URLs and sub domains distributing the malware or acting as a redirector:
Domain qysriloh.ru is at: 42.201.228.64 (64.228.201.42-static-fiberlink.net.pk)