Is MM still mining, and if so, is he still extending his mining /or botnet operation?
Doesnt look like it:

Network hashrate is still at ~11-11.5GH excluding the badluck, I dont think that Mystery miner is gone unless some other mysterious 1-1.5TH user replaced him.
You are looking at the 1 TX blocks, its pretty obvious that is gone but the hashrate isnt.