Known javascript malware!

Viruses and worms
1

Re: http://killmalware.com/yummy-klappertaart.com/# (defacement)
Missed here: https://www.virustotal.com/en/url/5122bec6b33b45ba55639067efa5a40b44eae9548120b5e2741d9e0e3e4d111b/analysis/1429857901/
Severity: Potentially Suspicious
Reason: Suspicious JavaScript code injection.
Details: Procedure: unescape has been called with a string containing hidden URL (c5.worldcrunch.com) to script code
ISSUE DETECTED DEFINITION INFECTED URL
Website Malware malware-entry-mwanomalysp7?v53 htxp://yummy-klappertaart.com
Website Malware malware-entry-mwanomalysp7?v53 htxp://yummy-klappertaart.com/404javascript.js

Web framework hack - SCRIPT.virus

polonus

2

only Dr.Web and Qihoo
https://www.virustotal.com/en/file/ac6d6b0b3a56f85e97faa85d26fbd670350c26631b3b511be8c19d9b7e3bea43/analysis/1429888563/

3

Confirmed by F-secure

============================================================
The file you sent was found to be malicious.
We will be detecting the sample you submitted in the next database update.

Norman/BlueCoat added detection yummy-klappertaart.com.htm HackScript.A

4

Hi Pondus,

Again a formidable follow up, good Pondus-polonus cooperation and right outcome. ;D
At least we know now what it is and also that Avast could add to detection now.

polonus