Detected and described here: http://sitecheck.sucuri.net/results/www.provacances.ro/
Not flagged here: https://www.virustotal.com/nl/url/d69fce09ac0687db723fa5726be082439686f5c919bbbaafbac8da4294b3c160/analysis/
Flagged in two instances as suspicious here: http://app.webinspector.com/public/reports/18501347
On Joomla scripts on mod_AutsonSlideShow/tmpl/default.php can be flagged by avast!
On this site here avast! WebShield neatly flags and blocks this malcode as JS;Clickjack-A[Trj]/
Again we are being protected. To all avast! users - rely on the protection via the avast! Shields!
polonus