hxxp://www.jplineage.com/fyy.htm
hxxp://www.jplineage.com/foy.htm
There might be more similar addresses and stuff in this domain,
didn't really spent much time on it...
I just got the following binary from the aformentioned pages,
MD5 checksum in the topic's title...
hxxp://www.jplineage.com/smss.exe