See: https://www.virustotal.com/url/9ffa48abf29d7db8587d6686689e03f01309f15b5ddd462b77f841c252ab5c81/analysis/1358287442/
and
https://www.virustotal.com/file/965393c20fdebe7dbfe708215275374a0e04e88d018f1f2928ab530d429990b8/analysis/1358256187/
see: http://anubis.iseclab.org/?action=result&task_id=1c2f35a8acb6836a43508e5ec98300831
See: http://www.prevx.com/filenames/X1733755283597968324-X1/CRIMSONLANDSETUP.EXE.html
reported to virus at avast dot com
polonus