102':139
- '66.##.32.214':139
- '66.##.202.149':139
- '66.#8.35.62':139
- '66.##.180.152':139
- '66.##.107.64':139
- '66.##.44.227':139
- '66.#8.21.29':139
- '66.##.109.54':139
- '66.##.162.169':139
- '66.##.138.102':139
- '66.##.47.228':139
- '66.##.253.75':139
- '66.##.226.222':139
- '66.##.230.237':139
- '66.##.144.77':139
- '66.##.108.206':139
- '66.##.150.196':139
- '66.#8.88.2':139
- '66.##.242.223':139
- '66.#8.2.239':139
- '66.#8.79.95':139
- '66.##.224.31':139
- '66.##.140.72':139
- '66.##.134.140':139
- '66.##.200.125':139
- '66.#8.72.73':139
- '66.#8.37.29':139
- '66.##.123.176':139
- '66.##.54.124':139
- '66.##.228.123':139
- '66.##.245.89':139
- '66.##.193.213':139
- '66.##.72.240':139
- '66.##.189.72':139
- '66.##.26.168':139
- '66.##.99.101':139
- '66.##.156.189':139
- '66.##.55.106':139
- '66.#8.5.52':139
- '66.##.79.153':139
- '66.##.106.140':139
- '66.##.72.240':445
- '66.##.106.140':445
- '66.##.156.189':445
- '66.##.55.106':445
- '66.##.99.101':445
- '66.#8.5.52':445
- '66.##.200.125':445
- '66.#8.77.9':445
- '66.##.26.168':445
- '66.##.79.153':445
- '66.#8.13.24':139
- '66.##.52.141':139
- '66.#8.15.54':139
- '66.#8.0.180':139
- '66.##.74.160':139
- '66.##.124.97':445
- '66.##.189.72':445
- '66.##.183.237':139
- '66.##.252.42':139
- '66.##.124.97':139
- '66.#8.10.96':445
- '66.##.76.103':445
- '66.##.162.169':445
- '66.##.138.102':445
- '66.##.163.85':445
- '66.##.217.200':445
- '66.##.146.131':445
- '66.##.195.110':445
- '66.##.75.162':445
- '66.##.47.228':445
- '66.##.226.222':445
- '66.##.44.227':445
- '66.##.242.223':445
- '66.#8.2.239':445
- '66.#8.21.29':445
- '66.##.109.54':445
- '66.##.253.75':445
- '66.##.180.152':445
- '66.##.107.64':445
- '66.##.230.237':9988
- '66.##.144.77':9988
- '66.#8.9.6':9988
- '66.#8.186.8':9988
- '66.##.44.227':9988
- '66.##.163.85':9988
- '66.#8.77.9':139
- '66.#8.10.96':9988
- '66.##.76.103':9988
- '66.#8.6.160':9988
- '66.##.216.93':445
- '66.##.72.241':445
- '66.##.107.247':445
- '66.#8.78.27':445
- '66.##.183.72':445
- '66.##.166.252':9988
- '66.##.83.218':9988
- '66.#8.11.56':445
- '66.##.236.205':9988