URLs and sub domains distributing the malware or acting as a redirector:
Domain afxeftof.ru is at: 109.227.212.99 (109-227-212-099.nts.su)