I'm not an expert, but those URLs do not look like Auctiva ones...they end in .js? All of Auctiva's URLs end in .aspx. If there was really a virus on the auctiva site (which I would think is highly unlikely), I'm sure there would be 1,000s of people on here complaining about it.