Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '14#.#30.37.65':445
- '14#.#30.222.233':445
- '14#.#30.108.235':445
- '14#.#30.4.30':445
- '14#.#30.63.79':445
- '14#.#30.72.10':445
- '14#.#30.41.199':445
- '14#.#30.20.42':445
- '14#.#30.44.48':445
- '14#.#30.143.110':445
- '14#.#30.154.221':445
- '14#.#30.4.11':445
- '14#.#30.23.218':445
- '14#.#30.154.214':445
- '14#.#30.109.50':445
- '14#.#30.139.205':445
- '14#.#30.219.205':445
- '14#.#30.23.41':445
- '14#.#30.30.107':445
- '14#.#30.91.83':445
- '14#.#30.173.89':445
- '14#.#30.59.56':445
- '14#.#30.89.23':445
- '14#.#30.165.49':445
- '14#.#30.138.219':445
- '14#.#30.231.185':445
- '14#.#30.84.34':445
- '14#.#30.199.96':445
- '14#.#30.134.72':445
- '14#.#30.140.58':445
- '14#.#30.116.112':445
- '14#.#30.117.185':445
- '14#.#30.58.163':445
- '14#.#30.89.23':139
- '14#.#30.173.89':139
- '14#.#30.219.205':139
- '14#.#30.23.41':139
- '14#.#30.228.137':139
- '14#.#30.20.161':139
- '14#.#30.165.49':139
- '14#.#30.59.56':139
- '14#.#30.116.112':139
- '14#.#30.117.185':139
- '14#.#30.138.219':139
- '14#.#30.231.185':139
- '14#.#30.30.107':139
- '14#.#30.91.83':139
- '14#.#30.140.58':139
- '14#.#30.134.72':139
- '14#.#30.149.17':139
- '14#.#30.186.152':139
- '14#.#30.202.86':139
- '14#.#30.24.141':139
- '14#.#30.2.114':445
- '14#.#30.228.85':445
- '14#.#30.226.251':445
- '14#.#30.36.227':445
- '14#.#30.105.211':139
- '14#.#30.122.195':139
- '14#.#30.131.47':139
- '14#.#30.108.4':139
- '14#.#30.147.134':139
- '14#.#30.83.74':139
- '14#.#30.34.106':139
- '14#.#30.134.34':139
- '14#.#30.119.210':139
- '14#.#30.10.119':139
- '14#.#30.107.85':139
- '14#.#30.26.63':139
- '14#.#30.8.150':139
- '14#.#30.41.242':139
- '14#.#30.84.194':139
- '14#.#30.175.61':139
- '14#.#30.239.135':139
- '14#.#30.142.239':139
- '14#.#30.251.194':139
- '14#.#30.13.139':139
- '14#.#30.2.123':139
- '14#.#30.36.3':139
- '14#.#30.235.199':139
- '14#.#30.122.141':139
- '14#.#30.119.112':139
- '14#.#30.205.201':139
- '14#.#30.149.134':139
- '14#.#30.122.24':139
- '14#.#30.118.188':139
- '14#.#30.43.182':139
- '14#.#30.242.180':139
- '14#.#30.163.128':139
- '14#.#30.145.196':139
- '14#.#30.189.22':139
- '14#.#30.70.82':139
- '14#.#30.57.201':139
- '14#.#30.222.209':139
- '14#.#30.134.222':139
- '14#.#30.148.192':139
- '14#.#30.210.148':139
- '14#.#30.142.20':139
- '14#.#30.202.86':445
- '14#.#30.24.141':445
- '14#.#30.147.134':445
- '14#.#30.83.74':445
- '14#.#30.147.186':139
- '14#.#30.120.147':139
- '14#.#30.149.17':445
- '14#.#30.186.152':445
- '14#.#30.131.47':445
- '14#.#30.108.4':445
- '14#.#30.228.137':445
- '14#.#30.20.161':445
- '14#.#30.34.106':445
- '14#.#30.134.34':445
- '14#.#30.105.211':445
- '14#.#30.122.195':445
- '14#.#30.74.189':139
- '14#.#30.187.88':139
- '14#.#30.53.198':139
- '14#.#30.158.55':139
- '14#.#30.117.150':139
- '14#.#30.19.46':139
- '14#.#30.85.91':139
- '14#.#30.95.253':139
- '14#.#30.196.0':139
- '14#.#30.83.137':139
- '14#.#30.154.120':139
- '14#.#30.74.26':139
- '14#.#30.36.253':139
- '14#.#30.59.138':139
- '14#.#30.11.84':139
- '14#.#30.253.10':139
- '14#.#30.199.96':139
- '14#.#30.94.75':139
- '14#.#30.70.1':139
- '14#.#30.49.54':139
- '14#.#30.107.117':139
- '14#.#30.148.52':139
- '14#.#30.8.32':139
- '14#.#30.133.186':139
- '14#.#30.52.134':139
- '14#.#30.71.102':139
- '14#.#30.198.153':139
- '14#.#30.123.125':139
- '14#.#30.224.122':139
- '14#.#30.229.200':139
- '14#.#30.85.166':139
- '14#.#30.227.197':139
- '14#.#30.200.227':139
- '14#.#30.115.241':445
- '14#.#30.245.20':445
- '14#.#30.70.2':445
- '14#.#30.5.105':445
- '14#.#30.18.63':445
- '14#.#30.153.241':445
- '14#.#30.4.45':445
- '14#.#30.63.125':445
- '14#.#30.212.170':445
- '14#.#30.89.85':445
- '14#.#30.231.36':139
- '14#.#30.56.127':139
- '14#.#30.166.46':445
- '14#.#30.48.101':445
- '14#.#30.127.218':445
- '14#.#30.93.149':445
- '14#.#30.209.98':139
- '14#.#30.4.45':139
- '14#.#30.63.125':139
- '14#.#30.115.241':139
- '14#.#30.245.20':139
- '14#.#30.101.100':139
- '14#.#30.82.116':139
- '14#.#30.18.63':139
- '14#.#30.153.241':139
- '14#.#30.48.101':139
- '14#.#30.127.218':139
- '14#.#30.5.105':139
- '14#.#30.166.46':139
- '14#.#30.89.85':139
- '14#.#30.93.149':139
- '14#.#30.70.2':139
- '14#.#30.212.170':139
- '14#.#30.30.61':139
- '14#.#30.177.135':139
- '14#.#30.58.43':139
- '14#.#30.132.57':139
- '14#.#30.36.64':139
- '14#.#30.90.36':139
- '14#.#30.88.17':139
- '14#.#30.186.206':139
- '14#.#30.8.41':139
- '14#.#30.249.167':139
- '14#.#30.21.131':139
- '14#.#30.121.229':139
- '14#.#30.174.101':139
- '14#.#30.172.1':139
- '14#.#30.218.205':139
- '14#.#30.36.207':139
- '14#.#30.226.251':139
- '14#.#30.36.227':139
- '14#.#30.224.122':9988
- '14#.#30.229.200':9988
- '14#.#30.58.163':139
- '14#.#30.154.221':139
- '14#.#30.2.114':139
- '14#.#30.228.85':139
- '14#.#30.231.36':445
- '14#.#30.56.127':445
- '14#.#30.148.52':445
- '14#.#30.8.32':445
- '14#.#30.36.207':9988
- '14#.#30.123.125':9988
- '14#.#30.48.101':9988
- '14#.#30.101.100':9988
- '14#.#30.222.233':139
- '14#.#30.41.199':139
- '14#.#30.4.30':139
- '14#.#30.37.65':139
- '14#.#30.72.10':139
- '14#.#30.84.34':139
- '14#.#30.20.42':139
- '14#.#30.63.79':139
- '14#.#30.143.110':139
- '14#.#30.109.50':139
- '14#.#30.4.11':139
- '14#.#30.44.48':139
- '14#.#30.154.214':139
- '14#.#30.108.235':139
- '14#.#30.139.205':139
- '14#.#30.23.218':139
- '14#.#30.52.134':445
- '14#.#30.58.43':445
- '14#.#30.132.57':445
- '14#.#30.174.101':445
- '14#.#30.172.1':445
- '14#.#30.88.17':445
- '14#.#30.186.206':445
- '14#.#30.30.61':445
- '14#.#30.177.135':445
- '14#.#30.21.131':445
- '14#.#30.121.229':445
- '14#.#30.101.100':445
- '14#.#30.82.116':445
- '14#.#30.218.205':445
- '14#.#30.36.207':445
- '14#.#30.8.41':445
- '14#.#30.249.167':445
- '14#.#30.85.166':445
- '14#.#30.49.54':445
- '14#.#30.200.227':445
- '14#.#30.229.200':445
- '14#.#30.70.1':445
- '14#.#30.133.186':445
- '14#.#30.107.117':445
- '14#.#30.94.75':445
- '14#.#30.209.98':445
- '14#.#30.123.125':445
- '14#.#30.36.64':445
- '14#.#30.90.36':445
- '14#.#30.198.153':445
- '14#.#30.227.197':445
- '14#.#30.224.122':445
- '14#.#30.71.102':445