Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '19#.#38.33.50':445
- '19#.#38.100.154':445
- '19#.#38.46.195':445
- '19#.#38.81.252':445
- '19#.#38.58.11':445
- '19#.#38.235.14':445
- '19#.#38.64.44':445
- '19#.#38.27.64':445
- '19#.#38.114.241':445
- '19#.#38.34.226':445
- '19#.#38.173.209':445
- '19#.#38.59.30':445
- '19#.#38.244.92':445
- '19#.#38.191.244':445
- '19#.#38.93.248':445
- '19#.#38.93.45':445
- '19#.#38.166.23':445
- '19#.#38.163.165':445
- '19#.#38.239.157':445
- '19#.#38.10.226':445
- '19#.#38.165.9':445
- '19#.#38.135.121':445
- '19#.#38.159.163':445
- '19#.#38.9.160':445
- '19#.#38.139.218':445
- '19#.#38.210.1':445
- '19#.#38.35.201':445
- '19#.#38.255.53':445
- '19#.#38.23.144':445
- '19#.#38.12.107':445
- '19#.#38.245.40':445
- '19#.#38.184.245':445
- '19#.#38.168.235':445
- '19#.#38.159.163':139
- '19#.#38.9.160':139
- '19#.#38.166.23':139
- '19#.#38.163.165':139
- '19#.#38.110.184':139
- '19#.#38.126.87':139
- '19#.#38.165.9':139
- '19#.#38.135.121':139
- '19#.#38.245.40':139
- '19#.#38.184.245':139
- '19#.#38.139.218':139
- '19#.#38.210.1':139
- '19#.#38.239.157':139
- '19#.#38.10.226':139
- '19#.#38.23.144':139
- '19#.#38.12.107':139
- '19#.#38.75.223':139
- '19#.#38.157.155':139
- '19#.#38.7.13':139
- '19#.#38.148.49':139
- '19#.#38.116.233':445
- '19#.#38.48.237':445
- '19#.#38.28.234':139
- '19#.#38.32.20':445
- '19#.#38.104.1':139
- '19#.#38.59.10':139
- '19#.#38.229.59':139
- '19#.#38.155.164':139
- '19#.#38.36.236':139
- '19#.#38.55.244':139
- '19#.#38.236.5':139
- '19#.#38.149.235':139
- '19#.#38.110.184':445
- '19#.#38.179.204':139
- '19#.#38.144.180':139
- '19#.#38.199.179':139
- '19#.#38.26.15':139
- '19#.#38.80.237':139
- '19#.#38.169.17':139
- '19#.#38.94.209':139
- '19#.#38.15.25':139
- '19#.#38.40.85':139
- '19#.#38.13.75':139
- '19#.#38.111.124':139
- '19#.#38.68.190':139
- '19#.#38.77.251':139
- '19#.#38.18.195':139
- '19#.#38.46.131':139
- '19#.#38.60.47':139
- '19#.#38.148.155':139
- '19#.#38.76.233':139
- '19#.#38.47.30':139
- '19#.#38.43.250':139
- '19#.#38.90.52':139
- '19#.#38.192.254':139
- '19#.#38.211.0':139
- '19#.#38.195.145':139
- '19#.#38.103.114':139
- '19#.#38.148.51':139
- '19#.#38.49.24':139
- '19#.#38.115.6':139
- '19#.#38.200.87':139
- '19#.#38.29.200':139
- '19#.#38.207.53':139
- '19#.#38.128.57':139
- '19#.#38.217.15':139
- '19#.#38.148.49':445
- '19#.#38.75.223':445
- '19#.#38.55.244':445
- '19#.#38.7.13':445
- '19#.#38.182.103':139
- '19#.#38.202.118':139
- '19#.#38.157.155':445
- '19#.#38.28.234':445
- '19#.#38.155.164':445
- '19#.#38.104.1':445
- '19#.#38.126.87':445
- '19#.#38.229.59':445
- '19#.#38.149.235':445
- '19#.#38.36.236':445
- '19#.#38.59.10':445
- '19#.#38.236.5':445
- '19#.#38.18.4':139
- '19#.#38.68.46':139
- '19#.#38.123.190':139
- '19#.#38.209.156':139
- '19#.#38.6.158':139
- '19#.#38.47.157':139
- '19#.#38.36.68':139
- '19#.#38.211.35':139
- '19#.#38.201.241':139
- '19#.#38.35.223':139
- '19#.#38.230.202':139
- '19#.#38.123.200':139
- '19#.#38.197.18':139
- '19#.#38.10.137':139
- '19#.#38.186.16':139
- '19#.#38.166.210':139
- '19#.#38.255.53':139
- '19#.#38.8.168':139
- '19#.#38.150.56':139
- '19#.#38.42.175':139
- '19#.#38.154.25':139
- '19#.#38.101.13':139
- '19#.#38.225.249':139
- '19#.#38.159.149':139
- '19#.#38.190.75':139
- '19#.#38.81.33':139
- '19#.#38.51.76':139
- '19#.#38.33.134':139
- '19#.#38.223.26':139
- '19#.#38.57.180':139
- '19#.#38.37.76':139
- '19#.#38.96.167':139
- '19#.#38.124.170':139
- '19#.#38.95.92':445
- '19#.#38.40.225':445
- '19#.#38.15.199':445
- '19#.#38.184.148':445
- '19#.#38.49.113':445
- '19#.#38.28.50':445
- '19#.#38.101.45':445
- '19#.#38.112.184':445
- '19#.#38.93.181':445
- '19#.#38.52.126':445
- '19#.#38.223.226':139
- '19#.#38.112.49':139
- '19#.#38.112.50':445
- '19#.#38.171.253':445
- '19#.#38.192.177':445
- '19#.#38.220.143':445
- '19#.#38.130.81':139
- '19#.#38.101.45':139
- '19#.#38.112.184':139
- '19#.#38.95.92':139
- '19#.#38.40.225':139
- '19#.#38.214.193':139
- '19#.#38.89.140':139
- '19#.#38.49.113':139
- '19#.#38.28.50':139
- '19#.#38.52.126':139
- '19#.#38.220.143':139
- '19#.#38.171.253':139
- '19#.#38.112.50':139
- '19#.#38.15.199':139
- '19#.#38.184.148':139
- '19#.#38.192.177':139
- '19#.#38.93.181':139
- '19#.#38.84.248':139
- '19#.#38.50.85':139
- '19#.#38.12.38':139
- '19#.#38.107.241':139
- '19#.#38.193.113':139
- '19#.#38.132.112':139
- '19#.#38.14.50':139
- '19#.#38.78.26':139
- '19#.#38.157.129':139
- '19#.#38.67.158':139
- '19#.#38.51.254':139
- '19#.#38.87.107':139
- '19#.#38.246.63':139
- '19#.#38.38.46':139
- '19#.#38.12.200':139
- '19#.#38.111.186':139
- '19#.#38.214.193':445
- '19#.#38.159.149':9988
- '19#.#38.32.20':139
- '19#.#38.12.38':9988
- '19#.#38.78.26':9988
- '19#.#38.168.235':139
- '19#.#38.173.209':139
- '19#.#38.116.233':139
- '19#.#38.48.237':139
- '19#.#38.112.49':445
- '19#.#38.15.199':9988
- '19#.#38.225.249':445
- '19#.#38.223.226':445
- '19#.#38.192.177':9988
- '19#.#38.214.193':9988
- '19#.#38.49.113':9988
- '19#.#38.220.143':9988
- '19#.#38.100.154':139
- '19#.#38.64.44':139
- '19#.#38.81.252':139
- '19#.#38.33.50':139
- '19#.#38.235.14':139
- '19#.#38.35.201':139
- '19#.#38.27.64':139
- '19#.#38.58.11':139
- '19#.#38.34.226':139
- '19#.#38.93.248':139
- '19#.#38.59.30':139
- '19#.#38.114.241':139
- '19#.#38.191.244':139
- '19#.#38.46.195':139
- '19#.#38.93.45':139
- '19#.#38.244.92':139
- '19#.#38.101.13':445
- '19#.#38.107.241':445
- '19#.#38.84.248':445
- '19#.#38.38.46':445
- '19#.#38.12.38':445
- '19#.#38.78.26':445
- '19#.#38.193.113':445
- '19#.#38.14.50':445
- '19#.#38.50.85':445
- '19#.#38.87.107':445
- '19#.#38.157.129':445
- '19#.#38.89.140':445
- '19#.#38.51.254':445
- '19#.#38.111.186':445
- '19#.#38.246.63':445
- '19#.#38.67.158':445
- '19#.#38.12.200':445
- '19#.#38.37.76':445
- '19#.#38.154.25':445
- '19#.#38.57.180':445
- '19#.#38.42.175':445
- '19#.#38.159.149':445
- '19#.#38.190.75':445
- '19#.#38.8.168':445
- '19#.#38.150.56':445
- '19#.#38.33.134':445
- '19#.#38.223.26':445
- '19#.#38.132.112':445
- '19#.#38.130.81':445
- '19#.#38.96.167':445
- '19#.#38.124.170':445
- '19#.#38.81.33':445
- '19#.#38.51.76':445