URLs and sub domains distributing the malware or acting as a redirector:
Domain tscan52liabil.rr.nu is at: 91.243.115.134 (91.243.115.134)