TimThumb exploits can be a pain in the ass. Took me nearly to weeks to really get to that bottom of it. And still, the problems only ended when I stopped using the script.