URLs and sub domains distributing the malware or acting as a redirector:
Domain archiwumprasy.com is at: 213.192.69.61 (213.192.69.61)