See: http://urlquery.net/queued.php?id=22225902
Apparently it has been closed, see: http://support.clean-mx.de/clean-mx/viruses?id=9912040
polonus
it redirect to this. htxp://wxw.fayloobmennik.net/2276956 almost same URL
This redirect there http://privatzone.biz/92.js?ac=329807 is being blocked via this ABP list - https://code.google.com/p/ruadlist/
to remove ads on Russian websites…
And this should be checked as well script redirecting to htxp://am15.net/bn.php? Which is blacklisted by DrWeb’s
htxp://am15.net/bn.php?s=30488&f=2&d=1650&old=1 is in Dr.Web malicious sites list!
Checking:htxp://am15.net/bn.php?s=30488&f=2&d=1650&old=1
Engine version:7.0.4.9250
Total virus-finding records:3877391
File size:912 bytes
File MD5:785f557fe3052a95349180c89403543f
htxp://am15.net/bn.php?s=30488&f=2&d=1650&old=1 - archive JS-HTML
hxtp://am15.net/bn.php?s=30488&f=2&d=1650&old=1/JSFile_1[0][390] - Ok
htxp://am15.net/bn.php?s=30488&f=2&d=1650&old=1 - Ok
Then there is a script (jquery.dd.js) going to wXw.giftlelo.com | see: http://www.mywot.com/en/scorecard/giftlelo.com?utm_source=addon&utm_content=popup-donuts
also see: http://evuln.com/tools/malware-scanner/omultfilme.ru/ → http://yandex.ru/infected?l10n=en&url=http://omultfilme.ru/
pol