Cryptowall

CryptoWall from MagnitudeEK
see:
http://threatglass.com/malicious_urls/paying-days-com

campaign/affiliate: crypt100

Check-ins:
kaplicarehberi.com/wp-content/plugins/wp_module/img2.php
csvbd.com/wp-content/themes/spacious/img1.php
daffamedia.com/wp-content/plugins/wp_module/img5.php
respitefarm.com/img4.php
xaqyhczl.com/wp-content/plugins/wp_module/img3.php
yalipan.com/wp-content/uploads/2015/03/img2.php
orzz.tw/wp-content/plugins/wp_module/img1.php
ourlove3344.com/wp-content/themes/village/img5.php
wasirathore.com/wp-content/themes/meshable/img4.php
carpaszeko.com/wp-content/plugins/revslider/temp/update_extract/revslider/img3.php
cavalieribeachsoccer.com/wp-content/plugins/wp_module/img2.php
visiongameworld.com/wp-content/plugins/wp_module/img1.php
hkinteriors.co.uk/wp-content/plugins/wp_module/img5.php
wildcoastgallery.com/wp-content/plugins/revslider/temp/update_extract/revslider/img4.php
visitingjakarta.com/wp-content/plugins/wp_module/img3.php
alimco.com.co/site/wp-content/themes/alimco/img2.php
sweeneysopticians.com/wp-content/plugins/wp_module/img1.php
ippopotami.net/wp-content/plugins/wp_module/img5.php
webdesignlivorno.it/wp-content/themes/newscast/img4.php
tutorialswalk.info/wp-content/themes/Defne/img2.php
cronachelametine.it/ciccioesse/img1.php
conisul.com.br/wp-content/plugins/wp_module/img1.php
steamyhub.com/wp-content/plugins/wp_module/img5.php
thecardrona.co.nz/wp-content/themes/roots-master/img4.php
unifieddeveloper3.com/wp-content/plugins/wp_module/img3.php
lincoln-counselling.com/wp-content/plugins/wp_module/img2.php
lifestyle-journal.org/wp-content/plugins/wp_module/img1.php
tujack.com/wp-content/plugins/wp_module/img5.php
westchesterretirementservices.com/wp-content/plugins/revslider/temp/update_extract/revslider/img4.php
stangemes.com/wp-content/themes/twentytwelve/img3.php
crowtracker.com/wp-content/themes/twentytwelve/img2.php
toptendulichnhatrang.com/wp-content/plugins/wp_module/img1.php