Hi,
My site has been blocked by Google for over 24 hours for malware. Google webmaster tools show javascript being randomly inserted into certain pages. I have downloaded and searched every single php/html file for this code and it is not present in the actual files. I have searched all styles and it is not present in any of the stored templates.
The Javascript has not embedded itself in any page I have refreshed so far, it seems to only insert itself once every several thousand page impressions and with 200,000 threads on my site Google is finding 3 or 4 instances of it every time I ask it to rescan - so I can not tell which template/hook is delivering it and Google does not give me the html of where it has found the insert. When loading the pages that Google see's as infected from Google's point of view (in webmaster tools) those pages are no longer infected, it seems to only randomly insert itself using one of the global includes.
I have reverted to a database backup from the 25th March as a temporary situation - but can anyone advise me on how to search my most recent database or possibly find out where this data has been inserted?
My site has been blocked by Google for over 24 hours for malware. Google webmaster tools show javascript being randomly inserted into certain pages. I have downloaded and searched every single php/html file for this code and it is not present in the actual files. I have searched all styles and it is not present in any of the stored templates.
The Javascript has not embedded itself in any page I have refreshed so far, it seems to only insert itself once every several thousand page impressions and with 200,000 threads on my site Google is finding 3 or 4 instances of it every time I ask it to rescan - so I can not tell which template/hook is delivering it and Google does not give me the html of where it has found the insert. When loading the pages that Google see's as infected from Google's point of view (in webmaster tools) those pages are no longer infected, it seems to only randomly insert itself using one of the global includes.
I have reverted to a database backup from the 25th March as a temporary situation - but can anyone advise me on how to search my most recent database or possibly find out where this data has been inserted?
Comment