Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#3.200.105':445
- '22#.#3.146.43':445
- '22#.#3.214.91':139
- '22#.#3.86.33':445
- '22#.#3.163.170':445
- '22#.#3.114.229':445
- '22#.#3.73.165':445
- '22#.#3.138.163':445
- '22#.#3.97.147':445
- '22#.#3.146.43':139
- '22#.#3.163.170':139
- '22#.#3.86.33':139
- '22#.#3.200.105':139
- '22#.#3.138.163':139
- '22#.#3.73.165':139
- '22#.#3.169.74':139
- '22#.#3.97.147':139
- '22#.#3.114.229':139
- '22#.#3.169.74':445
- '22#.#3.144.83':139
- '22#.#3.53.188':139
- '22#.#3.249.54':139
- '22#.#3.66.251':139
- '22#.#3.74.216':139
- '22#.#3.136.181':139
- '22#.#3.55.25':139
- '22#.#3.169.39':139
- '22#.#3.181.168':139
- '22#.#3.19.241':139
- '22#.#3.10.116':139
- '22#.#3.214.91':445
- '22#.#3.40.47':139
- '22#.#3.64.222':139
- '22#.#3.222.114':139
- '22#.#3.80.219':139
- '22#.#3.30.195':139
- '22#.#3.167.121':139
- '22#.#3.46.198':445
- '22#.#3.15.252':445
- '22#.#3.76.129':445
- '22#.#3.17.180':445
- '22#.#3.48.201':445
- '22#.#3.109.84':445
- '22#.#3.44.143':445
- '22#.#3.66.178':445
- '22#.#3.242.63':445
- '22#.#3.212.100':445
- '22#.#3.65.130':445
- '22#.#3.96.227':445
- '22#.#3.63.120':445
- '22#.#3.17.72':445
- '22#.#3.218.188':445
- '22#.#3.199.57':445
- '22#.#3.29.150':445
- '22#.#3.177.221':445
- '22#.#3.89.144':445
- '22#.#3.31.66':445
- '22#.#3.7.239':445
- '22#.#3.25.231':445
- '22#.#3.79.16':445
- '22#.#3.33.251':445
- '22#.#3.110.207':445
- '22#.#3.169.33':445
- '22#.#3.198.33':445
- '22#.#3.94.136':445
- '22#.#3.25.152':445
- '22#.#3.2.150':445
- '22#.#3.199.10':445
- '22#.#3.29.234':445
- '22#.#3.34.251':445
- '22#.#3.242.116':445
- '22#.#3.64.192':445
- '22#.#3.222.94':445
- '22#.#3.148.43':445
- '22#.#3.174.166':445
- '22#.#3.69.61':445
- '22#.#3.31.69':445
- '22#.#3.50.104':445
- '22#.#3.108.161':445
- '22#.#3.22.246':445
- '22#.63.0.73':445
- '22#.#3.212.136':445
- '22#.#3.29.106':445
- '22#.#3.205.36':445
- '22#.#3.55.25':445
- '22#.#3.96.164':445
- '22#.#3.181.168':445
- '22#.#3.136.181':445
- '22#.#3.251.232':445
- '22#.#3.86.124':445
- '22#.#3.43.32':445
- '22#.#3.97.181':445
- '22#.#3.98.97':445
- '22#.#3.103.43':445
- '22#.#3.147.245':139
- '22#.#3.234.159':139
- '22#.#3.213.202':139
- '22#.#3.77.168':139
- '22#.#3.85.251':139
- '22#.#3.119.31':139
- '22#.#3.30.119':139
- '22#.#3.242.253':139
- '22#.#3.31.57':139
- '22#.#3.45.111':445
- '22#.#3.106.0':445
- '22#.#3.113.146':445
- '22#.#3.16.56':445
- '22#.#3.44.150':445
- '22#.#3.216.70':445
- '22#.#3.96.233':139
- '22#.#3.34.49':445
- '22#.#3.98.90':445
- '22#.#3.169.39':445
- '22#.#3.29.106':139
- '22#.#3.205.36':139
- '22#.#3.31.69':139
- '22#.#3.22.246':139
- '22#.63.0.73':139
- '22#.#3.113.146':139
- '22#.#3.16.56':139
- '22#.#3.212.136':139
- '22#.#3.103.43':139
- '22#.#3.97.181':139
- '22#.#3.98.97':139
- '22#.#3.96.164':139
- '22#.#3.251.232':139
- '22#.#3.86.124':139
- '22#.#3.108.161':139
- '22#.#3.69.61':139
- '22#.#3.43.32':139
- '22#.#3.50.104':139
- '22#.#3.45.111':139
- '22#.#3.222.114':445
- '22#.#3.80.219':445
- '22#.#3.30.195':445
- '22#.#3.167.121':445
- '22#.#3.249.54':445
- '22#.#3.53.188':445
- '22#.#3.74.216':445
- '22#.#3.66.251':445
- '22#.#3.144.83':445
- '22#.#3.34.49':139
- '22#.#3.98.90':139
- '22#.#3.106.0':139
- '22#.#3.44.150':139
- '22#.#3.216.70':139
- '22#.#3.10.116':445
- '22#.#3.64.222':445
- '22#.#3.40.47':445
- '22#.#3.19.241':445
- '22#.#3.11.193':445
- '22#.#3.85.194':139
- '22#.#3.75.85':139
- '22#.#3.242.13':139
- '22#.#3.60.87':139
- '22#.#3.127.137':445
- '22#.#3.138.224':445
- '22#.#3.130.99':445
- '22#.#3.84.40':445
- '22#.#3.129.73':445
- '22#.#3.202.228':139
- '22#.#3.91.217':139
- '22#.#3.152.164':139
- '22#.#3.92.205':139
- '22#.#3.70.123':139
- '22#.#3.23.219':139
- '22#.#3.205.221':139
- '22#.63.48.7':139
- '22#.#3.149.197':139
- '22#.#3.73.87':445
- '22#.#3.12.59':445
- '22#.#3.101.11':445
- '22#.#3.42.221':445
- '22#.#3.72.225':445
- '22#.#3.81.31':445
- '22#.#3.86.59':445
- '22#.#3.213.130':445
- '22#.#3.22.183':445
- '22#.#3.175.19':445
- '22#.#3.254.14':445
- '22#.#3.46.212':445
- '22#.#3.235.142':445
- '22#.#3.206.235':445
- '22#.#3.17.137':445
- '22#.#3.254.184':445
- '22#.#3.1.180':445
- '22#.#3.27.225':445
- '22#.#3.174.72':445
- '22#.#3.9.238':139
- '22#.#3.27.225':139
- '22#.#3.174.72':139
- '22#.#3.46.212':139
- '22#.#3.17.137':139
- '22#.#3.254.184':139
- '22#.#3.72.225':139
- '22#.#3.12.59':139
- '22#.#3.1.180':139
- '22#.#3.42.221':139
- '22#.#3.84.40':139
- '22#.#3.138.224':139
- '22#.#3.73.87':139
- '22#.#3.129.73':139
- '22#.#3.127.137':139
- '22#.#3.206.235':139
- '22#.#3.254.14':139
- '22#.#3.130.99':139
- '22#.#3.235.142':139
- '22#.#3.101.11':139
- '22#.#3.6.191':139
- '22#.#3.54.86':139
- '22#.#3.150.62':139
- '22#.#3.212.150':139
- '22#.#3.58.113':139
- '22#.#3.101.165':139
- '22#.#3.117.94':139
- '22#.#3.72.51':139
- '22#.#3.103.203':139
- '22#.#3.175.19':139
- '22#.#3.86.59':139
- '22#.#3.81.31':139
- '22#.#3.22.183':139
- '22#.#3.213.130':139
- '22#.#3.54.39':139
- '22#.#3.147.99':139
- '22#.#3.173.197':139
- '22#.#3.133.9':139
- '22#.#3.242.63':139
- '22#.#3.212.100':139
- '22#.#3.76.129':139
- '22#.#3.109.84':139
- '22#.#3.44.143':139
- '22#.#3.29.234':139
- '22#.#3.34.251':139
- '22#.#3.66.178':139
- '22#.#3.31.66':139
- '22#.#3.177.221':139
- '22#.#3.89.144':139
- '22#.#3.96.227':139
- '22#.#3.218.188':139
- '22#.#3.199.57':139
- '22#.#3.48.201':139
- '22#.#3.15.252':139
- '22#.#3.29.150':139
- '22#.#3.17.180':139
- '22#.#3.2.150':139
- '22#.#3.94.136':139
- '22#.#3.25.152':139
- '22#.#3.25.231':139
- '22#.#3.110.207':139
- '22#.#3.169.33':139
- '22#.#3.254.120':445
- '22#.#3.140.126':445
- '22#.#3.198.33':139
- '22#.#3.46.198':139
- '22#.#3.148.43':139
- '22#.#3.174.166':139
- '22#.#3.199.10':139
- '22#.#3.242.116':139
- '22#.#3.64.192':139
- '22#.#3.7.239':139
- '22#.#3.33.251':139
- '22#.#3.222.94':139
- '22#.#3.79.16':139
- '22#.#3.65.130':139
- '22#.#3.101.165':445
- '22#.#3.117.94':445
- '22#.#3.72.51':445
- '22#.#3.103.203':445
- '22#.#3.9.238':445
- '22#.#3.202.228':445
- '22#.#3.91.217':445
- '22#.#3.92.205':445
- '22#.#3.152.164':445
- '22#.#3.54.39':445
- '22#.#3.147.99':445
- '22#.#3.173.197':445
- '22#.#3.133.9':445
- '22#.#3.150.62':445
- '22#.#3.54.86':445
- '22#.#3.58.113':445
- '22#.#3.6.191':445
- '22#.#3.212.150':445
- '22#.#3.70.123':445
- '22#.#3.1.180':9988
- '22#.#3.129.73':9988
- '22#.#3.27.225':9988
- '22#.#3.254.184':9988
- '22#.#3.254.120':139
- '22#.#3.63.120':139
- '22#.#3.17.72':139
- '22#.#3.140.126':139
- '22#.#3.11.193':139
- '22#.#3.23.219':445
- '22#.#3.205.221':445
- '22#.#3.149.197':445
- '22#.63.48.7':445
- '22#.#3.242.13':445
- '22#.#3.75.85':445
- '22#.#3.54.39':9988
- '22#.#3.60.87':445
- '22#.#3.85.194':445