Websites defaced by R3YR3 !!
Both websites are owned by same person ( has taken WHOIS privacy service).
R3YR3 is a member of Indonesian Defacers group . It seems another member , Flyff666 from same group is resposible for Win32.Sality.aa virus as detected by Kaspersky and he himself has given different names like W32.Sarap.B or W32.Amburadul.Virus or has taken code from them. Infected files are here and I think this webserver itself is infected. ( Files are in double extensions , this virus is infecting Image file format like JPG, gif, png etc.)
