Im seeing a lot of virus talk

[Toby]

Cleaning it up, in my case was a matter of downloading the altered files, removing the inserted code then reuploading the files. If you were good with server side search & replace functions you could do the job without the download/upload.

TGP's have been a common target since template driven sites must have file permissions set so that the script can rewrite the files when updates are done. In most cases the security hole the hacker uses is in an entirely separate script.