http://www.virustotal.com/analisis/b977d7ca504c7e351c274180abfd71ac
It’s being linked to by malicious iframes almost everywhere… at least as far as I can see.
A copy of this has been sent, so hopefully you guys will be able to find it among the submitted samples by MD5 hash, or something.
Thanks.