I’ll leave the files there for viewing until 5pm EST for those that want to check it out.
Thank you for the resources listed. Gives a great starting point. The events surrounding the hack I show occurred yesterday around 2pm EST. It was witnessed live so others will probably be affected.
You will notice problems if you try to alter your theme as this is when the themes.php file is called. It takes over you admin page to display http://dmitext.net/ instead of admin.
