Possible False Alarm?

Our Car Club forum triggers the avast! Warning on every page. It is running phpBB Version 2 (I think).

http://i581.photobucket.com/albums/ss251/SupplanterAU/Untitled.jpg

hXXp://www.ftoaustralia.com/modules.php?name=Forums

Members have reported that avast! is the only scanner that picks up this virus/malware.

Welcome to avast! forum.

Looks like the site has been hacked which is a common problem these days.

You need to contact the site’s Webmaster and inform them of the infection.

There is bigger chunk of obfuscated JS at the end of the page.

There is even an alert on the link you gave to the forums, same VBS:Malware-gen.

Again a big chunk of obfuscated script, I guess pretending to be a Google Ranking Script (do you use that), but it is after the closing html script. The strange thing with that forum link there appears to be multiple HTML pages in one.

See image, this comes after the first closing html tag. I have modified the script to see it easier in the image as it is all on one line and goes on for some way still on the last line.