virus / torjan?

#1 will insert a piece of code in the end of the index page and also it will insert a php file in the root folder with three letter file name.

iframe will look like

If this file exist for a long time, your site will get blacklisted.

Any idea on how it get effected ?