The malware described here: http://sucuri.net/malware/malware-entry-mwhta7
is being found to be directed from this site, flagged here: http://safeweb.norton.com/report/show?name=peggysage.slask.pl
Only G-Date detects this as a Malware redirect site, see:
http://www.virustotal.com/url-scan/report.html?id=5c921fbd412a24b264ba6bca93e53fa7-1298997321
Could be that the server at peggysage. slask. pl has already been cleansed of malware,
what is the true status of that site?
polonus