Virus?

So today when I selected "Members - Click here to play" It lead me to runescape.com/loginform.PHP where it asked for my bank pin and shit. I typed in some fake data, and it said my account was locked

I figured that runescape was redirected to another site somehow, even though it said runescape.com all the time. So I checked the hosts files, and it turns out alot of ip's have been redirected to other urls..
Including localhost to sythe.org, virus.org and scionbot.com -.-"

And yeah, runescape.com was directed to some other phising shit..

So if this happened to any of you guys, please respond.
And does anyone know where I eventually got this virus from? Didn't download anything, except for the newest version of rsbot

Thanks.

 

It is a pharmer. Easily made and virus scanners won't find it. If you still have the host file and the phishing ip's, go spam the shit out of their logs.

 

A chinese one?

Anyways, thanks, and do you have any idea where I could've gotten this virus from? Oh, and I deleted everything in that file.

Although I think it was something with runescape.net ..