Malicious URL blocked

[Zippy]

I have managed to decode it and found it drops a package on people's machines but it only executes when it spots a flounce... oh dear....

Yeah, me too

(function(){
fWZIQNA1='z9KRA5dz9KRA5oz9KRA5nz9KRA5\'tz9KRA5lz9KRA5ez9KRA5tz9KRA5tz9KRA5hz9KRA5ez9KRA5dz9KRA5oz9KRA5oz9KRA5rz9KRA5hz9KRA5iz9KRA5tz9KRA5yz9KRA5ez9KRA5rz9KRA5az9KRA5rz9KRA5sz9KRA5ez9KRA5oz9KRA5nz9KRA5tz9KRA5hz9KRA5ez9KRA5wz9KRA5az9KRA5yz9KRA5oz9KRA5uz9KRA5t';
var ziJ9xE='z9KRA5';
var tara=(fWZIQNA1.split(ziJ9xE).join(''));
alert(tara);
}) ();

[Arturo Bassick]

Party food as Rangers die...........

Isn't that against the law in Scotland land now?

[Bunk]

Prize for anyone who can decode this, some v clever code by the looks of it.

It's not actually doing anything that clever, just sticking an iframe on the page. All the gibberish is just to obfuscate the terms that would set alarm bells ringing like 'iframe' and the URL it points to.

[Cliphead]

Isn't that against the law in Scotland land now?

Nope.

[administrator]

Thats it, this is getting scary. I am off CUK for a while till all this virus infection stuff is fixed. Cant take the risk anymore.

Best not use the internet at all then, especially any forums - seen two more this afternoon that have been infected by the same route... Fingers crossed VBulletin will pull their fingers out, otherwise will have to look at a cross-grade to another system and I really don't want to have to do that