Hijacked web server used for drive-by malware installations. Deceptive web pages planted on hundreds of sites load a set of Java Scripts which in turn attempt to load a malicious webpage.
In this case it is located on ftp.coden.com.br
Gary Warner links this to the Zeus bot, which steals passwords, and was recently involved in the arrest of a group of Ukrainians whole stole over $70 million from US companies.
See more of the description of this problem at
A criminal Zeus botnet has been known to use this site in an attempt to spread malware.