[slater]

http://www.exterminate-it.com/malpedia/file/af.dat maybe?

[lcrs]

Interesting, whilst downloading the bittorrent client ID strings were all "LT/1.0.3.0", maybe a connection to the Lineage malware from that page?