You might want to wait to hear from your host to see if it is affecting the entire server.
Are your Coppermine and osCommerce up-to-date?
If your host says it is just your site that is affected, please do the following:
ReadMe Before Posting / Frequently Asked Questions wrote:My board has been hacked, what do I do?
Please do the following before
making any modifications to your board (this includes changing passwords, editing files, running the support toolkit, etc.):
- Save a copy of the files (simply create a local copy of the files on the server).
- Save a copy of the database.
- Save the server access and ftp logs for the time of the hack (they may be available in the 'logs' directory on the server, in your host's control panel or only by request directly from your host).
- File a report in the incident tracker. Attach the items from steps 1-3 when you file the report or upload them to a secure location for the incident investigation team to download. Please do not start a new topic on the board, the proper place for incidents reports is the tracker.
If you have further questions, please ask them on your ticket.