In reply to Sergio Felix.

Clean it with Sucuri Malware scanner and then update your TimThumb scripts with this plugin http://wordpress.org/plugins/timthumb-vulnerability-scanner/. That did it for me on all my sites.