Hi Gabriel,
I got the same issue, can you please send me which type of code they have added? Is it this one:
[redacted]
I found it on the header.php. I found this one on the footer.php:
<script>
jQuery(document).ready(function(){
jQuery(‘.eModal-1’).find(‘a’).addClass(‘eModal-1’);
});
</script>
Thanks.
[moderator note: please do not post links to malware scripts.]