See: http://urlquery.net/report.php?id=13007
See: http://siteinspector.comodo.com/public/reports/25526
See: http://www.virustotal.com/file-scan/report.html?id=9bf6e9aeca86df0ff45d33dbee3fda405a680bd40b335a22ba072f4933eb754c-1324494446
See: http://camas.comodo.com/cgi-bin/submit?file=9bf6e9aeca86df0ff45d33dbee3fda405a680bd40b335a22ba072f4933eb754c
http://www.threatexpert.com/report.aspx?md5=e8dbb314963a68fedec36ec55181812c
DrWeb flags it here:
Checking: -http://203.170.193.101/w.php?f=18&e=2
Engine version: 5.0.2.3300
Total virus-finding records: 2955641
File size: 79.00 KB
File MD5: e8dbb314963a68fedec36ec55181812c
-http://203.170.193.101/w.php?f=18&e=2 infected with Trojan.Necurs.2
So it could be a variant of this family of virus:
http://home.mcafee.com/virusinfo/virusprofile.aspx?key=733965#none
polonus