Hi
My site running 2.5 has been infected by adware popups.
I have been working with my hosting provider and we found that public.js is calling a script from a remote site. We have removed the modified parts of the script but I still have the popup every time a link on the site is clicked. It doesn't look like any other files were modified recently but I have no idea where to start looking.
I do have a backup but it is quite old so any advice where to look will be greatly appreciated.