In PUP-mode Avast detects: https://www.virustotal.com/nl/url/ff54fadddeadf36a8bcc3cf9360bf97a0f4e8ca5c8369bea57a22ec0a3731024/analysis/1430252630/
See: https://www.virustotal.com/nl/file/16ca87f4cd660aa9c67958da408340b9b9d9f6211332949db165e14999580a39/analysis/1430252634/
Launching IP badness history: https://www.virustotal.com/nl/ip-address/54.69.104.255/information/
pol