I'm new here and I hope that is correct forum for my problem.

When I open my sites (two, PHP sites) on all pages I see this:

Look down-left corner - Waithing for obscurevax.ru

I don't know what is that? Look like virus or something like virus. I can't find nothing suspicion in my pages code. Why this Waithing for obscurevax.ru???] I have only Google ads.

On some computer I find this warning massage:
Warning: Visiting this site may harm your computer!
The website at www.my site url contains elements from the site baymediagroup.com, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
For detailed information about the problems with these elements, visit the Google Safe Browsing diagnostic page for baymediagroup.com.
Learn more about how to protect yourself from harmful software online.

Seems its badware that affected your site. Some hack code would sneak through your Control panel and start adding malicious code inside your php, JavaScript files.

You may try this,

1. Backup all your code in your local machine.

2. Look for unwanted code in php, JavaScript , css ,template files(if you use template engine like smarty etc..) and remove it.

3. Login to your control panel and delete the entire project code already there.

4. Change the password of the Cpanel, which is not very easy to guess. if possible use numbers and special symbols for this.


5. Now, upload the cleaned files which is in local machine to the server.

Don'ts:

1. Make sure the local machine where you uploading to the server is virus free.

2. Your Cpanel password should be very strong so that it should be guessed easily.

If your in a share hosting, inform them about this issue.

For more about badware

http://stopbadware.org/

http://stopbadware.org/home/faq

http://googlewebmastercentral.blogsp...tions-for.html

Yes I find code of this obscurevax.ru in many javascript files and index.php in 9 of my 11 sites .

I think that is because I used cuteFTP downloaded from torrent few days before this problem.

Ok, thx

I've encounded a problem just like this. In my case, my PC had some viruses. And every time i've uploaded something some story. What was curios is that it attacks only html files and js. not php (except index) or css was affected.

Yeah. I had a similar issue. I couldn't nail it down because it was affecting my website across different hosts. The I remembered I gave my old laptop to my son and he was installing all kinds of programs. He most of gotten something pretty nasty that was able to exploit my ftp program I had stored user names and passwords on and upload these types of scripts.

So here's what I did...
I ran Malwarebytes which found the bad programs on the laptop and removed them. I then deleted my ftp program and made sure I had windows firewall and Microsoft Security Essentials installed, updated and running. I also did this one all my computers that touch the internet. Lastly I went in and changed all my ftp password and deleted any ftp accounts that had access to the root directory.

If you don't your site will get banned on google and there's nothing that sucks more than a call from a client who asks why their site is banned.