Thisfreetool looks for files through either a quick or deep system scan.
Rook has said that additional files will be added as the 400GB cache scrutiny continues.
These files have been analyzed using dynamic, static, and manual analysis.
We also compared these files against VirusTotal, Kaspersky Whitelisting, and PaloAlto Firewalls Wildfire.
Hosts containing any of the files found in this list should be considered compromised.
source: www.techworm.net