Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '22#.#1.114.210':445
- '22#.#1.104.5':445
- '22#.#1.206.198':445
- '22#.#1.61.207':445
- '22#.#1.83.239':445
- '22#.#1.211.193':139
- '22#.#1.148.52':139
- '22#.#1.90.86':445
- '22#.#1.167.179':139
- '22#.#1.198.133':445
- '22#.#1.15.123':445
- '22#.71.5.16':445
- '22#.#1.166.239':445
- '22#.#1.252.85':445
- '22#.#1.50.112':445
- '22#.#1.67.232':445
- '22#.#1.133.38':445
- '22#.#1.225.15':445
- '22#.#1.177.224':445
- '22#.#1.22.180':139
- '22#.#1.147.192':139
- '22#.#1.16.180':139
- '22#.#1.70.162':139
- '22#.#1.208.70':139
- '22#.#1.46.146':139
- '22#.#1.169.233':139
- '22#.#1.27.49':139
- '22#.#1.206.13':139
- '22#.#1.187.108':139
- '22#.#1.162.119':139
- '22#.#1.186.226':139
- '22#.#1.116.180':139
- '22#.#1.195.75':139
- '22#.#1.212.121':139
- '22#.#1.121.129':139
- '22#.#1.71.15':139
- '22#.#1.69.38':139
- '22#.#1.163.138':139
- '22#.#1.46.176':139
- '22#.#1.38.246':445
- '22#.#1.91.86':445
- '22#.#1.6.224':445
- '22#.#1.140.114':445
- '22#.#1.42.133':445
- '22#.#1.244.93':445
- '22#.#1.18.220':445
- '22#.#1.13.239':445
- '22#.71.8.30':445
- '22#.#1.54.62':445
- '22#.#1.83.239':139
- '22#.#1.90.86':139
- '22#.#1.114.210':139
- '22#.#1.104.5':139
- '22#.71.4.69':445
- '22#.#1.45.145':445
- '22#.#1.132.45':445
- '22#.#1.117.47':445
- '22#.#1.117.193':445
- '22#.#1.183.18':445
- '22#.#1.51.65':445
- '22#.#1.111.38':445
- '22#.#1.248.19':445
- '22#.#1.34.132':445
- '22#.#1.109.167':445
- '22#.71.21.4':445
- '22#.#1.239.112':445
- '22#.#1.92.116':445
- '22#.#1.155.250':445
- '22#.#1.217.226':445
- '22#.#1.198.37':445
- '22#.#1.61.198':445
- '22#.#1.133.47':445
- '22#.#1.7.232':445
- '22#.#1.244.61':445
- '22#.#1.13.162':445
- '22#.#1.84.65':445
- '22#.#1.34.244':445
- '22#.#1.69.35':445
- '22#.#1.11.241':139
- '22#.#1.201.74':445
- '22#.#1.74.134':445
- '22#.#1.27.49':445
- '22#.#1.11.241':445
- '22#.#1.35.224':445
- '22#.#1.126.206':445
- '22#.#1.76.41':445
- '22#.#1.189.234':445
- '22#.#1.195.117':445
- '22#.#1.169.233':445
- '22#.#1.70.162':445
- '22#.#1.147.192':445
- '22#.#1.69.38':445
- '22#.#1.162.119':445
- '22#.#1.208.70':445
- '22#.#1.206.13':445
- '22#.#1.187.108':445
- '22#.#1.16.180':445
- '22#.#1.46.146':445
- '22#.#1.126.45':445
- '22#.#1.100.252':445
- '22#.#1.205.168':445
- '22#.#1.156.213':445
- '22#.71.75.8':445
- '22#.#1.230.159':445
- '22#.#1.198.221':445
- '22#.#1.109.131':445
- '22#.#1.17.237':445
- '22#.#1.222.57':445
- '22#.#1.199.69':445
- '22#.#1.88.149':445
- '22#.#1.97.128':445
- '22#.#1.208.11':445
- '22#.#1.207.91':445
- '22#.#1.99.251':445
- '22#.#1.194.20':445
- '22#.#1.105.213':445
- '22#.#1.105.24':445
- '22#.#1.179.82':445
- '22#.#1.105.24':139
- '22#.#1.99.251':139
- '22#.#1.88.149':139
- '22#.#1.97.128':139
- '22#.#1.179.82':139
- '22#.#1.199.69':139
- '22#.#1.156.213':139
- '22#.#1.105.213':139
- '22#.#1.194.20':139
- '22#.#1.207.91':139
- '22#.#1.189.234':139
- '22#.#1.35.224':139
- '22#.#1.74.134':139
- '22#.#1.201.74':139
- '22#.#1.126.206':139
- '22#.#1.208.11':139
- '22#.#1.126.45':139
- '22#.#1.195.117':139
- '22#.#1.76.41':139
- '22#.71.75.8':139
- '22#.#1.212.121':445
- '22#.#1.186.226':445
- '22#.#1.22.180':445
- '22#.#1.195.75':445
- '22#.#1.116.180':445
- '22#.#1.46.176':445
- '22#.#1.71.15':445
- '22#.#1.121.129':445
- '22#.#1.163.138':445
- '22#.#1.148.52':445
- '22#.#1.230.159':139
- '22#.#1.17.237':139
- '22#.#1.100.252':139
- '22#.#1.205.168':139
- '22#.#1.222.57':139
- '22#.#1.167.179':445
- '22#.#1.211.193':445
- '22#.#1.198.221':139
- '22#.#1.109.131':139
- '22#.#1.61.207':139
- '22#.#1.18.245':445
- '22#.#1.10.41':445
- '22#.#1.60.148':139
- '22#.#1.111.60':139
- '22#.#1.255.12':445
- '22#.#1.224.113':445
- '22#.#1.197.42':445
- '22#.#1.243.237':445
- '22#.#1.224.79':445
- '22#.#1.104.242':139
- '22#.#1.140.197':139
- '22#.71.8.1':139
- '22#.#1.226.180':139
- '22#.#1.244.175':139
- '22#.#1.40.129':139
- '22#.#1.92.126':139
- '22#.#1.149.89':139
- '22#.#1.182.113':139
- '22#.#1.190.221':139
- '22#.#1.16.198':445
- '22#.#1.231.254':445
- '22#.#1.36.21':445
- '22#.#1.36.13':445
- '22#.#1.182.249':445
- '22#.#1.57.136':445
- '22#.#1.102.231':445
- '22#.71.6.59':445
- '22#.#1.105.57':445
- '22#.#1.186.104':445
- '22#.#1.13.141':445
- '22#.#1.191.55':445
- '22#.#1.88.136':445
- '22#.#1.83.16':445
- '22#.#1.156.191':445
- '22#.#1.69.196':445
- '22#.#1.128.192':445
- '22#.#1.94.141':445
- '22#.#1.73.70':445
- '22#.#1.192.133':445
- '22#.#1.69.196':139
- '22#.#1.73.70':139
- '22#.#1.191.55':139
- '22#.#1.88.136':139
- '22#.#1.192.133':139
- '22#.#1.13.141':139
- '22#.#1.36.13':139
- '22#.#1.128.192':139
- '22#.#1.94.141':139
- '22#.#1.156.191':139
- '22#.#1.255.12':139
- '22#.#1.10.41':139
- '22#.#1.18.245':139
- '22#.#1.224.79':139
- '22#.#1.243.237':139
- '22#.#1.16.198':139
- '22#.#1.83.16':139
- '22#.#1.224.113':139
- '22#.#1.197.42':139
- '22#.#1.182.249':139
- '22#.#1.124.73':139
- '22#.#1.23.64':139
- '22#.#1.55.38':139
- '22#.71.9.45':139
- '22#.#1.117.99':139
- '22#.#1.43.33':139
- '22#.#1.181.42':139
- '22#.#1.114.64':139
- '22#.#1.56.152':139
- '22#.#1.4.237':139
- '22#.#1.57.136':139
- '22#.#1.105.57':139
- '22#.#1.231.254':139
- '22#.#1.36.21':139
- '22#.#1.186.104':139
- '22#.#1.208.250':139
- '22#.#1.31.233':139
- '22#.#1.102.231':139
- '22#.71.6.59':139
- '22#.#1.208.250':445
- '22#.#1.61.198':139
- '22#.#1.244.61':139
- '22#.#1.7.232':139
- '22#.#1.198.37':139
- '22#.#1.34.244':139
- '22#.#1.84.65':139
- '22#.#1.217.226':139
- '22#.#1.69.35':139
- '22#.#1.13.162':139
- '22#.#1.133.47':139
- '22#.#1.91.86':139
- '22#.#1.42.133':139
- '22#.#1.140.114':139
- '22#.#1.38.246':139
- '22#.#1.13.239':139
- '22#.#1.18.220':139
- '22#.#1.183.18':139
- '22#.71.8.30':139
- '22#.#1.244.93':139
- '22#.#1.248.19':139
- '22#.#1.50.112':139
- '22#.#1.225.15':139
- '22#.#1.15.123':139
- '22#.71.5.16':139
- '22#.#1.177.224':139
- '22#.#1.198.133':139
- '22#.#1.206.198':139
- '22#.#1.67.232':139
- '22#.#1.133.38':139
- '22#.#1.252.85':139
- '22#.#1.111.38':139
- '22#.#1.109.167':139
- '22#.#1.34.132':139
- '22#.#1.51.65':139
- '22#.#1.92.116':139
- '22#.#1.239.112':139
- '22#.#1.166.239':139
- '22#.#1.155.250':139
- '22#.71.21.4':139
- '22#.#1.244.175':445
- '22#.#1.140.197':445
- '22#.#1.181.42':445
- '22#.#1.226.180':445
- '22#.71.8.1':445
- '22#.#1.190.221':445
- '22#.#1.92.126':445
- '22#.#1.40.129':445
- '22#.#1.182.113':445
- '22#.#1.43.33':445
- '22#.#1.55.38':445
- '22#.71.9.45':445
- '22#.#1.31.233':445
- '22#.#1.4.237':445
- '22#.#1.124.73':445
- '22#.#1.114.64':445
- '22#.#1.56.152':445
- '22#.#1.23.64':445
- '22#.#1.117.99':445
- '22#.#1.149.89':445
- '22#.71.4.69':139
- '22#.#1.117.47':139
- '22#.#1.114.64':9988
- '22#.#1.111.60':9988
- '22#.#1.117.193':139
- '22#.#1.54.62':139
- '22#.#1.6.224':139
- '22#.#1.45.145':139
- '22#.#1.132.45':139
- '22#.#1.31.233':9988
- '22#.#1.111.60':445
- '22#.#1.10.41':9988
- '22#.#1.104.242':445
- '22#.#1.60.148':445
- '22#.#1.18.245':9988
- '22#.#1.192.133':9988
- '22#.#1.186.104':9988
- '22#.#1.191.55':9988
- '22#.#1.69.196':9988