There has been a trojan on the Stephen Personal Blog for a month or more. It only affects Windows computers, which is why I never noticed. Firefox and IE are vulnerable. The blog has been upgraded to the latest WP. However, the malicious code has been placed, it seems, in a php file and I have not yet found that. For now, a broken theme comes up the best, because it crashes before rendering the malicious code.