See: https://www.virustotal.com/nl/url/183285769f6c3056af576c63f38cd5e422a659f034c949681ee876aabf3eff25/analysis/1426112811/
and https://www.virustotal.com/nl/file/cb059790ced975075953256a2727c3d6dc168b7f267fa42dc5e126f3dc055866/analysis/1426016053/
Avast detects this as MSIL:GenMalicious-DTU [Trj]. We are being protected!
polonus