No, Kaspersky is not responsible for the script file on Max's server getting changed. It has indeed been changed back to the fake script that pulls in 2345.com. There can't be a good reason for that to happen so Kaspersky is right to question it.