Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '21#.#75.122.236':139
- '21#.#75.176.122':139
- '21#.#75.50.48':445
- '21#.#75.12.130':445
- '21#.#75.122.236':445
- '21#.#75.68.99':139
- '21#.#75.101.80':139
- '21#.#75.176.122':445
- '21#.#75.91.176':139
- '21#.#75.100.204':445
- '21#.#75.35.21':445
- '21#.#75.99.34':445
- '21#.#75.180.22':445
- '21#.#75.19.189':445
- '21#.#75.73.166':445
- '21#.#75.15.154':445
- '21#.#75.94.165':445
- '21#.#75.173.84':445
- '21#.#75.94.141':445
- '21#.#75.37.31':139
- '21#.#75.54.231':139
- '21#.#75.239.14':139
- '21#.#75.31.201':139
- '21#.#75.247.176':139
- '21#.#75.79.20':139
- '21#.#75.58.187':139
- '21#.#75.47.248':139
- '21#.#75.221.214':139
- '21#.#75.148.224':139
- '21#.#75.6.128':139
- '21#.#75.21.53':139
- '21#.#75.52.128':139
- '21#.#75.117.52':139
- '21#.#75.46.75':139
- '21#.#75.58.242':139
- '21#.#75.225.21':139
- '21#.#75.227.204':139
- '21#.#75.2.101':139
- '21#.#75.107.21':445
- '21#.#75.237.215':445
- '21#.#75.60.108':445
- '21#.#75.50.141':445
- '21#.#75.15.39':445
- '21#.#75.236.191':445
- '21#.#75.76.175':445
- '21#.#75.49.83':445
- '21#.#75.96.181':445
- '21#.#75.171.96':445
- '21#.#75.140.188':445
- '21#.#75.213.60':445
- '21#.#75.1.120':445
- '21#.#75.50.48':139
- '21#.#75.12.130':139
- '21#.#75.251.27':445
- '21#.#75.12.36':445
- '21#.#75.227.161':445
- '21#.#75.3.10':445
- '21#.#75.195.15':445
- '21#.#75.78.96':445
- '21#.#75.73.30':445
- '21#.#75.106.50':445
- '21#.#75.93.84':445
- '21#.#75.118.184':445
- '21#.#75.93.117':445
- '21#.#75.101.176':445
- '21#.#75.20.119':445
- '21#.#75.97.146':445
- '21#.#75.49.242':445
- '21#.#75.67.22':445
- '21#.#75.20.62':445
- '21#.#75.81.131':445
- '21#.#75.24.27':445
- '21#.#75.14.90':445
- '21#.#75.205.94':445
- '21#.#75.241.212':445
- '21#.#75.203.194':445
- '21#.#75.190.153':445
- '21#.#75.72.140':139
- '21#.#75.7.104':445
- '21#.#75.68.206':445
- '21#.#75.170.206':445
- '21#.#75.76.104':445
- '21#.#75.222.68':445
- '21#.#75.216.95':445
- '21#.#75.83.216':445
- '21#.#75.31.223':445
- '21#.#75.114.159':445
- '21#.#75.72.140':445
- '21#.#75.37.31':445
- '21#.#75.54.231':445
- '21#.#75.239.14':445
- '21#.#75.31.201':445
- '21#.#75.47.248':445
- '21#.#75.79.20':445
- '21#.#75.58.187':445
- '21#.#75.247.176':445
- '21#.#75.221.214':445
- '21#.#75.60.248':445
- '21#.#75.219.37':445
- '21#.#75.90.238':445
- '21#.#75.78.166':445
- '21#.#75.179.72':445
- '21#.#75.91.187':139
- '21#.#75.219.56':139
- '21#.#75.196.16':445
- '21#.#75.8.149':445
- '21#.#75.22.149':445
- '21#.#75.42.27':445
- '21#.#75.89.175':445
- '21#.#75.242.138':445
- '21#.#75.130.1':445
- '21#.#75.42.34':445
- '21#.#75.17.65':445
- '21#.#75.214.17':445
- '21#.#75.144.117':445
- '21#.#75.64.187':445
- '21#.#75.148.224':445
- '21#.#75.42.34':139
- '21#.#75.89.175':139
- '21#.#75.130.1':139
- '21#.#75.42.27':139
- '21#.#75.144.117':139
- '21#.#75.214.17':139
- '21#.#75.22.149':139
- '21#.#75.64.187':139
- '21#.#75.17.65':139
- '21#.#75.242.138':139
- '21#.#75.7.104':139
- '21#.#75.68.206':139
- '21#.#75.170.206':139
- '21#.#75.76.104':139
- '21#.#75.222.68':139
- '21#.#75.216.95':139
- '21#.#75.83.216':139
- '21#.#75.31.223':139
- '21#.#75.114.159':139
- '21#.#75.6.128':445
- '21#.#75.21.53':445
- '21#.#75.52.128':445
- '21#.#75.117.52':445
- '21#.#75.46.75':445
- '21#.#75.58.242':445
- '21#.#75.225.21':445
- '21#.#75.227.204':445
- '21#.#75.2.101':445
- '21#.#75.101.80':445
- '21#.#75.60.248':139
- '21#.#75.219.37':139
- '21#.#75.90.238':139
- '21#.#75.78.166':139
- '21#.#75.179.72':139
- '21#.#75.91.176':445
- '21#.#75.68.99':445
- '21#.#75.196.16':139
- '21#.#75.8.149':139
- '21#.#75.100.204':139
- '21#.#75.116.216':445
- '21#.#75.49.214':445
- '21#.#75.64.191':139
- '21#.#75.157.10':139
- '21#.#75.78.15':445
- '21#.#75.193.35':445
- '21#.#75.160.193':445
- '21#.#75.35.149':445
- '21#.#75.31.77':445
- '21#.#75.179.9':139
- '21#.#75.182.225':139
- '21#.#75.123.64':139
- '21#.#75.1.198':139
- '21#.#75.225.56':139
- '21#.#75.161.200':139
- '21#.#75.173.115':139
- '21#.#75.31.47':139
- '21#.#75.31.128':139
- '21#.#75.194.95':139
- '21#.#75.9.23':445
- '21#.#75.224.8':445
- '21#.#75.61.134':445
- '21#.#75.84.250':445
- '21#.#75.193.223':445
- '21#.#75.245.147':445
- '21#.#75.49.84':445
- '21#.#75.46.193':445
- '21#.#75.85.246':445
- '21#.#75.134.43':445
- '21#.#75.66.192':445
- '21#.#75.32.67':445
- '21#.#75.37.138':445
- '21#.#75.192.128':445
- '21#.#75.216.71':445
- '21#.#75.24.128':445
- '21#.#75.37.130':445
- '21#.#75.142.170':445
- '21#.#75.109.143':445
- '21#.#75.221.73':139
- '21#.#75.142.170':139
- '21#.#75.109.143':139
- '21#.#75.32.67':139
- '21#.#75.216.71':139
- '21#.#75.24.128':139
- '21#.#75.61.134':139
- '21#.#75.84.250':139
- '21#.#75.37.130':139
- '21#.#75.134.43':139
- '21#.#75.66.192':139
- '21#.#75.78.15':139
- '21#.#75.49.214':139
- '21#.#75.31.77':139
- '21#.#75.116.216':139
- '21#.#75.35.149':139
- '21#.#75.37.138':139
- '21#.#75.192.128':139
- '21#.#75.193.35':139
- '21#.#75.160.193':139
- '21#.#75.108.151':139
- '21#.#75.65.126':139
- '21#.#75.139.208':139
- '21#.#75.14.187':139
- '21#.#75.190.110':139
- '21#.#75.240.150':139
- '21#.#75.117.240':139
- '21#.#75.54.240':139
- '21#.#75.151.54':139
- '21#.#75.221.243':139
- '21#.#75.193.223':139
- '21#.#75.46.193':139
- '21#.#75.9.23':139
- '21#.#75.224.8':139
- '21#.#75.85.246':139
- '21#.#75.197.49':139
- '21#.#75.37.96':139
- '21#.#75.245.147':139
- '21#.#75.49.84':139
- '21#.#75.197.49':445
- '21#.#75.20.62':139
- '21#.#75.14.90':139
- '21#.#75.24.27':139
- '21#.#75.67.22':139
- '21#.#75.203.194':139
- '21#.#75.241.212':139
- '21#.#75.49.242':139
- '21#.#75.190.153':139
- '21#.#75.205.94':139
- '21#.#75.81.131':139
- '21#.#75.237.215':139
- '21#.#75.236.191':139
- '21#.#75.50.141':139
- '21#.#75.15.39':139
- '21#.#75.60.108':139
- '21#.#75.76.175':139
- '21#.#75.49.83':139
- '21#.#75.96.181':139
- '21#.#75.171.96':139
- '21#.#75.35.21':139
- '21#.#75.99.34':139
- '21#.#75.180.22':139
- '21#.#75.19.189':139
- '21#.#75.73.166':139
- '21#.#75.15.154':139
- '21#.#75.94.165':139
- '21#.#75.173.84':139
- '21#.#75.94.141':139
- '21#.#75.107.21':139
- '21#.#75.78.96':139
- '21#.#75.73.30':139
- '21#.#75.106.50':139
- '21#.#75.93.84':139
- '21#.#75.118.184':139
- '21#.#75.93.117':139
- '21#.#75.101.176':139
- '21#.#75.20.119':139
- '21#.#75.97.146':139
- '21#.#75.140.188':139
- '21#.#75.1.198':445
- '21#.#75.182.225':445
- '21#.#75.117.240':445
- '21#.#75.221.73':445
- '21#.#75.225.56':445
- '21#.#75.31.128':445
- '21#.#75.194.95':445
- '21#.#75.123.64':445
- '21#.#75.161.200':445
- '21#.#75.240.150':445
- '21#.#75.139.208':445
- '21#.#75.14.187':445
- '21#.#75.37.96':445
- '21#.#75.221.243':445
- '21#.#75.108.151':445
- '21#.#75.54.240':445
- '21#.#75.151.54':445
- '21#.#75.65.126':445
- '21#.#75.190.110':445
- '21#.#75.213.60':139
- '21#.#75.1.120':139
- '21#.#75.240.150':9988
- '21#.#75.173.115':9988
- '21#.#75.251.27':139
- '21#.#75.12.36':139
- '21#.#75.227.161':139
- '21#.#75.3.10':139
- '21#.#75.195.15':139
- '21#.#75.54.240':9988
- '21#.#75.179.9':445
- '21#.#75.64.191':445
- '21#.#75.173.115':445
- '21#.#75.31.47':445
- '21#.#75.157.10':445
- '21#.#75.31.77':9988
- '21#.#75.160.193':9988
- '21#.#75.49.214':9988
- '21#.#75.78.15':9988