http://adam-love.net/t.php

Parent - original discovery: http://wisdomchief.com/?q=content/18042010-strange-site-down-corupted-in...

!!!WARNING - Remove all the code from index files and infectious files or else your website will be banned by google!!!

It seems that all the servers are corrupted, specially the index files which contain the magic last line:

<img heigth="1" width="1" border="0" src="http://adam-love.net/t.php?id=14685007">

Also there are two files (with random names) on the servers an encrypted 11k php file and an unencrypted php shell file of 60k. Also the .htaccess file get's corrupted redirecting some links to some files.

Two directories are created .log, and .logs which contains a lot of dummy encrypted html files.

Delete all infectious files.

 

I found sites from many host infected and (Attention) on of them was banned by Google! and marked as dangerous website.

I don't know now how the files got on the server, by php injection, write directory access, of webhosts Linux servers infection with a virus.