I too have been hit by this “drive-by” malware today. Half of my morning has been eaten up by this wild good chase. Glad to see I’m not the only one.
The only overlap I have with plugins from the above posters is FancyBox and Contact Form 7. I do not have the W3 Total Cache plugin.
I’m tempted to disable FancyBox, as it hasn’t been updated in years. “Easy FancyBox” seems like a suitable replacement.
