After many hours of research found the issue is likely to be a serious exploit in linux which manipulates webpages by rewriting part of them and inserting a javascript to carry out some nasty deeds
Support guys at our hosting company migrated us to another newer server, with a different version of the os which will prevent this problem
|