Hi Alexander01 & Pondus,

Here the malware hack is being described: http://www.blackhatworld.com/blackhat-seo/black-hat-seo-tools/143106-anyone-using-piwik-0-4-5-seems-its-hackable.html link -BlackHatWorld.com posting author Muon Trail
Read there code was added to htaccess and added to my index.php … to enable click fraud

polonus