Only Norman to detect?

Viruses and worms
1

See: https://www.virustotal.com/en/url/0a1975c500f2122a18044c32fd3e2c1878975913b25a2bbee7a071ef8a916738/analysis/1417556670/
See: https://www.virustotal.com/en/file/3ce9348a9e5a5a3a238743868af94cc7719a4ea9be37b5a2e7deb237857bf07c/analysis/1417549655/
Blacklisted by Quttera and here: http://www.google.com/safebrowsing/diagnostic?site=www.xmhbcc.com
Compromised site: http://sitecheck.sucuri.net/results/www.xmhbcc.com
IP badness history: https://www.virustotal.com/en/ip-address/42.121.253.211/information/
IP is launching virut

polonus

2

VBA32 and ESET also updated in the last hour
https://www.virustotal.com/en/file/3ce9348a9e5a5a3a238743868af94cc7719a4ea9be37b5a2e7deb237857bf07c/analysis/1417558409/

3

That means we have stumbled onto something quite new.

Damian