URLs and sub domains distributing the malware or acting as a redirector:
Domain gupic.net is at: 194.28.172.68 (s44.org.ua)