Separate names with a comma.
Okay I found the site with the actual file - it is just some script kiddie exploit. Easy to fix.
intermittent 404 and index replaced with tbh.jp site & virus.
I've seen a few of these happening on (apparently) CPanel10 hosts.
All sites get...
this is happening to a lot of CPanel10 hosts.
it seems like an exploit of cpanel10