hello!

accidentally got on http://gosong.net/
all download pages have malicious setup_file "song.exe" URL:
http://sharesuper.info/gong?q=song
which will download bunch of installers (1mb 4mb 2mb size);
little one I included in attachment "down.3504.helper_setup.exe".

pasw: malware

p.s. Don Wooma will shut it down soon, you bad-ies :P

For anyone who wants to try to analyse this.
This is the VirusTotal Analysis link.
https://www.virustotal.com/en/file/e060e4d99460fc95527c037ade7717cded313b1cb231b4e122ed87b405e1da7d/analysis/1400384820/
https://www.virustotal.com/en/file/f5fbdc74afc209f2648490e077a2fcddc402cbc57ababbc2f735aaecde95681b/analysis/1400385342/

Even though both are classified as "PUP" or Adware.
My guess is that they could be used to spread botnet over time if it's lucrative enough.

BR,
[ Gunther ]