nandayo

Helped. Thanks a lot, Jon!

Found any solution, Jon? Here the iframe tag comes back after 24 hours. Now Google even warns customers:

https://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=https://91.201.28.6/goods/index.php&client=chromium&hl=en-US

… and it didn’t help. After an hour the spam thing was back again in every single file.

PS: Better change your FTP password ASAP after removing all lines I think ??

Jon,

same here. Check out every index.php file in your folders and remove the line. I had to remove the lines from 5 files (/, /plugins/index.php, /wp-content/index.php and /wp-content/themes/*/index.php & /footer.php

I had it since 2 days and it MUST be some WP plugin because I didn’t do anything but upgrading some plugins. Maybe some statistic tracker? I have no idea and I’m too scared to find out ??

Hope that helps!

https://bbpress.org maybe?

Thank you very much, Michael!