No advert, seem a private program.
My start point was this winlock found in blackhole
Nothing interesting inside Thumbs.db:
1328347569_ggg.rar -> 1328347569 -> Sat Feb 04 10:26:09 2012 (timestamp)
Frequently asked question:
The ICQ number found inside the FAQ is to a Ukash/ps exchanger: