Allrighty.. Just going to post this here and an admin can delete it later I guess.... Here's a post with what I assume is an infected download in it...
bitcointalk.org/index.php?topic=745352.msg11300012#msg11300012
[edit] That guy was busy posting virus links for a bunch of things all over the place it appears.
bingo.
all download links should point to the shadow.cash domain... this post has a link to a filesharing host in the windows wallet picture
he's targeted us, 8bit, exclusivecoin, droidz, neutron, sling, burst, sphr,