I had a similar thing happen to my Wordpress site. Code came from a dogdy template, that went on to helpfully inject it's self into all the other templates in the directory. <div><br></div><div>Nathan.<br><br><div class="gmail_quote">
On Thu, Feb 23, 2012 at 10:12 PM, <span dir="ltr"><<a href="mailto:jwm.art.net@gmail.com">jwm.art.net@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I think it's shared hosting so don't know who is a valid user or not. But they have ten users in their a/c and several domains. None of the users are named otunnel - who has logged in+out 520 times since 1st feb. I've told the owners to contact dreamhost before I make too many assumptions.<br>
<br>
Several sites in the a/c have been affected.<br>
<br>
James<br>
Sent using BlackBerry® from Orange<br>
<div class="HOEnZb"><div class="h5"><br>
-----Original Message-----<br>
From: David Halliday <<a href="mailto:david.halliday@gmail.com">david.halliday@gmail.com</a>><br>
Sender: <a href="mailto:kent-bounces@mailman.lug.org.uk">kent-bounces@mailman.lug.org.uk</a><br>
Date: Thu, 23 Feb 2012 21:16:18<br>
To: Kent Linux User Group - General Topics<<a href="mailto:kent@mailman.lug.org.uk">kent@mailman.lug.org.uk</a>><br>
Reply-To: Kent Linux User Group - General Topics <<a href="mailto:kent@mailman.lug.org.uk">kent@mailman.lug.org.uk</a>><br>
Subject: Re: [Klug-general] wanted: db advice/crashcourse for helping clean<br>
cracked wp site<br>
<br>
_______________________________________________<br>
Kent mailing list<br>
<a href="mailto:Kent@mailman.lug.org.uk">Kent@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/kent" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/kent</a><br>
_______________________________________________<br>
Kent mailing list<br>
<a href="mailto:Kent@mailman.lug.org.uk">Kent@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/kent" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/kent</a><br>
</div></div></blockquote></div><br></div>