http://www.UnmaskParasites.com/security-report/?page=www.philaweddingphotographers.com
This is a complex infection called Gumblar. It uses your stolen FTP credentials so fixing just the server-side won’t give any persistent results. You need to remove malware from your computer and change passwords.
You can find more details about this attack and removal instructions here:
http://blog.unmaskparasites.com/2009/10/23/revenge-of-gumblar-zombies/
Denis – www.UnmaskParasites.com



