[lns2000]

OK
I saw something like code below

http://www.facebook.com/plugins/like...&height=21
status: (referer=www.downloadmusicfreenow.com/\\\\\\\\\\\\\)

Then I disable the plugin named: "Async Social Sharing" and scan the site again, the url downloadmusicfreenow.com disappear

http://jsunpack.jeek.org/?report=5be...48ce8fecdc6b8c

So the problem came from "Async Social Sharing". I installed this plugin on my other website and just checked it with no same problem. That's mean whateverfree.com got hacked ? and hacked insert this script to my site ?