https://www.virustotal.com/en/ip-address/37.1.195.158/information/
In last detected URLS for that IP there is this:
Text12/39 2013-05-20 11:15:20 http://denegka1.com/silentbruter.exeIt would be interesting to see what pops up...
Thanks. That file corresponds to this virustotal entry:
Most are reporting it as Delf, which can full under backdoor, dropper, and password stealer.
Wipe and reinstall is the best solution. You never know at this point what else was done.
