URLs and sub domains distributing the malware or acting as a redirector:
Domain 2012-verygood.ru is at: 212.71.10.194 (212.71.10.194.static.edpnet.net)