Hi iltanomattone, I hate to rehash this problem, but the same thing has happened to me by the same hacker. Could you repost who you used to clean this up. I don’t want to go in circles trying different things. I just want to fix this.
Also, found out that “googleframe.net” originates from St. Petersburg City, St. Petersburg Russia. Server IP is 37.9.53.124. Created on 12-31-2014. Don’t really know if this information is useful to anyone or not.
Thanks!
Elijah