URLs and sub domains distributing the malware or acting as a redirector:
Domain stjohnsdryden.org is at: 69.72.158.66 (theta.dns-shield.com)