hacked i think

That certainly looks like a hack, and I’m going to censor it just to be on the safe side.

Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

Just fyi… I did a quick search on several of the strings that were posted prior to the code removal. They seem unique. I got no hits at all on 4 different segments of the posted code. Not that it helps, but I thought it interesting.

i didn’t find anything on it either.

Unique or not, obfuscated javascript added to the index.php file (a file that shouldn’t be altered, unless it’s a theme template of course) is enough to make me suspect a hack.

Amen on that.

it is happening on every wordpress blog i have on 2 servers. 1 is shared, 1 is a dedicated. 8 blogs total affected

Definitely remove the code and follow the guides linked to above for further recommendations.

all fixed. took some time but the guys at iMountain.com got everything all cleaned up and working again ??