How to Fix Reported Attack Site
The first step to keeping your website badware-free is to check for any badware or badware behaviors that may already be on your site.
The three most common forms of malware on websites are:
Malicious scripts
These scripts will often be injected by an attacker into the content of
your web pages, or sometimes into other files on your server, such as
images and PDFs. Sometimes,
instead of injecting the entire script into
your web pages, the attacker will only inject a pointer to a .js or
other file that the attacker saves in a directory on your web server.
Attackers will sometimes modify an existing .htaccess file on your web
server or upload new .htaccess files to your web server containing
instructions to redirect users to other websites.
Hidden iframes
An iframe is a section of a web page that loads content from another
page or site. Attackers will often inject malicious iframes into a web
page or other file on your server.
How to Prevent