A while ago, our server got hit with this Slammer worm, and all of our index.[extension] pages were hijacked. While everything else has since been resolved/patched/fixed, it seems as though when new instances of scripts are installed via fantastico, there are still hjacked copies of of the script index files which are copied onto clients' webspaces. I was wondering where the files for the fantastico scripts were located so that I could try and resolve this issue by copying clean index files into the correct area, although any other assistance would be greatly appreciated.
