URLs and sub domains distributing the malware or acting as a redirector:
Domain aeg.com.br is at: 187.1.141.65 (web803.uni5.net)