Okay I will be the devils advocate.
More details are needed.
Not all of the users here have stated what version they currently are using nor if they have installed the latest patch.
I noticed at least one is not on a current patch.
Also even if you are using the current patch.
What did you do to clean up your existing files. Meaning did the intrusion happen after installation of the patch or before? Just because you just noticed it does not mean it was not there before.
I personally have not been hacked. But it seems to me. That more info is needed to determine what actually is going on.
For example I don't see evidence here that it happened. So why?
