Really annoyed with this hack! Four sites I’m hosting in the same server were affected.
I replaced wp-includes/functions.php with the stock file and deleted the nonsense from the first line of wp-config.php <?Blah$Blah*Blah…. ?> down to the real WordPress <? tag.
Seems to have done the trick.
