No it is def. residing in the /ubbthreads directory on the server.
My machine catches it as soon as you visit the site.
I am not sure about posting the link as I do not want to be responsible for infecting other pcs.
Are there any gurus out there who can clean this up?
