Same malware to be found here: htxp://www.epictulsa.com/files/atual%3DiToken.php
See: http://www.virustotal.com/file-scan/report.html?id=de7e311f1d0cf57b80cbb4baf07798e8587079d2a922f7dcc58d27e6380cb699-1300566051
polonus