OK that was the hacker testing the virus. It appears that before I removed the last hacked account it places some iframe code in the style so they could then activate this later on. The code has been cleaned out now so the issue should go away as well.![]()