I believe those fuuckers attacked sites on the entire server the last time. Acording to doorhost forums. all admin did last time was ban the hackers ip address and didn't fix the exploit, so the hacker broke in the same way this time I bet, again the bastard hacker defaced the files named index.php, index.html, etc. etc.