| MD5 | 0df9500ae372e0518651d34120285c89 | 
| SHA1 | ab07439b7b6ad59f747e09c214b182b1a866e24f | 
| IPs | [157.56.77.156] | 
| IPs | [65.55.138.186] | 
| IPs | [8.5.1.43] | 
| IPs | [144.76.40.132] | 
| IPs | [8.8.4.4] | 
| Domains | [update.microsoft.com.nsatc.net] [setexphoto10.com] [setexphoto50.ru] [setexphoto60.ru] [update.microsoft.com] | 
| IP Addresses | [157.56.77.156] [65.55.138.186] [8.5.1.43] [144.76.40.132] [8.8.4.4] | 
| Antivirus | [Artemis!0DF9500AE372] | 
| [Dropper.Generic8.BSHB] | |
| [Posible_Worm32] | |
| [PWS*Win32/Fareit] | |
| [PWS-Zbot-FAQD!10CE4BE5AD40] | |
| [Spyware.ZeuS] | |
| [TR/Injector.adk] | |
| [Troj/Agent-ADBJ] |