View Single Post
Old 03-04-2010, 01:58 PM   #6
Festively Plump
bgbennyboy's Avatar
Status: Super Moderator
Join Date: Feb 2002
Location: England
Posts: 2,002
LFN Staff Member 
Looks like its probably a variant of the Gumblar script. I know Zaarin has cleaned it from some pages, but its tried to copy itself to all index.php pages it seems.

Most of the *index php files on my site got a script appended to the end, it even snuck its way into my Wordpress theme files too. Any site that's using Wordpress will need to make sure they check their themes and plugins. I know I normally just leave the wp-content folder alone when upgrading/fixing.

bgbennyboy is offline   you may: quote & reply,