Free hosting for malware

Malware distributors are abusing the names of well known security suites to trick users into downloading malicious files. The email message informs recipients that they may have been infected with a worm requiring them to download and run a scanning tool. 

Google translation:

Your e-mailcan be blocked byinappropriate use.
Attention: We are concerned about the number of complaints
have received spam from your e-mail.
Your computer may be infected with a variant of the virus, worm / Delf.JBH
Scan your computer with the tool below to remove the variant and
avoid permanent blocking of your account email.
Check with email protection [
The scan may take a few minutes.

The malware is hosted on the free hosting site T35.com.

The malware has a .cpl extension. CPL files are executable but are normally used for Windows Control Panel elements.