This alert came up after I had run anti-virus and SpyBot:
File name: okelkas.co.cc/okellas5/ hcp.php\{gzip}
I insert space before hcp
Malware name: JS:Downloader-AEG
Just an FYI for the admins, at 12:34am (Eastern) the morning of 9/18, Symantec Endpoint Protection detected a malicious toolkit for http://www.ncwoodworker.net
Log Entry: [SID: 23831] HTTP Malicious Toolkit Variant Activity 16 detected.
Traffic has been blocked from this application...