INFECTED URLs:
1.
#http://www.sofieverder.nl/components/atualizar-token_v026.php redirects to
#http://www.sofieverder.nl/components/Itau_Atualizacao_v026.exe
2.
#http://www.sciencefiction.de/itokenv2.03.php redirects to
#http://240plan.ovh.net/~espacedu/itokenv2.03.exe
3.
#http://60.31.144.2/Itau.com.br/itaubankline.html redirects to
#http://www.wlcbgtj.gov.cn/Itau.com.br/Itau_Atualizacao_v026.exe
4.
#http://www.call-manager.de/Bankline2.03/Instalar.htm redirecs to]
#http://www.projectcovalprim.com/plugins/system/iToken.exe
5.
#http://www.reflexologyinrio.com/aspnet_client/system_web/1_1_4322/Gol_view.php? redirects to
#http://208.18.143.18/webctrl_client/1_0/Voegol_VG.812BR.com