URLs and sub domains distributing the malware or acting as a redirector:
Domain d.serve-sys.com is at: 173.241.242.12 (ox-173-241-242-12.xv.dc.openx.org)