See: https://www.virustotal.com/nl/url/3e76b0294976a7565d2d81abcbb3bd1f314ac0097b41cc9ebde3f9e043616faf/analysis/1384810719/
and
https://www.virustotal.com/nl/file/b7118fde6503ba91fa1dde8969df598a0d6e40c0a384ac0ee1b2dcb4b2fab6ec/analysis/1384324230/
see: http://urlquery.net/report.php?id=7801148
file-partner: http://scanurl.net/?u=http%3A%2F%2Fmysumsung.ru%2F&uesb=Check+This+URL#results *2
Javascript check on main site: Suspicious
<![cdata[htxp://bin1.openprog.ru/1118/sharemansetup.exe *1 ]]> <partner_new_url><![cdata[htxp://mysumsung.ru/software_install? guid=$__guid&sig=$__sig… *2 → *1 → https://www.virustotal.com/nl/ip-address/46.254.16.115/information/
polonus