Vor einiger Zeit habe ich mir die Software von xml-sitemaps.com gekauft und auf dem Server installiert. Vor einigen Tagen habe ich dann eine Warnung bekommen, das einige meiner Seiten Malware beinhalten. Nach einigen Versuchen die Maleware zu löschen, habe ich nun in der Software von xml-sitemaps.com Maleware gefunden. Der Code lautet eval (base64_decode(‘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 Wer hat [...]


