See: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fwww.frpservices.com
Scan for: htxp://www.frpservices.com/North_america/EN/A/
Hostname: wXw.frpservices.com
IP address: 192.232.200.242
System Details:
Running on: Apache/2.2.21
System info: (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Powered by: PHP/5.2.17 (Excessive header info insecurity!)
Web application details:
Application: Joomla! 1.5 - Open Source Content Management - http://www.joomla.org
Web application version:
Joomla Version 1.5.8 to 1.5.14 for: htxp://www.frpservices.com/North_america/EN/A//media/system/js/caption.js
Joomla version outdated: Upgrade required.
List of links found
detections: https://www.virustotal.com/en/ip-address/192.232.200.242/information/
Malware seems closed: http://support.clean-mx.de/clean-mx/viruses.php?ip=192.232.200.242&sort=id%20DESC
polonus