avast detects a malware variant of Trojan-FakeAV.Win32.Onescan.pll

avast! WebShield detects and blocks Win32:Evo-gen[Susp] here.

See: https://www.virustotal.com/nl/url/10a84a7e3d77c3149481f2d6db184167b9389963edb2379a7f5d1ad0d87b3b1b/analysis/1384616158/
and https://www.virustotal.com/nl/file/2107e42ce12db96f9cbfbf4cb894e74c1e8360d2573b1d630b88bcae395f908f/analysis/1384489297/
re: http://urlquery.net/queued.php?id=50900200
https://www.virustotal.com/nl/ip-address/218.38.136.18/information/
htxp://dn.binsetup.com/130501/PCOSetup_9_Hide.exe is in Dr.Web malicious sites list!

polonus