Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#23.78.193':445
- '21#.#23.244.94':139
- '21#.#23.163.127':445
- '21#.#23.196.228':445
- '21#.#23.101.249':139
- '21#.#23.144.221':139
- '21#.#23.3.44':139
- '21#.#23.244.94':445
- '21#.#23.101.249':445
- '21#.#23.226.27':445
- '21#.#23.40.170':445
- '21#.#23.61.113':445
- '21#.#23.58.100':445
- '21#.#23.96.97':445
- '21#.#23.79.183':445
- '21#.#23.75.213':445
- '21#.#23.206.156':445
- '21#.#23.87.207':445
- '21#.#23.27.141':445
- '21#.#23.18.150':139
- '21#.#23.43.238':139
- '21#.#23.197.182':139
- '21#.#23.188.213':139
- '21#.#23.36.185':139
- '21#.#23.137.36':139
- '21#.#23.70.214':139
- '21#.#23.12.54':139
- '21#.#23.16.129':139
- '21#.#23.148.184':139
- '21#.#23.77.129':139
- '21#.#23.107.15':139
- '21#.#23.23.213':139
- '21#.#23.150.1':139
- '21#.#23.201.126':139
- '21#.#23.116.69':139
- '21#.#23.138.201':139
- '21#.#23.58.148':139
- '21#.#23.13.89':139
- '21#.#23.200.178':139
- '21#.#23.85.112':445
- '21#.#23.198.153':445
- '21#.#23.51.133':445
- '21#.#23.191.33':445
- '21#.#23.139.164':445
- '21#.#23.224.68':445
- '21#.#23.19.237':445
- '21#.#23.124.139':445
- '21#.#23.68.124':445
- '21#.#23.179.210':445
- '21#.#23.78.193':139
- '21#.#23.27.186':445
- '21#.#23.163.127':139
- '21#.#23.196.228':139
- '21#.#23.99.130':445
- '21#.#23.64.53':445
- '21#.#23.149.31':445
- '21#.#23.32.186':445
- '21#.#23.17.94':445
- '21#.#23.246.251':445
- '21#.#23.80.183':445
- '21#.#23.102.216':445
- '21#.#23.156.25':445
- '21#.#23.19.154':445
- '21#.#23.149.220':445
- '21#.#23.69.24':445
- '21#.#23.54.91':445
- '21#.#23.33.150':445
- '21#.#23.155.33':445
- '21#.#23.18.8':445
- '21#.#23.22.196':445
- '21#.#23.23.41':445
- '21#.#23.33.200':445
- '21#.#23.195.252':445
- '21#.#23.87.37':445
- '21#.#23.142.152':445
- '21#.#23.130.57':445
- '21#.#23.66.92':445
- '21#.#23.174.134':445
- '21#.#23.89.90':445
- '21#.#23.44.76':445
- '21#.#23.113.37':445
- '21#.#23.61.97':445
- '21#.#23.130.18':445
- '21#.#23.154.127':445
- '21#.#23.85.246':445
- '21#.#23.129.245':445
- '21#.#23.140.106':445
- '21#.#23.12.54':445
- '21#.#23.36.185':445
- '21#.#23.43.238':445
- '21#.#23.77.129':445
- '21#.#23.188.213':445
- '21#.#23.197.182':445
- '21#.#23.148.184':445
- '21#.#23.70.214':445
- '21#.#23.137.36':445
- '21#.#23.16.129':445
- '21#.#23.120.91':445
- '21#.#23.84.204':445
- '21#.#23.5.85':445
- '21#.#23.69.164':445
- '21#.#23.203.180':445
- '21#.#23.14.122':445
- '21#.#23.21.126':139
- '21#.#23.94.61':139
- '21#.#23.73.40':445
- '21#.#23.95.123':445
- '21#.#23.113.196':445
- '21#.#23.94.30':445
- '21#.#23.131.93':445
- '21#.#23.71.126':445
- '21#.#23.30.226':445
- '21#.#23.254.224':445
- '21#.#23.238.208':445
- '21#.#23.67.3':445
- '21#.#23.192.194':445
- '21#.#23.249.124':445
- '21#.#23.94.30':139
- '21#.#23.131.93':139
- '21#.#23.71.126':139
- '21#.#23.30.226':139
- '21#.#23.254.224':139
- '21#.#23.238.208':139
- '21#.#23.67.3':139
- '21#.#23.192.194':139
- '21#.#23.249.124':139
- '21#.#23.120.91':139
- '21#.#23.89.90':139
- '21#.#23.44.76':139
- '21#.#23.113.37':139
- '21#.#23.61.97':139
- '21#.#23.130.18':139
- '21#.#23.154.127':139
- '21#.#23.85.246':139
- '21#.#23.129.245':139
- '21#.#23.140.106':139
- '21#.#23.69.164':139
- '21#.#23.107.15':445
- '21#.#23.116.69':445
- '21#.#23.150.1':445
- '21#.#23.201.126':445
- '21#.#23.23.213':445
- '21#.#23.138.201':445
- '21#.#23.58.148':445
- '21#.#23.13.89':445
- '21#.#23.200.178':445
- '21#.#23.18.150':445
- '21#.#23.84.204':139
- '21#.#23.5.85':139
- '21#.#23.113.196':139
- '21#.#23.203.180':139
- '21#.#23.14.122':139
- '21#.#23.144.221':445
- '21#.#23.3.44':445
- '21#.#23.73.40':139
- '21#.#23.95.123':139
- '21#.#23.226.27':139
- '21#.#23.77.168':445
- '21#.#23.41.27':445
- '21#.#23.231.229':139
- '21#.#23.111.173':139
- '21#.#23.49.78':445
- '21#.#23.1.13':445
- '21#.#23.48.222':445
- '21#.#23.28.116':445
- '21#.#23.11.174':445
- '21#.#23.196.245':139
- '21#.#23.133.132':139
- '21#.#23.241.213':139
- '21#.#23.70.210':139
- '21#.#23.131.164':139
- '21#.#23.6.200':139
- '21#.#23.107.198':139
- '21#.#23.73.108':139
- '21#.#23.38.30':139
- '21#.#23.251.189':139
- '21#.#23.224.251':445
- '21#.#23.95.167':445
- '21#.#23.181.212':445
- '21#.#23.45.122':445
- '21#.#23.98.158':445
- '21#.#23.245.93':445
- '21#.#23.11.135':445
- '21#.#23.87.13':445
- '21#.#23.89.72':445
- '21#.#23.58.93':445
- '21#.#23.54.62':445
- '21#.#23.240.61':445
- '21#.#23.46.60':445
- '21#.#23.95.169':445
- '21#.#23.13.217':445
- '21#.#23.90.83':445
- '21#.#23.3.154':445
- '21#.#23.124.46':445
- '21#.#23.208.179':445
- '21#.#23.60.209':445
- '21#.#23.90.83':139
- '21#.#23.208.179':139
- '21#.#23.240.61':139
- '21#.#23.46.60':139
- '21#.#23.60.209':139
- '21#.#23.54.62':139
- '21#.#23.45.122':139
- '21#.#23.3.154':139
- '21#.#23.124.46':139
- '21#.#23.13.217':139
- '21#.#23.77.168':139
- '21#.#23.49.78':139
- '21#.#23.11.174':139
- '21#.#23.41.27':139
- '21#.#23.28.116':139
- '21#.#23.224.251':139
- '21#.#23.95.169':139
- '21#.#23.1.13':139
- '21#.#23.48.222':139
- '21#.#23.98.158':139
- '21#.#23.6.38':139
- '21#.#23.39.87':139
- '21#.#23.148.68':139
- '21#.#23.186.214':139
- '21#.#23.141.101':139
- '21#.#23.107.52':139
- '21#.#23.127.223':139
- '21#.#23.127.115':139
- '21#.#23.5.130':139
- '21#.#23.13.34':139
- '21#.#23.245.93':139
- '21#.#23.89.72':139
- '21#.#23.95.167':139
- '21#.#23.181.212':139
- '21#.#23.58.93':139
- '21#.#23.135.150':139
- '21#.#23.118.53':139
- '21#.#23.11.135':139
- '21#.#23.87.13':139
- '21#.#23.195.252':139
- '21#.#23.22.196':139
- '21#.#23.246.251':139
- '21#.#23.33.200':139
- '21#.#23.23.41':139
- '21#.#23.174.134':139
- '21#.#23.142.152':139
- '21#.#23.66.92':139
- '21#.#23.87.37':139
- '21#.#23.19.237':139
- '21#.#23.191.33':139
- '21#.#23.85.112':139
- '21#.#23.179.210':139
- '21#.#23.51.133':139
- '21#.#23.198.153':139
- '21#.#23.68.124':139
- '21#.#23.224.68':139
- '21#.#23.139.164':139
- '21#.#23.124.139':139
- '21#.#23.130.57':139
- '21#.#23.40.170':139
- '21#.#23.61.113':139
- '21#.#23.58.100':139
- '21#.#23.96.97':139
- '21#.#23.79.183':139
- '21#.#23.75.213':139
- '21#.#23.206.156':139
- '21#.#23.87.207':139
- '21#.#23.27.141':139
- '21#.#23.54.91':139
- '21#.#23.19.154':139
- '21#.#23.80.183':139
- '21#.#23.18.8':139
- '21#.#23.156.25':139
- '21#.#23.102.216':139
- '21#.#23.155.33':139
- '21#.#23.69.24':139
- '21#.#23.149.220':139
- '21#.#23.33.150':139
- '21#.#23.70.210':445
- '21#.#23.131.164':445
- '21#.#23.107.52':445
- '21#.#23.127.223':445
- '21#.#23.133.132':445
- '21#.#23.38.30':445
- '21#.#23.251.189':445
- '21#.#23.241.213':445
- '21#.#23.6.200':445
- '21#.#23.5.130':445
- '21#.#23.13.34':445
- '21#.#23.148.68':445
- '21#.#23.135.150':445
- '21#.#23.118.53':445
- '21#.#23.186.214':445
- '21#.#23.141.101':445
- '21#.#23.127.115':445
- '21#.#23.6.38':445
- '21#.#23.39.87':445
- '21#.#23.107.198':445
- '21#.#23.6.200':9988
- '21#.#23.99.130':139
- '21#.#23.87.13':9988
- '21#.#23.131.164':9988
- '21#.#23.27.186':139
- '21#.#23.64.53':139
- '21#.#23.149.31':139
- '21#.#23.32.186':139
- '21#.#23.17.94':139
- '21#.#23.58.93':9988
- '21#.#23.231.229':445
- '21#.#23.111.173':445
- '21#.#23.73.108':445
- '21#.#23.196.245':445
- '21#.#23.240.61':9988
- '21#.#23.95.167':9988
- '21#.#23.245.93':9988
- '21#.#23.13.217':9988
- '21#.#23.54.62':9988