| MD5 | 8adaf8d7bcefa0eb825ce60da297e957 |
| SHA1 | 1bbde129965d9778fdb4645dbdc7f4ba3ed1f1b2 |
| Domains | [www.update.microsoft.com.nsatc.net] [faumoussuperstars.ru] [update.microsoft.com] [109.120.180.29] [powerrembo.ru] |
| IP Addresses | [65.55.50.189] [65.55.50.190] [109.120.155.30] |
| Antivirus | [Backdoor.Andromeda] |
| [Backdoor.Win32.Androm.iddc] | |
| [Mal/Wonton-BB] | |
| [Malware-gen*Win32*Malware-gen] | |
| [TR/AD.Gamarue.Y.422] | |
| [Trojan*Win32/Dynamer!ac] | |
| [Trojan.Inject1.43628] | |
| [W32/Agent.XL.gen!Eldorado] | |
| [W32/Injector.CIBN!tr] | |
| [Win32/Kryptik.DPAB] |