lukey101

Thank you! We will contact him ??

iltanomattone, who did you use to clean it up please?

the problem has returned, and I found injected Russian code in a widgets area as well…

problem returned in all browsers

I found this code injected into a widget:

<span style=”position: absolute; left: -1111px; top: -1111px”>кредит воронежкредитная карта воронежипотека воронежзайм онлайн воронежвклады воронеж</span>

removing this didn’t help either!!?

Fixed in Firefox, problem persists in Chrome…

Thanks for the advice iltanomattone! I found and removed the issue myself. I installed a plugin Anti-Malware, that detected several possible files…

In the root directory of the hosting there were several folders that I’m not sure if they should be there or not, but in each there was an ‘installer.php’ file; I zipped this up (just in case I did need it) and then deleted each file. This fixed it for me, but still unknown if the problem will come back. I created a new user (removed the old one), created new secret keys in the wp-config file, updated WP from 3.x to 4.1 and updated all the plugins, so hopefully that will assist?!

I installed a plugin Anti-Malware, and it found suspicious files in ‘other’ non WP directories on the hosting; they were all called ‘installer.php’

Not knowing what/if they were needed, I zipped them up and then deleted the offending files. Problem resolved (for now at least)

Hopefully everything I did earlier will keep the site secure…

Same problem here as of yesterday?!

https://www.gmgweb.com.au/

I have updated WP from 3.x to 4.1, updated all plugins, deleted the existing user and created a new one (strong password) and the problem persists!

I have searched the DB for ‘googleframe’ and ‘https://wikipedia-org.cn/click.js ‘…nothing?!#

The theme is a custom child of 2014. When I change the theme to 2015, the problem is seemingly gone. So where do I begin searching in the theme files for this issue please?