How the "My Guests" virus spreads in contact with?

Question

In contact with

VKontakte added the link "My guests", redirecting to the left site.
Who knows what kind of infection it is, how it spreads, where it sits and how to remove it? Apparently, a very fresh thing - the topic appeared on the Kaspersky forum only today and has not yet been answered.

PS: I haven't set anything left in recent days. Judging by the symptoms, it disappears when JS is disabled. Does this mean that a browser vulnerability is being exploited?

Answer 1

Cured. As I already said, I have a network - a computer and a router that distributes the Internet via Wi-Fi.
I doubted right away that the problem was with the computer, I got into the settings of the router, and some left DNS servers were registered there. dlink 2640U, returned the checkbox so that the addresses were obtained automatically, and the problem disappeared.

Answer 2

*facepalms*

Answer 3

poppy, safari, the same nonsense.

Answer 4

Ajax does not work, flash is not played, music is not played, but only in VKontakte. the link disappeared, the Internet was deaf somehow, few people were exposed.

Answer 5

look at tracert vkontakte.ru.

Answer 6

Have you tried looking through js dev tools? There are some requests in debugging...

Answer 7

Based on the symptoms of the computer isnest, the problem is in the xss contact.
When you go to some site or follow some malicious link inside a contact using xss, a js code is written to some field of your personal data that draws an annoying link.
Check all settings and personal data. Preferably, in each section, click on "save" to overwrite all fields.

Answer 8

What browser do you use? Look Userscript's (UserJS) can be left installed, which replace/modify pages.