Unblocked as you have seen - targets matched ;D, the DrWeb scan redirect still seems weird. I cannot find a direct explanation for the scanner behaviour, must be the coincidence of the wXw.ma shortening, that DrWeb should exclude to execute that way.

polonus