I first got this on Oct 20 though I’m just noticing it today after finding a long suspicious code …((!isset($eva1fYlbakBcVSir) in my header, footer, and index file. Throughout the week users were reporting that there antivirus blocked my site because of a trojan.
FYI – I’m completely up to date with wordpress and am using 3.2.1.
I’ve deleted all of the malicious code and am in the process of securing things better.