Herpes botnet

I've received an email recently (from Alexander Rasch) requesting me to have a look on 'Herpes' a sort of affiliate, you just have to register on the site and you can start to infect immediately (C&C and EXE ready after the registration)

Herpes sample on VirusTotal (13/43 >> 30.2%):
http://www.virustotal.com/file-scan/report.html?id=15a2963ee5bdbc3562e69dfc703fe1895e42a301f639d62f29c8ea7686830616-1324944831

Advert:

Login:

Statistics:

Clients:

Task:

User:

About:

Call home:

Each 5secs:

A task was sent ? looking for the good:

ID| - Create a key 'id' at HKCU\Software\HSetting
DL| - Download
VI| - Visite webpage invisible
VV| - Visite webpage visible
UP| - Update
UN| - Unistall
EL| - Email Log (No feature inside the bot)
ES| - Email Screenshot (No feature inside the bot)

But don't forget: this service come from HF (mean there is a faggotry obligatorily somewhere)

cookie stealer fuckyeah.

This is not the first time i see Herpes:

The following dir was found (i've not searched alot):

• dns: 1 ›› ip: 209.190.61.26 - adresse: ZEROXCODE.NET
http://www.zeroxcode.net/herpnet/inc/js/
http://www.zeroxcode.net/herpnet/css/
http://www.zeroxcode.net/herpnet/img/months/
http://www.zeroxcode.net/herpnet/flags/

Edit: About HackForum, a wild scamer appeared !

 The "proof":

Well, this is a edited picture from one of my blackhole screenshots (109.236.81.244)
Nice try anyway.