The three character domain followed by either .ru, .kw, .cn or any other TLDs, followed by a port designation (:8080) have been the result of compromised FTP credentials.
photoshopfreak is correct. It is a series of viruses implanted on various PCs (and some Macs we've seen) that does little...