URLs and sub domains distributing the malware or acting as a redirector:
Domain overwriteshort.ru is at: 216.108.235.40 (lasvegas-nv-datacenter.com)