I have the EXACT same thing happening. Same results on scan, and same thing result from the scanner. Still working on trying to locate it. As far as I know, there are no iframes on the site.
I don’t think my post-new.php file was hacked. How did you find yours was hacked, and what was in it?
PS: “I-35 from the convention center” for me resulted in references to this:
http://www.facebook.com/note.php?note_id=396818736124&comments&ref=mf
“Location: Conjunctured coworking space, 1309 East 7th St., Austin, TX 78702. From the convention center, walk up to 7th Street, hang a right, and walk until you get to #1309. If you’re tired of walking, taking a cab is a decent option. Note that this is on the other side of I-35 from the convention center.”
I was wondering if there is an iframe on the dashboard page, including WP news….?
