Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#28.229.235':445
- '21#.#28.212.25':445
- '21#.#28.213.54':445
- '21#.#28.7.253':445
- '21#.#28.52.78':445
- '21#.#28.206.112':445
- '21#.#28.207.196':445
- '21#.#28.142.47':445
- '21#.#28.66.16':445
- '21#.#28.65.19':445
- '21#.#28.27.7':445
- '21#.#28.85.15':445
- '21#.#28.8.169':445
- '21#.#28.78.139':445
- '21#.#28.122.186':445
- '21#.#28.13.4':445
- '21#.#28.2.82':445
- '21#.#28.125.215':445
- '21#.#28.183.50':445
- '21#.#28.151.50':445
- '21#.#28.4.221':445
- '21#.#28.124.203':445
- '21#.#28.224.136':445
- '21#.#28.155.167':445
- '21#.#28.135.85':445
- '21#.#28.150.95':445
- '21#.#28.44.35':445
- '21#.#28.76.90':445
- '21#.#28.91.199':445
- '21#.#28.154.131':445
- '21#.#28.247.149':445
- '21#.#28.82.247':445
- '21#.#28.151.50':139
- '21#.#28.2.82':139
- '21#.#28.154.131':139
- '21#.#28.183.50':139
- '21#.#28.155.167':139
- '21#.#28.4.221':139
- '21#.#28.125.215':139
- '21#.#28.224.136':139
- '21#.#28.76.90':139
- '21#.#28.135.85':139
- '21#.#28.206.112':139
- '21#.#28.44.35':139
- '21#.#28.82.247':139
- '21#.#28.91.199':139
- '21#.#28.150.95':139
- '21#.#28.247.149':139
- '21#.#28.205.170':139
- '21#.#28.23.37':445
- '21#.#28.230.189':139
- '21#.#28.34.13':139
- '21#.#28.18.157':445
- '21#.#28.228.105':445
- '21#.#28.139.164':445
- '21#.#28.44.248':445
- '21#.#28.139.11':139
- '21#.#28.117.160':139
- '21#.#28.124.203':139
- '21#.#28.41.36':139
- '21#.#28.112.96':139
- '21#.#28.21.223':139
- '21#.#28.109.148':139
- '21#.#28.5.105':139
- '21#.#28.41.36':445
- '21#.#28.70.135':139
- '21#.#28.112.171':139
- '21#.#28.240.158':139
- '21#.#28.45.103':139
- '21#.#28.173.161':139
- '21#.#28.131.74':139
- '21#.#28.216.224':139
- '21#.#28.46.128':139
- '21#.#28.59.28':139
- '21#.#28.10.123':139
- '21#.#28.249.245':139
- '21#.#28.52.253':139
- '21#.#28.145.155':139
- '21#.#28.7.220':139
- '21#.#28.126.22':139
- '21#.#28.33.35':139
- '21#.#28.28.174':139
- '21#.#28.28.182':139
- '21#.#28.40.222':139
- '21#.#28.96.219':139
- '21#.#28.165.204':139
- '21#.#28.166.176':139
- '21#.#28.245.195':139
- '21#.#28.126.60':139
- '21#.#28.161.157':139
- '21#.#28.42.174':139
- '21#.#28.75.49':139
- '21#.#28.158.47':139
- '21#.#28.239.177':139
- '21#.#28.171.217':139
- '21#.#28.23.102':139
- '21#.#28.177.199':139
- '21#.#28.159.168':139
- '21#.#28.22.15':139
- '21#.#28.205.170':445
- '21#.#28.146.48':139
- '21#.#28.159.168':445
- '21#.#28.22.15':445
- '21#.#28.165.130':139
- '21#.#28.146.48':445
- '21#.#28.109.148':445
- '21#.#28.5.105':445
- '21#.#28.139.11':445
- '21#.#28.117.160':445
- '21#.#28.230.189':445
- '21#.#28.34.13':445
- '21#.#28.112.96':445
- '21#.#28.21.223':445
- '21#.#28.164.232':139
- '21#.#28.39.165':139
- '21#.#28.238.25':139
- '21#.#28.204.219':139
- '21#.#28.11.252':139
- '21#.#28.86.112':139
- '21#.#28.165.39':139
- '21#.#28.125.135':139
- '21#.#28.101.205':139
- '21#.#28.96.151':139
- '21#.#28.165.130':445
- '21#.#28.95.120':139
- '21#.#28.12.241':139
- '21#.#28.71.117':139
- '21#.#28.136.97':139
- '21#.#28.146.71':139
- '21#.#28.48.187':139
- '21#.#28.91.84':139
- '21#.#28.52.63':139
- '21#.#28.156.143':139
- '21#.#28.36.109':139
- '21#.#28.239.176':139
- '21#.#28.248.122':139
- '21#.#28.249.13':139
- '21#.#28.189.114':139
- '21#.#28.186.189':139
- '21#.#28.230.125':139
- '21#.#28.37.219':139
- '21#.#28.246.86':139
- '21#.#28.96.159':139
- '21#.#28.252.185':139
- '21#.#28.86.252':139
- '21#.#28.29.114':445
- '21#.#28.236.199':445
- '21#.#28.148.44':445
- '21#.#28.217.127':445
- '21#.#28.236.130':445
- '21#.#28.40.37':445
- '21#.#28.234.79':445
- '21#.#28.49.47':445
- '21#.#28.54.23':139
- '21#.#28.65.20':445
- '21#.#28.33.207':139
- '21#.#28.178.117':139
- '21#.#28.134.188':445
- '21#.#28.54.148':445
- '21#.#28.28.221':445
- '21#.#28.128.113':445
- '21#.#28.49.47':139
- '21#.#28.236.130':139
- '21#.#28.236.199':139
- '21#.#28.234.79':139
- '21#.#28.110.89':139
- '21#.#28.203.13':139
- '21#.#28.40.37':139
- '21#.#28.49.107':139
- '21#.#28.54.148':139
- '21#.#28.128.113':139
- '21#.#28.148.44':139
- '21#.#28.28.221':139
- '21#.#28.134.188':139
- '21#.#28.29.114':139
- '21#.#28.217.127':139
- '21#.#28.65.20':139
- '21#.#28.91.215':139
- '21#.#28.227.201':139
- '21#.#28.86.56':139
- '21#.#28.91.156':139
- '21#.#28.50.193':139
- '21#.#28.27.147':139
- '21#.#28.200.173':139
- '21#.#28.217.118':139
- '21#.#28.45.56':139
- '21#.#28.158.172':139
- '21#.#28.220.203':139
- '21#.#28.12.30':139
- '21#.#28.18.82':139
- '21#.#28.10.119':139
- '21#.#28.252.34':139
- '21#.#28.169.169':139
- '21#.#28.49.107':445
- '21#.#28.230.125':9988
- '21#.#28.246.86':9988
- '21#.#28.220.203':9988
- '21#.#28.158.172':9988
- '21#.#28.44.248':139
- '21#.#28.18.157':139
- '21#.#28.23.37':139
- '21#.#28.139.164':139
- '21#.#28.33.207':445
- '21#.#28.178.117':445
- '21#.#28.36.109':445
- '21#.#28.239.176':445
- '21#.#28.128.113':9988
- '21#.#28.236.199':9988
- '21#.#28.54.23':445
- '21#.#28.28.221':9988
- '21#.#28.7.253':139
- '21#.#28.229.235':139
- '21#.#28.78.139':139
- '21#.#28.213.54':139
- '21#.#28.142.47':139
- '21#.#28.52.78':139
- '21#.#28.212.25':139
- '21#.#28.207.196':139
- '21#.#28.85.15':139
- '21#.#28.66.16':139
- '21#.#28.228.105':139
- '21#.#28.27.7':139
- '21#.#28.13.4':139
- '21#.#28.8.169':139
- '21#.#28.65.19':139
- '21#.#28.122.186':139
- '21#.#28.86.56':445
- '21#.#28.91.156':445
- '21#.#28.18.82':445
- '21#.#28.10.119':445
- '21#.#28.200.173':445
- '21#.#28.217.118':445
- '21#.#28.91.215':445
- '21#.#28.227.201':445
- '21#.#28.220.203':445
- '21#.#28.12.30':445
- '21#.#28.110.89':445
- '21#.#28.203.13':445
- '21#.#28.252.34':445
- '21#.#28.169.169':445
- '21#.#28.45.56':445
- '21#.#28.158.172':445
- '21#.#28.52.63':445
- '21#.#28.156.143':445
- '21#.#28.246.86':445
- '21#.#28.96.159':445
- '21#.#28.248.122':445
- '21#.#28.249.13':445
- '21#.#28.48.187':445
- '21#.#28.91.84':445
- '21#.#28.230.125':445
- '21#.#28.37.219':445
- '21#.#28.50.193':445
- '21#.#28.27.147':445
- '21#.#28.252.185':445
- '21#.#28.86.252':445
- '21#.#28.189.114':445
- '21#.#28.186.189':445