Win32/Application.ab7 is detected by avast as Android:SMSreg-MF [PUP]

Viruses and worms
1

See: https://www.virustotal.com/en/url/346d0aff817cd844d54412cf6d323c3266617de834934cbf6019d026dcca49cd/analysis/1417128122/
See: https://www.virustotal.com/en/file/34f5b3ed07ce1aa7c2b0d09742c00f6b5e301718a7ac8124f0bb3acaea7846c2/analysis/1417099178/
Recently found Android:SMSreg-MF [PUP] here:
Up(nil): Win32/Application.ab7 APNIC KR djkim at gdsys.co dot kr 180.131.50.38 to 180.131.50.38 bjk321 dot com htxp://a396766.bjk321.com/az/index.php
Up(nil): Win32/Application.ab7 APNIC KR djkim at gdsys.co dot kr 180.131.50.38 to 180.131.50.38 bjk321 dot com htxp://a3639207.bjk321.com/az/index.php
Up(nil): Win32/Application.ab7 APNIC KR djkim at gdsys.co dot kr 180.131.50.38 to 180.131.50.38 bjk321 dot com htxp://a357984.bjk321.com/az/index.php
Up(nil): Win32/Virus.Adware.8d7 APNIC KR djkim at gdsys.co dot kr 180.131.50.38 to 180.131.50.38 bjk321 dot com htxp://a3488111.bjk321.com/az/index.php

We are being protected, also Google Safebrowsing blacklisted and blocked: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=a396766.bjk321.com

polonus

2

Some more for the website detection: alerted: https://urlquery.net/report.php?id=1416813846261
& http://www.scumware.org/report/70880818AB89B9BB2FF3E90B35C1C514.html
& IP badness history: https://www.virustotal.com/en/ip-address/180.131.50.38/information/
Does avast detect here? → https://www.virustotal.com/en/file/46f5cd307b1e29882e90b0db63bd9687bac0314d7fbcd18d3805a49c5827235e/analysis/
re: http://urlquery.net/report.php?id=1417045092105
See what is still alive and up there: http://support.clean-mx.de/clean-mx/viruses.php?domain=bjk321.com

polonus