followgreg - 6:04 pm on Mar 13, 2007 (gmt 0)

I can't find words for those who do that. We had similar issues not so long ago. The Iframe was not embedded into JS though.

We had to clean up the whole server and even buy another one just in case. It was a nightmare for 15 days. (from end of feb to 1 week ago).

I am still not sure how they managed to do that, so many times, randomly for so long, with 3 server admins sniffing around.

It attacked static files ending in *index.* all accounts were infected at the same time.

the iframe was redirecting to sites in russia. I still can't figure out why/how/when these sites will be banned forever, not talking about banning form Google but removing privilege of operating a domain.

If someone has more info about the procedures these hackers use it will be welcome I guess.

Tedster >> great info as usual.