URLs and sub domains distributing the malware or acting as a redirector:
Domain top.chebra.lt is at: 82.135.148.124 (top.chebra.lt)