URLs and sub domains distributing the malware or acting as a redirector:
Domain msupdate.ru is at: 176.9.45.70 (static.70.45.9.176.clients.your-server.de)