URLs and sub domains distributing the malware or acting as a redirector:
Domain orangeroller.ru is at: 93.114.44.57 (lh19659.voxility.net)