I only noticed this by chance.
at the bottom of the index.php in the web root of my site http://www.dailybiker.co.uk was the following nasty...
Not sure where it came from. I've deleted it now but watchout.
rich at dailybiker.co.uk