cp.bat
http://www.threatexpert.com/report.aspx?md5=25c06c4384c428ce25ba1660c41d30fd

cp.bat will try connecting here 195.122.131.2 and download this ( travel.jpg )
http://www.threatexpert.com/report.aspx?md5=a2835db789c7bb13fe7545cd67e38bf3

travel.jpg is detected by avast
http://www.virustotal.com/file-scan/report.html?id=1d2f322c2a026cc10d4255a3262bb2cfdadedc90b767fc9036902a33e246df92-1303563372