IDS alerts, 13 suspicious files & 1 potential suspicious file.

See: https://www.virustotal.com/nl/url/3d86188d5e9904e91dd7b21ed61865a215e1bb3456da488bedf211d6e8d72fc3/analysis/1412085952/
Detected reference to blacklisted domain - detected reference to suspicious blacklisted domain 4.bp.blogspot.com

wXw.blogger.com/static/v1/widgets/2271878333-widgets.js
Severity: Potentially Suspicious
Reason: Detected procedure that is commonly used in suspicious activity.
Details: Too low entropy detected in string [[‘%26tran=%26npn=1%26=%26=%26=%26=%26=%26=%26#falsefontFamilyfontFamily=%26true=%26=%26=%26I=%26true=%26=%26=%26=%26=%26I=%26=%26=%26=%26=%26=%26=%26=%26=%26=’]] of length 104 which may point to obfuscation or shellcode.
Threat dump: http://jsunpack.jeek.org/?report=d220d965ec6815ddf72314101b077c1dbf036789
Threat dump MD5: 8F29EF73A1D7DCC46A744FDA44397451
File size[byte]: 90737
File type: ASCII
Page/File MD5: C854B114DE8AA773046F868953C7018A
Scan duration[sec]: 5.752000

Security HTTP Header scan results: Summary
Number of Happy Findings: 5
Number of Not As Happy Findings: 5
Percentage Happy Findings: 50%

Blog redirecting to other site: x3dblogger\x26nocache\x3d0\x26debug\x3d0\x26c\x3d1\x26v\x3dd30b8b5668c233bafcf12346b6771e3e\x26sv\x3d10
could fail to renew domain -

polonus