some more info

this is the url in the iframe: superpuperdomain2.com

Update to the Superpuperdomain2.com malware
http://blog.sucuri.net/2011/08/update-to-the-superpuperdomain2-com-malware.html

WordPress Sites Hacked with Superpuperdomain2.com
http://blog.sucuri.net/2011/08/wordpress-sites-hacked-with-superpuperdomain2-com.html

Wepawet
http://wepawet.iseclab.org/view.php?hash=2e9c5c43172b8476ca11aca0f1caa8aa&t=1313444515&type=js