Thanks, but I have all of the above. It's obviously some form of javascript, not a virus per se.
It happens even when running from a Linux livecd (i.e. a read-only environment) or when running on a Mac.