I did not mean to sound curt on my reply.
The issue is
Classic is not supported anymore.
Very few active member here use it.
There are security holes in such a old program.
That said the hack could have been in anywhere.
Hackers are very creative. In fact there was a attack just this past month on the most current version of threads that was just resolved.
So you will need to start looking for where it is inserted.