Hi Pondus,

Then there is this: [714166] -http://otavalosonline.com/pawkaraymi/pr2005/Inaguracion_LRosero/index.htm

URL has been seen with the following file: 8495A336F728D12EA833EEFA22E968CB
see: http://urlquery.net/queued.php?id=5492
Also infected with the same malware…VBS:Malware-gen,

polonus