Hey whooami,
Thanks for the comment. It’s not an IE problem. Definitely on our host hard drive even though it is linux.
I’m downloading the entire sites with IPswitch pro that also happens to clean the files and then am going to upload them in a clean form – hopefully that will cure the current problem.
Still would really like to know how the virus got access. Also having recurring trouble with another site that is inserting thousands of links on header.php to foul up google ads.
We’ve used WP for almost 2 years without incident – guess our luck just ran out.
Anyone who can help to clarify this would be a great help.
Thanks to all.