URLs and sub domains distributing the malware or acting as a redirector:
Domain themorningyawn.co.cc is at: 31.170.164.120 (31-170-164-120.main-hosting.eu)