URLs and sub domains distributing the malware or acting as a redirector:
Domain synga.ru is at: 78.46.36.69 (static.78-46-36-69.clients.your-server.de)