Hackers inserting ajax-2.php into /public_html directory

[loua_oz]

Since hosting cPanel password has been changed, no surprises.

On the VB side, it is all vanilla, no plugins or mods.

VB diagnostics does not detect any suspicious files for 2 days now.

I tend to beleive, the hosting company had a several or many similar attacks on many sites they host and detected that. They were quiet when more serious attacks happened through VB entry.

Thanks to all those who replied, the value here may be to check the hosting side before blaming the VB software.

--------------- Added [DATE]1403351342[/DATE] at [TIME]1403351342[/TIME] ---------------

The hack was, i think, to send spam mail to all members. Although they (the hackers) could perhaps do more, they did not. That is perhaps what the hosting company detected - spam mailing across many sites.