Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '20#.#05.65.11':445
- '20#.#05.207.116':445
- '20#.#05.133.40':445
- '20#.#05.10.133':445
- '20#.#05.153.151':445
- '20#.#05.40.55':445
- '20#.#05.58.33':445
- '20#.#05.189.227':445
- '20#.#05.82.20':445
- '20#.#05.247.81':445
- '20#.#05.130.224':445
- '20#.#05.19.222':445
- '20#.#05.165.76':445
- '20#.#05.0.72':445
- '20#.#05.57.247':445
- '20#.#05.177.161':445
- '20#.#05.155.79':445
- '20#.#05.103.98':445
- '20#.#05.160.96':445
- '20#.#05.188.184':445
- '20#.#05.26.5':445
- '20#.#05.114.221':445
- '20#.#05.203.34':445
- '20#.#05.240.19':445
- '20#.#05.224.235':445
- '20#.#05.102.140':445
- '20#.#05.19.100':445
- '20#.#05.147.254':445
- '20#.#05.95.200':445
- '20#.#05.29.115':445
- '20#.#05.31.29':445
- '20#.#05.185.231':445
- '20#.#05.17.236':445
- '20#.#05.160.96':139
- '20#.#05.240.19':139
- '20#.#05.26.5':139
- '20#.#05.103.98':139
- '20#.#05.203.34':139
- '20#.#05.213.114':139
- '20#.#05.224.235':139
- '20#.#05.114.221':139
- '20#.#05.19.100':139
- '20#.#05.185.231':139
- '20#.#05.95.200':139
- '20#.#05.102.140':139
- '20#.#05.31.29':139
- '20#.#05.188.184':139
- '20#.#05.17.236':139
- '20#.#05.29.115':139
- '20#.#05.250.232':139
- '20#.#05.203.121':139
- '20#.#05.59.79':139
- '20#.#05.179.124':139
- '20#.#05.51.207':139
- '20#.#05.72.15':445
- '20#.#05.93.135':445
- '20#.#05.65.219':139
- '20#.#05.194.239':445
- '20#.#05.183.77':139
- '20#.#05.252.11':139
- '20#.#05.67.191':139
- '20#.#05.77.67':139
- '20#.#05.206.53':139
- '20#.#05.140.158':139
- '20#.#05.176.97':139
- '20#.#05.34.241':139
- '20#.#05.95.130':139
- '20#.#05.46.101':139
- '20#.#05.226.180':139
- '20#.#05.150.235':139
- '20#.#05.128.74':139
- '20#.#05.2.12':139
- '20#.#05.37.206':139
- '20#.#05.37.153':139
- '20#.#05.205.29':139
- '20#.#05.92.156':139
- '20#.#05.195.19':139
- '20#.#05.91.100':139
- '20#.#05.237.178':139
- '20#.#05.224.165':139
- '20#.#05.150.61':139
- '20#.#05.178.178':139
- '20#.#05.254.246':139
- '20#.#05.153.3':139
- '20#.#05.111.70':139
- '20#.#05.39.74':139
- '20#.#05.226.148':139
- '20#.#05.175.107':139
- '20#.#05.92.22':139
- '20#.#05.45.100':139
- '20#.#05.168.103':139
- '20#.#05.16.156':139
- '20#.#05.227.98':139
- '20#.#05.218.97':139
- '20#.#05.217.248':139
- '20#.#05.84.140':139
- '20#.#05.74.172':139
- '20#.#05.102.248':139
- '20#.#05.52.169':139
- '20#.#05.179.124':445
- '20#.#05.51.207':445
- '20#.#05.206.53':445
- '20#.#05.140.158':445
- '20#.#05.65.219':445
- '20#.#05.141.243':139
- '20#.#05.203.121':445
- '20#.#05.59.79':445
- '20#.#05.67.191':445
- '20#.#05.77.67':445
- '20#.#05.213.114':445
- '20#.#05.250.232':445
- '20#.#05.176.97':445
- '20#.#05.34.241':445
- '20#.#05.183.77':445
- '20#.#05.252.11':445
- '20#.#05.41.143':139
- '20#.#05.59.39':139
- '20#.#05.10.241':139
- '20#.#05.159.131':139
- '20#.#05.252.197':139
- '20#.#05.31.222':139
- '20#.#05.54.88':139
- '20#.#05.67.104':139
- '20#.#05.243.10':139
- '20#.#05.136.54':139
- '20#.#05.127.178':139
- '20#.#05.119.60':139
- '20#.#05.101.39':139
- '20#.#05.57.178':139
- '20#.#05.110.107':139
- '20#.#05.68.150':139
- '20#.#05.31.165':139
- '20#.#05.64.200':139
- '20#.#05.227.56':139
- '20#.#05.91.245':139
- '20#.#05.65.206':139
- '20#.#05.55.73':139
- '20#.#05.13.119':139
- '20#.#05.171.32':139
- '20#.#05.146.230':139
- '20#.#05.71.130':139
- '20#.#05.73.72':139
- '20#.#05.96.209':139
- '20#.#05.134.7':139
- '20#.#05.97.167':139
- '20#.#05.54.164':139
- '20#.#05.223.1':139
- '20#.#05.128.237':139
- '20#.#05.49.206':139
- '20#.#05.30.199':445
- '20#.#05.69.249':445
- '20#.#05.23.35':445
- '20#.#05.51.105':445
- '20#.#05.52.206':445
- '20#.#05.168.3':445
- '20#.#05.163.70':445
- '20#.#05.190.7':445
- '20#.#05.234.155':445
- '20#.#05.74.106':445
- '20#.#05.40.69':139
- '20#.#05.241.117':445
- '20#.#05.203.104':445
- '20#.#05.8.24':445
- '20#.#05.169.240':445
- '20#.#05.96.49':445
- '20#.#05.69.249':139
- '20#.#05.163.70':139
- '20#.#05.51.105':139
- '20#.#05.30.199':139
- '20#.#05.168.3':139
- '20#.#05.132.46':139
- '20#.#05.190.7':139
- '20#.#05.52.206':139
- '20#.#05.234.155':139
- '20#.#05.169.240':139
- '20#.#05.203.104':139
- '20#.#05.74.106':139
- '20#.#05.8.24':139
- '20#.#05.23.35':139
- '20#.#05.96.49':139
- '20#.#05.241.117':139
- '20#.#05.117.131':139
- '20#.#05.204.20':139
- '20#.#05.63.48':139
- '20#.#05.98.80':139
- '20#.#05.126.20':139
- '20#.#05.40.239':139
- '20#.#05.13.107':139
- '20#.#05.166.207':139
- '20#.#05.238.166':139
- '20#.#05.3.58':139
- '20#.#05.237.138':139
- '20#.#05.155.117':139
- '20#.#05.218.155':139
- '20#.#05.44.215':139
- '20#.#05.80.44':139
- '20#.#05.63.39':139
- '20#.#05.189.109':139
- '20#.#05.238.166':9988
- '20#.#05.40.69':9988
- '20#.#05.218.155':9988
- '20#.#05.80.44':9988
- '20#.#05.93.135':139
- '20#.#05.130.224':139
- '20#.#05.194.239':139
- '20#.#05.72.15':139
- '20#.#05.40.69':445
- '20#.#05.132.46':9988
- '20#.#05.13.119':445
- '20#.#05.49.206':445
- '20#.#05.241.117':9988
- '20#.#05.203.104':9988
- '20#.#05.52.206':9988
- '20#.#05.163.70':9988
- '20#.#05.19.222':139
- '20#.#05.58.33':139
- '20#.#05.189.227':139
- '20#.#05.65.11':139
- '20#.#05.207.116':139
- '20#.#05.155.79':139
- '20#.#05.147.254':139
- '20#.#05.153.151':139
- '20#.#05.40.55':139
- '20#.#05.57.247':139
- '20#.#05.177.161':139
- '20#.#05.82.20':139
- '20#.#05.247.81':139
- '20#.#05.133.40':139
- '20#.#05.10.133':139
- '20#.#05.165.76':139
- '20#.#05.0.72':139
- '20#.#05.98.80':445
- '20#.#05.126.20':445
- '20#.#05.44.215':445
- '20#.#05.80.44':445
- '20#.#05.166.207':445
- '20#.#05.238.166':445
- '20#.#05.204.20':445
- '20#.#05.63.48':445
- '20#.#05.155.117':445
- '20#.#05.218.155':445
- '20#.#05.132.46':445
- '20#.#05.117.131':445
- '20#.#05.63.39':445
- '20#.#05.189.109':445
- '20#.#05.3.58':445
- '20#.#05.237.138':445
- '20#.#05.40.239':445
- '20#.#05.65.206':445
- '20#.#05.64.200':445
- '20#.#05.54.164':445
- '20#.#05.91.245':445
- '20#.#05.146.230':445
- '20#.#05.55.73':445
- '20#.#05.227.56':445
- '20#.#05.171.32':445
- '20#.#05.134.7':445
- '20#.#05.71.130':445
- '20#.#05.13.107':445
- '20#.#05.96.209':445
- '20#.#05.128.237':445
- '20#.#05.97.167':445
- '20#.#05.73.72':445
- '20#.#05.223.1':445