See: https://www.virustotal.com/nl/url/b4f939f1bbfbf9de670082e9e4666cb81a5433d7847241852e547f4c2ca38420/analysis/1370019799/
and then: https://www.virustotal.com/nl/file/4e3ae6ace05505f4da503cdce5d30aabe0bd415b649938eb3f4614e940c3edbb/analysis/1369104235/
see: http://systemexplorer.net/file-database/file/facebookmessenger-exe
See: htxp://176.9.242.121/cgi-sys/defaultwebpage.cgi
Consider: http://support.clean-mx.de/clean-mx/viruses?id=10797455
polonus