In addition, if we know of a site that is infected, we focus on having the malicious code removed.

The site [in Russia] that delivers the actual trojan program is no longer reachable,

While there may still be a few copies of the JavaScript around which try to download this trojan, it will no longer be able to do so.

some of the infected Web sites [to] try to piece together the exact means by which the sites got compromised.

We do try to protect our sources and not to embarrass any system administrators in charge of these sites,