See: x-connect dot ru/published/SC/html/scripts/js/frame.js suspicious
htxp://www.x-connect.ru/published/SC/html/scripts/js/niftycube.js script Suspicious
htxp://www.x-connect.ru/published/publicdata/U0793243XCONNECT/attachments/SC/themes/sale/head.js script Suspicious
htxp://www.x-connect.ru/published/SC/html/scripts/js/functions.js script Suspicious
htxp://www.x-connect.ru/published/SC/html/scripts/js/behavior.js script Suspicious
htxp://www.x-connect.ru/published/SC/html/scripts/js/widget_checkout.js script Suspicious
htxp://www.x-connect.ru/published/SC/html/scripts/js/frame.js script Suspicious
Malware closed? Backdoor?
polonus