<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br>Thanks for the info. <br><br>Turns out the latest site was compromised with ToolsPack plugin. <br><br>The first site was done by FTP password being compromised. <br><br>Very coincidental that two unrelated sites are compromised in two weeks. <br><br>I've installed WP Firewall and will continue to monitor and checkup on things. <br><br>Wordpress sites are all updated to the latest version 3.3.1 and has been for some time. <br><br>The site that had the Toolspack installed did have a weak password. <br><br><br> </div></body>
</html>