ALERT-Check your Index files ...........

[glowlite]

May want to check your index pages, I found one which had been injected.
I haven't tried to track it yet. It occurred @ 4am MST

This is a safe screenshot of the seeded code:
w w w.lcc-consultants.com/injection.gif

I haven't posted enough to add a real link

Regards,

[Xstr8guy]

Bummer! What is this code suppose to do?

[glowlite]

Not sure yet, I should know later today. It was, as usual, immediately above the </body> tag. Which is an easy positioning target for an automated script.

[IntenseCash.com]

Very strange, thanks for the heads up.

Mark

[Chilihost]

is your server secure? what control panel is it running. Is your kernel, control panel, php, mysql, etc all up to date? How about scripts on your site, are you running any? Have you figured out how they got in? Is your FTP password secure?

Please keep us updated on this as its very important to figure out what happened to avoid it happening again or to others.

thanks,
Luke