Here is the info

http://www.zone-h.org/news/read/id=206009

BUT it says it is an asp, my server is unix, i thought asp files did not run on unix??

My first infected file was on an older backup ubbthread folder, that was not active. I was not even aware that it could find such a thing. I first thought something was wrong when i ftped into my site and did a sort by day, then saw my old back upfolder was the most current......

live and learn on that one