This is still up and infecting: http://urlquery.net/report.php?id=1429466833972

polonus