Detection missed...or site already cleansed from malscript?

Viruses and worms
1

Malware site: htxp://www.museummesdag.nl/
See:
http://www.virustotal.com/file-scan/report.html?id=ca8ad83869a0983d7c896f099b76bb6bfa6809547e1dd72a78ce8468cc2e9db6-1300392393
Malware found in the URL - hidden iFrames, see: http://sucuri.net/malware/entry/MW:IFRAME:HD202
Malware found in the URL - for Google’s UA
Is it still there?
found iFrames:
(Level: 0) Url checked:
htxp://museummesdag.nl/
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
htxp://zoomt.net/t.php?id=159835
Blank page / could not connect,
No ad codes identified

I got “The requested URL /t.php was not found on this server” in malzilla when feeding the above Url to it,
well three detections on virustotal, and detection via sucuri…

polonus

2

It is still there, Malware entry: MW:IFRAME:HD202

3

Norman analysis confirms infected

wxw.museummesdag.nl.htm Processed - HTML/IFrame.IO
4

Hi Pondus,

The malware is still there: http://safeweb.norton.com/report/show?url=museummesdag.nl
also sucuri flags it as this: http://sucuri.net/malware/entry/MW:IFRAME:HD202
Avast still does not flag it: http://www.virustotal.com/file-scan/report.html?id=ca8ad83869a0983d7c896f099b76bb6bfa6809547e1dd72a78ce8468cc2e9db6-1300428702
The malware goes here: htxp://zoomt.net/t.php?id=15983
which may not be there anymore: “The requested URL /t.php was not found on this server”
See: http://www.UnmaskParasites.com/security-report/?page=zoomt.net/t.php%3Fid%3D15983

polonus