doogie, it looks like it was a malware injection in one of vbulletins plugins... i think vbseo, but there are many plugins that have security holes.