The hackers has managed to get access to the htm files and had edited one of them.
Surprisingly they had only added some links to Viagra adverts as black hat SEO (the links were not visible to site visitors but were to serach bots so it took someone passing by with Mcaffee AV to get a warning and let BS know. )
My web hosts insist it is not a security vulnerability on my VPS but must have been caused by a brute force password crack. Anyway - all passwords now changed and all files (hopefullY) now back to normal.
The b*****ds (or some of their friends) also managed to change a .htaccess file a few weeks back with similar effects on another site I manage.
These sorts of attacks do seem to be getting more common. I just thank my lucky stars it wasn't one of the Wordpress sites I host as that would have been a ***** nightmare to sort out!
Amusingly the charming chap from Bangalore I was dealing with at my web host - Keanu I think he said his name was - wanted to remove all FTP access on my reseller account until I pointed out that people buying webhosting from me tend to expect to be able to put files on their own web sites
].....
.
