|
If the site is wordpress, download the php theme files and search them for #c3284d# This is one of the most commonly injected code (I think), three lines of code that starts with #c3284d#, just delete them, reupload, check your htaccess too, and then request a review
|