Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#91.43.17':445
- '21#.#91.121.90':445
- '21#.#91.254.129':139
- '21#.#91.231.241':445
- '21#.#91.126.200':445
- '21#.#91.120.227':445
- '21#.#91.254.129':445
- '21#.#91.133.36':445
- '21#.#91.0.141':445
- '21#.#91.231.241':139
- '21#.#91.43.17':139
- '21#.#91.126.160':445
- '21#.#91.241.192':445
- '21#.#91.121.90':139
- '21#.#91.0.141':139
- '21#.#91.120.227':139
- '21#.#91.126.200':139
- '21#.#91.133.36':139
- '21#.#91.169.237':139
- '21#.#91.42.247':139
- '21#.#91.202.60':139
- '21#.#91.3.241':139
- '21#.#91.246.167':139
- '21#.#91.131.199':139
- '21#.#91.28.74':139
- '21#.#91.4.28':139
- '21#.#91.242.134':139
- '21#.#91.137.2':139
- '21#.#91.118.36':139
- '21#.#91.245.0':139
- '21#.#91.97.169':139
- '21#.#91.105.210':139
- '21#.#91.59.150':139
- '21#.#91.9.168':139
- '21#.#91.146.120':139
- '21#.#91.40.208':139
- '21#.#91.168.40':139
- '21#.#91.120.124':445
- '21#.#91.50.120':445
- '21#.#91.209.179':445
- '21#.#91.70.86':445
- '21#.#91.13.50':445
- '21#.#91.155.240':445
- '21#.#91.63.156':445
- '21#.#91.250.30':445
- '21#.#91.45.221':445
- '21#.#91.32.218':445
- '21#.#91.75.95':445
- '21#.#91.55.30':445
- '21#.#91.203.201':445
- '21#.#91.108.15':445
- '21#.#91.36.91':445
- '21#.#91.21.91':445
- '21#.#91.185.152':445
- '21#.#91.101.91':445
- '21#.#91.130.64':445
- '21#.#91.208.155':445
- '21#.#91.204.136':445
- '21#.#91.224.153':445
- '21#.#91.29.245':445
- '21#.#91.16.145':445
- '21#.#91.9.83':445
- '21#.#91.8.154':445
- '21#.#91.31.5':445
- '21#.#91.30.113':445
- '21#.#91.17.178':445
- '21#.#91.213.2':445
- '21#.#91.70.110':445
- '21#.#91.177.192':445
- '21#.#91.4.231':445
- '21#.#91.73.135':445
- '21#.#91.44.209':445
- '21#.#91.83.43':445
- '21#.#91.99.123':445
- '21#.#91.55.4':139
- '21#.#91.29.93':445
- '21#.#91.227.18':445
- '21#.#91.112.121':445
- '21#.#91.12.67':445
- '21#.#91.129.53':445
- '21#.#91.210.124':445
- '21#.#91.43.210':445
- '21#.#91.10.158':445
- '21#.#91.71.252':445
- '21#.#91.137.2':445
- '21#.#91.28.74':445
- '21#.#91.131.199':445
- '21#.#91.242.134':445
- '21#.#91.4.28':445
- '21#.#91.124.247':445
- '21#.#91.45.28':445
- '21#.#91.55.4':445
- '21#.#91.198.152':445
- '21#.#91.252.59':445
- '21#.#91.138.46':139
- '21#.#91.7.151':139
- '21#.#91.164.40':445
- '21#.#91.114.163':139
- '21#.#91.80.2':139
- '21#.#91.30.59':139
- '21#.#91.211.49':139
- '21#.#91.204.123':139
- '21#.#91.58.172':139
- '21#.#91.120.132':445
- '21#.#91.185.16':445
- '21#.#91.118.241':445
- '21#.#91.133.160':445
- '21#.#91.175.113':445
- '21#.#91.30.137':445
- '21#.#91.98.236':445
- '21#.#91.55.50':445
- '21#.#91.4.240':445
- '21#.#91.43.210':139
- '21#.#91.252.59':139
- '21#.#91.71.252':139
- '21#.#91.210.124':139
- '21#.#91.118.241':139
- '21#.#91.185.16':139
- '21#.#91.175.113':139
- '21#.#91.133.160':139
- '21#.#91.120.132':139
- '21#.#91.45.28':139
- '21#.#91.112.121':139
- '21#.#91.198.152':139
- '21#.#91.124.247':139
- '21#.#91.12.67':139
- '21#.#91.129.53':139
- '21#.#91.10.158':139
- '21#.#91.29.93':139
- '21#.#91.227.18':139
- '21#.#91.55.50':139
- '21#.#91.168.40':445
- '21#.#91.9.168':445
- '21#.#91.245.0':445
- '21#.#91.40.208':445
- '21#.#91.146.120':445
- '21#.#91.42.247':445
- '21#.#91.202.60':445
- '21#.#91.3.241':445
- '21#.#91.246.167':445
- '21#.#91.98.236':139
- '21#.#91.164.40':139
- '21#.#91.4.240':139
- '21#.#91.30.137':139
- '21#.#91.169.237':445
- '21#.#91.118.36':445
- '21#.#91.59.150':445
- '21#.#91.97.169':445
- '21#.#91.105.210':445
- '21#.#91.96.143':445
- '21#.#91.131.115':139
- '21#.#91.87.248':139
- '21#.#91.75.236':139
- '21#.#91.215.68':139
- '21#.#91.249.90':139
- '21#.#91.103.94':445
- '21#.#91.61.48':445
- '21#.#91.144.110':445
- '21#.#91.191.181':445
- '21#.#91.69.247':139
- '21#.#91.156.70':139
- '21#.#91.108.116':139
- '21#.#91.12.33':139
- '21#.#91.227.49':139
- '21#.#91.188.71':139
- '21#.#91.160.230':139
- '21#.#91.31.59':139
- '21#.#91.143.227':139
- '21#.#91.34.167':445
- '21#.#91.69.169':445
- '21#.#91.239.71':445
- '21#.#91.188.172':445
- '21#.#91.34.36':445
- '21#.#91.215.34':445
- '21#.#91.80.138':445
- '21#.#91.255.140':445
- '21#.#91.143.77':445
- '21#.#91.106.155':445
- '21#.#91.18.172':445
- '21#.#91.36.42':445
- '21#.#91.249.194':445
- '21#.#91.139.224':445
- '21#.#91.246.131':445
- '21#.#91.79.250':445
- '21#.#91.187.135':445
- '21#.#91.13.173':445
- '21#.#91.19.164':445
- '21#.#91.19.164':139
- '21#.#91.79.250':139
- '21#.#91.246.131':139
- '21#.#91.13.173':139
- '21#.#91.187.135':139
- '21#.#91.69.169':139
- '21#.#91.239.71':139
- '21#.#91.188.172':139
- '21#.#91.34.36':139
- '21#.#91.144.110':139
- '21#.#91.61.48':139
- '21#.#91.249.194':139
- '21#.#91.103.94':139
- '21#.#91.191.181':139
- '21#.#91.18.172':139
- '21#.#91.36.42':139
- '21#.#91.34.167':139
- '21#.#91.139.224':139
- '21#.#91.215.34':139
- '21#.#91.57.226':139
- '21#.#91.97.5':139
- '21#.#91.218.133':139
- '21#.#91.222.189':139
- '21#.#91.44.212':139
- '21#.#91.114.188':139
- '21#.#91.24.143':139
- '21#.#91.82.87':139
- '21#.#91.188.53':139
- '21#.#91.80.138':139
- '21#.#91.255.140':139
- '21#.#91.143.77':139
- '21#.#91.106.155':139
- '21#.#91.156.221':139
- '21#.#91.3.198':139
- '21#.#91.253.3':139
- '21#.#91.13.180':139
- '21#.#91.125.146':139
- '21#.#91.156.221':445
- '21#.#91.250.30':139
- '21#.#91.45.221':139
- '21#.#91.50.120':139
- '21#.#91.13.50':139
- '21#.#91.155.240':139
- '21#.#91.70.110':139
- '21#.#91.177.192':139
- '21#.#91.63.156':139
- '21#.#91.130.64':139
- '21#.#91.185.152':139
- '21#.#91.101.91':139
- '21#.#91.75.95':139
- '21#.#91.108.15':139
- '21#.#91.36.91':139
- '21#.#91.70.86':139
- '21#.#91.120.124':139
- '21#.#91.21.91':139
- '21#.#91.209.179':139
- '21#.#91.17.178':139
- '21#.#91.31.5':139
- '21#.#91.30.113':139
- '21#.#91.204.136':139
- '21#.#91.16.145':139
- '21#.#91.9.83':139
- '21#.#91.241.192':139
- '21#.#91.142.161':445
- '21#.#91.8.154':139
- '21#.#91.126.160':139
- '21#.#91.83.43':139
- '21#.#91.99.123':139
- '21#.#91.213.2':139
- '21#.#91.4.231':139
- '21#.#91.73.135':139
- '21#.#91.29.245':139
- '21#.#91.208.155':139
- '21#.#91.44.209':139
- '21#.#91.224.153':139
- '21#.#91.114.188':445
- '21#.#91.24.143':445
- '21#.#91.82.87':445
- '21#.#91.188.53':445
- '21#.#91.108.116':445
- '21#.#91.156.70':445
- '21#.#91.227.49':445
- '21#.#91.12.33':445
- '21#.#91.69.247':445
- '21#.#91.3.198':445
- '21#.#91.253.3':445
- '21#.#91.13.180':445
- '21#.#91.125.146':445
- '21#.#91.218.133':445
- '21#.#91.97.5':445
- '21#.#91.44.212':445
- '21#.#91.222.189':445
- '21#.#91.57.226':445
- '21#.#91.31.59':445
- '21#.#91.61.48':9988
- '21#.#91.227.49':9988
- '21#.#91.139.224':9988
- '21#.#91.191.181':9988
- '21#.#91.142.161':139
- '21#.#91.203.201':139
- '21#.#91.32.218':139
- '21#.#91.96.143':139
- '21#.#91.55.30':139
- '21#.#91.160.230':445
- '21#.#91.75.236':445
- '21#.#91.143.227':445
- '21#.#91.188.71':445
- '21#.#91.215.68':445
- '21#.#91.249.90':445
- '21#.#91.103.94':9988
- '21#.#91.131.115':445
- '21#.#91.87.248':445