PUP on ghosted domain...Win32/SoftPulse.S potentially unwanted application

Infested with url.adw_downware_gd aka Win32/SoftPulse.S potentially unwanted application, re: https://www.virustotal.com/nb/url/816cc8f3554932d14a1af807affec7a8c1e9b0c54999ebc46c756380c65faa8f/analysis/1419809121/
and blacklisted: http://sitecheck.sucuri.net/results/6mujms73v4ezzhzm.mxp2140.com
Three threats detected: http://safeweb.norton.com/report/show?url=6mujms73v4ezzhzm.mxp2140.com
and ESET Reputation Warning. Kraken VT result: -6mujms73v4ezzhzm.mxp2140.com,Ghosted,
sub-domain would not resolve, see: http://www.dnsinspect.com/mxp2140.com/1419809309
IP badnes: https://www.virustotal.com/nb/ip-address/5.196.157.0/information/
Trojan-Clicker IDS & ET MALWARE Win32/SoftPulse.H Checkin alerts: https://urlquery.net/report.php?id=1419694079787

polonus

Similar detection: https://www.virustotal.com/nl/url/385eb059ee3e7428e79ccc6c3df1bf9d6d113594d64742e6677c2b0c023c3cec/analysis/1419856510/
Blacklisted: http://quttera.com/detailed_report/94eaqua8.620pzdu.com
Warning: http://safeweb.norton.com/report/show?url=94eaqua8.620pzdu.com
IP badness: https://www.virustotal.com/nl/ip-address/5.196.157.0/information/
avast detects as Win32:SoftPulse-BE [PUP]

polonus

This is in a list known as malicious: htxp://1blolnpie.2z7zo1f.com/hVnroXp1B2xw3do7QQ6V9_YhPHgnMxnum8wIqj_EmoTW_0YZY0BKO-7Kyvj-C7qSPIotFcf9SAWgYph1bbNNoMUsxYQ2liUDgB3PfAMfiYjttRxcYIO8qejvmeBEvtS2 is in Dr.Web malicious sites list!
Chrome blocks Win.Adware.Agent-34581, avast as HTML:Script-inf, and av scan results: https://www.metascan-online.com/en/scanresult/file/eca7f1f202cf4a5191cc45b94e979969
Related detection: http://www.herdprotect.com/setup-v2.1.exe-d6a2ee2cf0d0cee2521932a1f90e607d9f383e9f.aspx

pol