Another webmaster running vbulletin was also hit and got it narrowed to a vulnerability in fclick a click tracking program and I found one of these has been hacked on my server namely the cfg.php file…removing the entries and restoring does not stop the redirect however.
In his instance they put up pictures of dead and blown up babies!