7thwraith

The code is in both your RSS feed and right across your site. The last line of every output file. It does look like a hack but then javascript is not my thing…

Thanks esmi! That gave me a clue on how to apply a temporary solution to get rid of the script. Turns out every index.php file in that subdomain was infected with that script. So all I did was remove that script.

For now, the only thing I’ve done to avoid this from happening again is change the FTP password for this account, disable anonymous FTP and disable indexing. I’ll keep you guys posted if anything.

Thanks everyone!

Thanks for the reply. Yes, the last line in the feed validator (the javascript) is indeed what’s causing the problem.

The thing is, I do not know what file is running this javascript. If anything, I’m suspecting two of the plugins, particularly

WordPress.com Stats Helper version 0.5.5.3 and WP-Stats-Dashboard version 1.5.4