Trojan analysis from the recent wave of fakes

[w4r3zh4ck]

So I took a little time off to analyze what's behind those fake files when they suddenly popup by one account with hundreds of fake peers.

The sample is from a fake Windows 7 Loader

Side notes:
The download included a .txt file and .nfo file, both also contained some malicious code...

Here's the heuristic report:
http://pastebin.com/rZHFQ0mX

Connections:
http://pastebin.com/KscGTeg2

File Differences:
http://pastebin.com/f5EqMyMw

Registry Differences:
http://pastebin.com/LxnEAF76

The rest of the report couldn't be pasted here or even upped as an attachment, even PasteBin let me down

So I've upped it on Mediafire:
http://www.mediafire.com/view/8i9c8d7swt...Report.txt


TL;DR
If you fall into one of these fakes, you're screwed big time.