See: https://www.virustotal.com/nl/url/594e45725bfd095645e85fe8a2fcf81a6c6c33ffdd800c4f994fde0124f6d198/analysis/1423572923/
Blacklisted external link: htxp://netstoragehost.com/1/ad.php?id%3D10
blacklisted domain/host: -netstoragehost.com
See: http://www.yandex.com/infected?url=termoel.it&l10n=en
Detection of that particular malcode: http://support.clean-mx.de/clean-mx/viruses.php?virusname=Mal/HappJS-A&sort=id%20DESC
IP badness status: https://www.virustotal.com/nl/ip-address/62.149.140.153/information/
Insecurity: 256 websites with IP 62.149.140.153: http://sameid.net/ip/62.149.140.153/
Backlinks, re: http://www.seokicks.de/backlinks/www.termoel.it Aziende Online.
About that detection: http://memoryhigh.ru/udalenie-virusa-malhappjs-a/
translated from Russian: https://www.uploady.com/download/ncnJdqo_gC2/Eppx2xUgQfW6cV41
Cleansing? → http://jsunpack.jeek.org/?report=828d43374f4150580106dbafd78d1b19b5a345f2
For security researchers only, open inside browser with NoScript, HTTp Switchboard active and inside a sandbox/V.M.
polonus (volunteer website security analyst and website error-hunter)