Frits, it's very good that you inform people about this.
WHOIS on the <removed> gives this address:
Registrant:
Ab Decor
Ijsselstraat 21
Ijsselstein, Utrecht 3401DY
NL
I checked this address with Routenet.nl (I'm also Dutch) and this address is
fake 
. Same goes for the telephone number on the WHOIS page: 0573408448. The province of Utrecht, and IJsselstein for sure, has regional number 03(0) and not 057.
You're right that Planet.nl should remove this site from their servers as soon as possible, and I hope they will.
(The 'root' of the Planet.nl account picturecentre is hosted on shows this site: <link removed> which contains no info about the user..)
BTW.. I downloaded the installer exe but Norton doesn't detect it as a virus. I scanned the file with the
online malware scanner and only 2 of the 12 scanners give a hit:
Kaspersky Anti-Virus Trojan-Dropper.Win32.WinAD.d (1.02 seconds taken)
mks_vir Trojan.Dropper.Winad.D (0.22 seconds taken)
