Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- '64.##0.89.144':445
- '64.##0.206.34':445
- '64.#10.8.66':139
- '64.##0.84.105':445
- '64.##0.71.160':445
- '64.##0.44.54':445
- '64.##0.6.124':445
- '64.##0.35.71':445
- '64.##0.223.166':445
- '64.##0.219.238':139
- '64.##0.73.112':139
- '64.##0.44.54':139
- '64.##0.6.124':139
- '64.##0.128.73':139
- '64.##0.255.62':139
- '64.##0.176.254':139
- '64.##0.106.251':139
- '64.##0.63.28':139
- '64.##0.73.112':445
- '64.##0.37.77':139
- '64.##0.114.74':139
- '64.##0.255.12':139
- '64.##0.77.41':139
- '64.##0.59.53':139
- '64.##0.22.229':139
- '64.##0.104.91':139
- '64.##0.11.180':139
- '64.##0.109.239':139
- '64.##0.63.28':445
- '64.##0.106.251':445
- '64.##0.219.238':445
- '64.##0.128.73':445
- '64.##0.255.62':445
- '64.##0.2.219':139
- '64.##0.66.35':139
- '64.##0.176.254':445
- '64.#10.8.66':445
- '64.##0.57.213':445
- '64.##0.206.144':445
- '64.##0.164.179':445
- '64.##0.53.164':445
- '64.##0.105.12':445
- '64.##0.164.1':445
- '64.##0.66.220':445
- '64.##0.165.104':445
- '64.##0.230.26':445
- '64.##0.90.47':445
- '64.##0.10.182':445
- '64.##0.211.109':445
- '64.##0.56.26':445
- '64.##0.125.188':445
- '64.##0.48.101':445
- '64.##0.2.106':445
- '64.##0.23.108':445
- '64.##0.30.212':445
- '64.##0.38.12':445
- '64.##0.249.60':445
- '64.##0.84.105':139
- '64.##0.249.128':445
- '64.##0.114.63':445
- '64.##0.89.144':139
- '64.##0.35.71':139
- '64.##0.223.166':139
- '64.##0.206.34':139
- '64.##0.71.160':139
- '64.##0.253.44':445
- '64.##0.99.174':445
- '64.##0.184.97':445
- '64.##0.24.192':445
- '64.##0.134.46':445
- '64.##0.110.238':445
- '64.##0.128.110':445
- '64.##0.12.197':445
- '64.##0.73.27':445
- '64.##0.215.115':139
- '64.##0.167.42':445
- '64.##0.107.11':445
- '64.##0.237.143':445
- '64.##0.42.237':445
- '64.##0.130.98':445
- '64.##0.148.222':445
- '64.##0.57.101':445
- '64.##0.213.193':445
- '64.##0.161.112':445
- '64.##0.2.238':445
- '64.#10.71.3':445
- '64.##0.104.26':445
- '64.##0.39.218':445
- '64.##0.21.148':445
- '64.##0.125.77':445
- '64.##0.244.112':445
- '64.##0.20.123':445
- '64.##0.202.47':445
- '64.##0.176.227':445
- '64.##0.77.118':139
- '64.##0.139.76':139
- '64.##0.247.209':139
- '64.##0.112.152':139
- '64.##0.131.27':139
- '64.##0.35.199':139
- '64.##0.229.23':139
- '64.##0.37.128':139
- '64.##0.194.111':139
- '64.##0.109.173':139
- '64.##0.24.223':139
- '64.##0.18.109':445
- '64.##0.18.46':445
- '64.##0.24.25':139
- '64.##0.113.5':139
- '64.##0.235.182':139
- '64.##0.156.135':139
- '64.##0.28.114':139
- '64.##0.237.143':139
- '64.##0.42.237':139
- '64.##0.125.77':139
- '64.##0.244.112':139
- '64.##0.167.42':139
- '64.##0.213.193':139
- '64.##0.161.112':139
- '64.##0.107.11':139
- '64.##0.130.98':139
- '64.##0.104.26':139
- '64.##0.39.218':139
- '64.#10.6.1':139
- '64.##0.84.215':139
- '64.##0.2.238':139
- '64.##0.20.123':139
- '64.##0.202.47':139
- '64.#10.71.3':139
- '64.##0.21.148':139
- '64.##0.148.222':139
- '64.##0.11.180':445
- '64.##0.109.239':445
- '64.##0.114.74':445
- '64.##0.59.53':445
- '64.##0.22.229':445
- '64.#10.6.1':445
- '64.##0.84.215':445
- '64.##0.104.91':445
- '64.##0.215.115':445
- '64.##0.18.109':139
- '64.##0.18.46':139
- '64.##0.57.101':139
- '64.##0.176.227':139
- '64.##0.2.219':445
- '64.##0.77.41':445
- '64.##0.37.77':445
- '64.##0.66.35':445
- '64.##0.255.12':445
- '64.##0.52.44':139
- '64.##0.20.189':139
- '64.##0.59.30':139
- '64.##0.30.79':139
- '64.##0.79.148':139
- '64.##0.97.100':445
- '64.##0.170.65':445
- '64.##0.9.229':445
- '64.##0.196.239':445
- '64.##0.116.138':139
- '64.##0.67.176':139
- '64.##0.129.137':139
- '64.##0.138.97':139
- '64.##0.84.234':139
- '64.##0.53.182':139
- '64.##0.17.146':139
- '64.##0.80.203':139
- '64.##0.173.73':139
- '64.##0.104.244':445
- '64.##0.124.238':445
- '64.##0.28.32':445
- '64.##0.244.31':445
- '64.##0.238.103':445
- '64.##0.149.49':445
- '64.##0.49.95':445
- '64.##0.44.80':445
- '64.##0.161.115':445
- '64.##0.95.161':445
- '64.##0.152.97':445
- '64.##0.249.243':445
- '64.##0.59.133':445
- '64.##0.73.159':445
- '64.##0.244.45':445
- '64.#10.4.96':445
- '64.##0.57.105':445
- '64.##0.138.38':445
- '64.##0.56.138':445
- '64.##0.56.138':139
- '64.#10.4.96':139
- '64.##0.244.45':139
- '64.##0.138.38':139
- '64.##0.57.105':139
- '64.##0.124.238':139
- '64.##0.28.32':139
- '64.##0.244.31':139
- '64.##0.238.103':139
- '64.##0.170.65':139
- '64.##0.196.239':139
- '64.##0.9.229':139
- '64.##0.104.244':139
- '64.##0.97.100':139
- '64.##0.152.97':139
- '64.##0.249.243':139
- '64.##0.59.133':139
- '64.##0.73.159':139
- '64.##0.149.49':139
- '64.##0.216.232':139
- '64.##0.136.8':139
- '64.##0.82.151':139
- '64.##0.104.45':139
- '64.##0.87.190':139
- '64.##0.81.249':139
- '64.##0.251.229':139
- '64.##0.132.87':139
- '64.##0.136.253':139
- '64.##0.49.95':139
- '64.##0.44.80':139
- '64.##0.161.115':139
- '64.##0.95.161':139
- '64.##0.213.71':139
- '64.##0.35.253':139
- '64.##0.90.147':139
- '64.##0.28.119':139
- '64.##0.253.130':139
- '64.##0.213.71':445
- '64.##0.164.179':139
- '64.##0.53.164':139
- '64.##0.48.101':139
- '64.##0.2.106':139
- '64.##0.57.213':139
- '64.##0.165.104':139
- '64.##0.230.26':139
- '64.##0.206.144':139
- '64.##0.105.12':139
- '64.##0.211.109':139
- '64.##0.56.26':139
- '64.##0.70.61':139
- '64.##0.109.67':139
- '64.##0.90.47':139
- '64.##0.23.108':139
- '64.##0.30.212':139
- '64.##0.10.182':139
- '64.##0.125.188':139
- '64.##0.164.1':139
- '64.##0.249.128':139
- '64.##0.114.63':139
- '64.##0.110.238':139
- '64.##0.128.110':139
- '64.##0.249.60':139
- '64.##0.70.61':445
- '64.##0.109.67':445
- '64.##0.23.52':445
- '64.##0.40.195':445
- '64.##0.184.97':139
- '64.##0.24.192':139
- '64.##0.66.220':139
- '64.##0.38.12':139
- '64.##0.253.44':139
- '64.##0.12.197':139
- '64.##0.73.27':139
- '64.##0.99.174':139
- '64.##0.134.46':139
- '64.##0.81.249':445
- '64.##0.251.229':445
- '64.##0.132.87':445
- '64.##0.136.253':445
- '64.##0.129.137':445
- '64.##0.67.176':445
- '64.##0.84.234':445
- '64.##0.138.97':445
- '64.##0.116.138':445
- '64.##0.35.253':445
- '64.##0.90.147':445
- '64.##0.28.119':445
- '64.##0.253.130':445
- '64.##0.82.151':445
- '64.##0.136.8':445
- '64.##0.87.190':445
- '64.##0.104.45':445
- '64.##0.216.232':445
- '64.##0.80.203':445
- '64.##0.35.253':9988
- '64.##0.82.151':9988
- '64.##0.28.32':9988
- '64.##0.44.80':9988
- '64.##0.129.137':9988
- '64.##0.23.52':139
- '64.##0.40.195':139
- '64.##0.87.190':9988
- '64.##0.84.234':9988
- '64.##0.17.146':445
- '64.##0.59.30':445
- '64.##0.173.73':445
- '64.##0.53.182':445
- '64.##0.30.79':445
- '64.##0.79.148':445
- '64.##0.73.159':9988
- '64.##0.52.44':445
- '64.##0.20.189':445