Hi Pondus,
It is a good thing that all this fake av coming from that 188. 229. 88. 102 domain is rather shortlived, think this one is also already dead, see: http://hosts-file.net/default.asp?s=merosa.ce.ms
But that domain is spawning fake av like a Medusa’s head, chop off a few and others are to grow on in a jiffy,
polonus