| MD5 | 40622cb0596543d37a8d38c92c13ac4d | 
| SHA1 | 6ae30749a7b3b1d79ca526e203082fa0949adea5 | 
| Domains | [www.update.microsoft.com.nsatc.net] [109.120.180.29] [faumoussuperstars.ru] [powerrembo.ru] [update.microsoft.com] [lunaizemlya.ru] | 
| IP Addresses | [65.55.50.189] [191.232.80.55] [109.120.180.29] [109.120.155.30] | 
| Antivirus | [Backdoor.Androm.Win32.26669] | 
| [BackDoor.Andromeda.1149] | |
| [Backdoor.Win32.Androm.ieec] | |
| [Malware-gen*Win32*Malware-gen] | |
| [Trojan.Agent] | |
| [W32/Kryptik.DWCL!tr] | |
| [W32/Trojan.WRFK-7111] | |
| [Win32/Kryptik.DWPR] | |
| [Worm*Win32/Gamarue.AU] |