There are two parts to this virus. First, the injection attack targets web sites running unpatched MySQL server instances, and once compromised, re-directs users to another web site that announces that the user's PC is infected and offers the download of "Windows Stability Center" to address this - a file which actually contains a trojan and is the second phase of the attack. The Windows Stability Center interface is very professional and the way that it presents threats makes it easy to understand how people are being duped into entering their information.
