http://{BLOCKED}oservisi.com/test/php/way.php?{random characters}&pin=58252D0098...
October 02, 2012
URL BLOCKING DATE/TIME: 29 Sep 2012 01:30:00 AM GMT-8
RATING: HIGH
DOMAIN: palyacoservisi.com
CATEGORY: Disease Vector
DESCRIPTION:
PE_QUERVAR.E-O connects to this site to download and execute a ransomware detected as TROJ_RANSOM.CMY. The said ransomware pretends to enforce copyright laws and locks the affected system, preventing users from using it.