| MD5 | d83acc88dcbe9168388a414d8ac8ee30 |
| SHA1 | bce71cf605f4317c2945fb45c40b638303feb9f8 |
| Domains | [www.update.microsoft.com.nsatc.net] [update.microsoft.com] |
| IP Addresses | [134.170.58.221] [134.170.58.222] |
| Antivirus | [BScope.Trojan.Agent] |
| [Clicker.AMSI] | |
| [Mal/Emogen-Y] | |
| [Malware-gen*Win32*Malware-gen] | |
| [RDN/Autorun.worm.gen] | |
| [Trojan-Clicker.Win32.Agent.cezk] | |
| [Trojan-Dropper.Agent] | |
| [Trojan.30EF6E77189346FB] | |
| [Trojan.Click.43339] | |
| [Trojan.Xema.gu] |