Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '13#.#1.215.25':445
- '13#.#1.19.216':445
- '13#.#1.195.207':445
- '13#.#1.25.195':445
- '13#.#1.100.30':139
- '13#.#1.137.147':445
- '13#.#1.47.139':139
- '13#.#1.137.147':139
- '13#.#1.100.30':445
- '13#.#1.26.117':445
- '13#.#1.79.231':445
- '13#.#1.233.216':445
- '13#.#1.27.113':445
- '13#.#1.231.159':445
- '13#.#1.88.129':445
- '13#.#1.28.87':445
- '13#.#1.113.113':445
- '13#.#1.1.176':445
- '13#.#1.250.86':445
- '13#.#1.142.147':139
- '13#.#1.15.108':139
- '13#.#1.6.122':139
- '13#.#1.154.250':139
- '13#.#1.35.245':139
- '13#.#1.50.129':139
- '13#.#1.179.141':139
- '13#.#1.5.219':139
- '13#.#1.201.118':139
- '13#.#1.219.208':139
- '13#.#1.114.74':139
- '13#.#1.198.15':139
- '13#.#1.130.36':139
- '13#.#1.59.110':139
- '13#.#1.205.198':139
- '13#.#1.65.251':139
- '13#.#1.9.247':139
- '13#.#1.155.219':139
- '13#.91.67.1':139
- '13#.91.9.55':139
- '13#.#1.86.26':445
- '13#.#1.69.86':445
- '13#.#1.107.146':445
- '13#.#1.112.102':445
- '13#.#1.250.69':445
- '13#.#1.248.68':445
- '13#.#1.156.122':445
- '13#.#1.68.250':445
- '13#.#1.55.249':445
- '13#.91.37.7':445
- '13#.#1.215.25':139
- '13#.#1.19.216':139
- '13#.#1.195.207':139
- '13#.#1.25.195':139
- '13#.#1.238.119':445
- '13#.#1.169.31':445
- '13#.#1.199.89':445
- '13#.#1.87.124':445
- '13#.#1.75.202':445
- '13#.#1.47.197':445
- '13#.#1.40.92':445
- '13#.#1.50.203':445
- '13#.#1.232.244':445
- '13#.#1.23.233':445
- '13#.#1.181.217':445
- '13#.#1.237.116':445
- '13#.#1.19.18':445
- '13#.#1.186.181':445
- '13#.#1.84.69':445
- '13#.#1.245.79':445
- '13#.#1.151.250':445
- '13#.#1.232.18':445
- '13#.#1.68.204':445
- '13#.#1.226.38':445
- '13#.#1.26.135':445
- '13#.#1.50.141':445
- '13#.91.58.9':445
- '13#.91.8.99':445
- '13#.#1.115.208':445
- '13#.#1.81.252':139
- '13#.#1.77.14':445
- '13#.#1.157.7':445
- '13#.#1.96.159':445
- '13#.91.14.8':445
- '13#.#1.181.233':445
- '13#.#1.61.52':445
- '13#.#1.126.190':445
- '13#.#1.105.214':445
- '13#.#1.107.203':445
- '13#.#1.81.252':445
- '13#.#1.15.108':445
- '13#.#1.6.122':445
- '13#.#1.154.250':445
- '13#.#1.35.245':445
- '13#.#1.50.129':445
- '13#.#1.179.141':445
- '13#.#1.5.219':445
- '13#.#1.201.118':445
- '13#.#1.219.208':445
- '13#.#1.66.76':445
- '13#.#1.126.44':445
- '13#.#1.171.139':445
- '13#.#1.224.28':445
- '13#.#1.78.106':445
- '13#.#1.50.36':445
- '13#.#1.252.218':139
- '13#.#1.239.148':139
- '13#.#1.32.56':445
- '13#.#1.218.111':445
- '13#.#1.176.102':445
- '13#.#1.249.216':445
- '13#.#1.30.92':445
- '13#.#1.105.9':445
- '13#.#1.93.132':445
- '13#.#1.156.120':445
- '13#.#1.25.41':445
- '13#.#1.200.25':445
- '13#.#1.255.26':445
- '13#.#1.196.44':445
- '13#.#1.249.216':139
- '13#.#1.30.92':139
- '13#.#1.105.9':139
- '13#.#1.93.132':139
- '13#.#1.156.120':139
- '13#.#1.25.41':139
- '13#.#1.200.25':139
- '13#.#1.255.26':139
- '13#.#1.196.44':139
- '13#.#1.66.76':139
- '13#.#1.77.14':139
- '13#.#1.157.7':139
- '13#.#1.96.159':139
- '13#.91.14.8':139
- '13#.#1.181.233':139
- '13#.#1.61.52':139
- '13#.#1.126.190':139
- '13#.#1.105.214':139
- '13#.#1.107.203':139
- '13#.#1.176.102':139
- '13#.#1.130.36':445
- '13#.#1.65.251':445
- '13#.#1.205.198':445
- '13#.#1.198.15':445
- '13#.91.67.1':445
- '13#.#1.9.247':445
- '13#.#1.114.74':445
- '13#.91.9.55':445
- '13#.#1.155.219':445
- '13#.#1.59.110':445
- '13#.#1.126.44':139
- '13#.#1.171.139':139
- '13#.#1.224.28':139
- '13#.#1.78.106':139
- '13#.#1.50.36':139
- '13#.#1.47.139':445
- '13#.#1.142.147':445
- '13#.#1.32.56':139
- '13#.#1.218.111':139
- '13#.#1.14.10':445
- '13#.#1.151.241':445
- '13#.#1.197.43':139
- '13#.#1.117.71':139
- '13#.#1.148.18':445
- '13#.#1.73.80':445
- '13#.#1.30.24':445
- '13#.#1.207.222':445
- '13#.#1.86.85':445
- '13#.91.5.48':139
- '13#.#1.134.140':139
- '13#.#1.34.134':139
- '13#.#1.177.122':139
- '13#.#1.140.176':139
- '13#.#1.160.177':139
- '13#.#1.64.235':139
- '13#.#1.205.107':139
- '13#.#1.226.149':139
- '13#.#1.226.199':139
- '13#.#1.72.30':445
- '13#.#1.239.168':445
- '13#.#1.29.64':445
- '13#.#1.67.213':445
- '13#.#1.31.22':445
- '13#.#1.163.134':445
- '13#.#1.114.85':445
- '13#.#1.0.130':445
- '13#.#1.125.163':445
- '13#.#1.102.125':445
- '13#.#1.88.89':445
- '13#.#1.90.127':445
- '13#.#1.98.60':445
- '13#.#1.178.71':445
- '13#.#1.191.147':445
- '13#.#1.187.36':445
- '13#.#1.76.34':445
- '13#.#1.18.194':445
- '13#.#1.16.217':445
- '13#.#1.117.178':445
- '13#.#1.187.36':139
- '13#.#1.16.217':139
- '13#.#1.90.127':139
- '13#.#1.98.60':139
- '13#.#1.117.178':139
- '13#.#1.88.89':139
- '13#.#1.67.213':139
- '13#.#1.76.34':139
- '13#.#1.18.194':139
- '13#.#1.191.147':139
- '13#.#1.151.241':139
- '13#.#1.14.10':139
- '13#.#1.86.85':139
- '13#.#1.207.222':139
- '13#.#1.148.18':139
- '13#.#1.72.30':139
- '13#.#1.178.71':139
- '13#.#1.73.80':139
- '13#.#1.30.24':139
- '13#.#1.31.22':139
- '13#.#1.71.10':139
- '13#.#1.23.116':139
- '13#.#1.86.161':139
- '13#.#1.197.86':139
- '13#.#1.180.43':139
- '13#.#1.103.53':139
- '13#.#1.122.78':139
- '13#.#1.124.162':139
- '13#.#1.55.92':139
- '13#.#1.161.179':139
- '13#.#1.163.134':139
- '13#.#1.125.163':139
- '13#.#1.239.168':139
- '13#.#1.29.64':139
- '13#.#1.102.125':139
- '13#.#1.152.74':139
- '13#.91.45.6':139
- '13#.#1.114.85':139
- '13#.#1.0.130':139
- '13#.#1.152.74':445
- '13#.#1.151.250':139
- '13#.#1.232.18':139
- '13#.#1.68.204':139
- '13#.#1.226.38':139
- '13#.#1.26.135':139
- '13#.#1.50.141':139
- '13#.91.58.9':139
- '13#.91.8.99':139
- '13#.#1.115.208':139
- '13#.#1.47.197':139
- '13#.#1.86.26':139
- '13#.#1.69.86':139
- '13#.#1.107.146':139
- '13#.#1.112.102':139
- '13#.#1.250.69':139
- '13#.#1.55.249':139
- '13#.#1.156.122':139
- '13#.#1.68.250':139
- '13#.#1.248.68':139
- '13#.#1.245.79':139
- '13#.#1.233.216':139
- '13#.#1.88.129':139
- '13#.#1.231.159':139
- '13#.#1.79.231':139
- '13#.#1.1.176':139
- '13#.#1.113.113':139
- '13#.#1.26.117':139
- '13#.#1.250.86':139
- '13#.#1.28.87':139
- '13#.#1.27.113':139
- '13#.#1.40.92':139
- '13#.#1.50.203':139
- '13#.#1.232.244':139
- '13#.#1.23.233':139
- '13#.#1.181.217':139
- '13#.#1.237.116':139
- '13#.#1.19.18':139
- '13#.#1.186.181':139
- '13#.#1.84.69':139
- '13#.#1.140.176':445
- '13#.#1.134.140':445
- '13#.#1.122.78':445
- '13#.#1.177.122':445
- '13#.#1.34.134':445
- '13#.#1.226.199':445
- '13#.#1.64.235':445
- '13#.#1.160.177':445
- '13#.#1.226.149':445
- '13#.#1.103.53':445
- '13#.#1.161.179':445
- '13#.#1.197.86':445
- '13#.91.45.6':445
- '13#.#1.86.161':445
- '13#.#1.71.10':445
- '13#.#1.124.162':445
- '13#.#1.55.92':445
- '13#.#1.23.116':445
- '13#.#1.180.43':445
- '13#.#1.205.107':445
- '13#.#1.140.176':9988
- '13#.#1.238.119':139
- '13#.#1.23.116':9988
- '13#.#1.180.43':9988
- '13#.#1.87.124':139
- '13#.#1.199.89':139
- '13#.91.37.7':139
- '13#.#1.75.202':139
- '13#.#1.169.31':139
- '13#.#1.197.86':9988
- '13#.#1.117.71':445
- '13#.#1.148.18':9988
- '13#.91.5.48':445
- '13#.#1.197.43':445
- '13#.#1.14.10':9988
- '13#.#1.0.130':9988
- '13#.#1.161.179':9988
- '13#.#1.187.36':9988
- '13#.#1.125.163':9988