Found one!
http://ww.wp.xz.cn/extend/plugins/dachat/
I’ve downloaded it and I’m in the process of installing this. Crossing my fingers.. Hope this works!
This has been traced at the Coppermine Photo Gallery forums as an exploit. See this link: http://forum.coppermine-gallery.net/index.php/topic,51671.0.html
Do you have Coppermine installed on your websites? Or are you purely on WP?
Our site has been hacked as well. I don’t have access to the files, though. We’ll have to wait until our webmaster gets on.
And yes, the little iframes would redirect IE users to some trojans, I believe.
