reply to dualsmp
Hmm... looks like it's all over the place. »www.google.com/search?hl=en&q=%2···ation%22EDIT: »www.freerepublic.com/focus/f-new···14/posts
check this out:»news.zdnet.com/2100-1009_22-5499···=nl.e589It appears to hit servers running PHP and phpBB. Update your PHP to version 5.0.3 and above. It uses google to find other phpBB sites to infect. It deletes all .PHP, .HTM, .ASP pages and replaces them with the infected files. Nasty little worm.Chris
