One of my users Emailed me to say that the site was activating his Antivirus shield, so I ran the site though Black Widow and found that every time the index page was called, it brought up this URL
So I looked at the page source and found this at the bottom:
Content visible to verified customers only.
Not sure how it got there, or how long it has been there although my member said it started on sunday, but I am just changing my server login, can I simply over write the index php with a new version?
I'm running 5.62, are there any known backdoors or exploits?
PS. have now managed to edit out the script after disabling my antivirus, butI'm concerned that it may return.