URLs and sub domains distributing the malware or acting as a redirector:
Domain lessthenaseconddeal.com is at: 204.13.160.107 (host204-13-160-107.oversee.net)