Hi Pondus,
Thanks for the additional info on that malware domain, not much responding there now… see: htxp://www.malwaregroup.com/Ipaddresses/details/195.122.131.2
Analyzing the found malcode one step further could bring you additional results,
and this is very rewarding to the analyst…
polonus