@LPH2005 It’s the iframe inserted in header.php – after the body tag and before the div#header – in your 404.php
“
Interesting – because the code above is the only present. Where would the iframe come from?
header.php (no ad script)
single.php (no ad script)
footer.php (no ad script)
page.php has ad code with “ wrapped around it and removal still shows on a 404.
sidebar.php has code but removed to test and still loads that iframe….
Any other places to look?
It’s sensible for the moment to assume the worst. Firstly change your FTP loggin, then look through the actual files for any JavaScript that shouldn’t be there, There are JavaScript Iframe injection attacks that could account for this , however I would expect the iframe to show on all pages injected through index.php files or the html header so would hope there is some other cause in your case.
