Hijack Issues - Advice Needed

[deano6410]

Hi all,

I recently checked my site's code in a google robot viewer, and was shocked to see that at the bottom of the page there is a ton of text with pills and viagra based nonsense.

I can't find it in my page source, but it does show up when I use the google viewer tool (type "google dragon predictor" into google) for the tool.

My site is <snip>

If someone could take a quick look and let me know if they have any idea how I can remove it?

My hosts changed the FTP pass etc... I tried changing theme, that made no difference, I also disabled the plugins, that made no difference.

Thanks guys.

[edited by: physics at 6:42 pm (utc) on July 9, 2008]
[edit reason] Removed specifics [webmasterworld.com...] [/edit]

[physics]

It sounds like the hack in your code base is cloaking the spam. What platform are you using (Wordpress?). One thing to try would be upgrading to the newest version. Another would be searching your code base for Googlebot (to find the cloaking code).

[deano6410]

Thanks for the reply.

Yes, it is Wordpress.

I have upgraded, but the issues started pre-upgrade, so it seems they managed to stay in, despite the upgrade.

I will look into your second option.

Dean Hunt

[ispy]

Have you given anyone FTP access to any files? Any shopping comparison sites accessing a file on your server you have forgotten about?