Title: Code injection attack help – is iframe to google.com OK?
Last modified: August 22, 2016

---

# Code injection attack help – is iframe to google.com OK?

 *  [quetzalpie](https://wordpress.org/support/users/quetzalpie/)
 * (@quetzalpie)
 * [11 years, 7 months ago](https://wordpress.org/support/topic/code-injection-attack-help-is-iframe-to-googlecom-ok/)
 * So I host multiple WordPress sites, and recently got a notification that Google
   had blocked two of them due to a code injection (it was an iframe pointing to
   malware). I totally removed and reinstalled WordPress with a fresh database, 
   and ran the URL through a malware scanner online.
 * I re-scanned and now it does NOT come up with the original malware site in the
   iframe, but it DOES come up with an iframe with a source of [http://google.com](http://google.com)
   and claims that it’s malware. Is that malware? There’s no weird fishy URLs in
   the iframe at all.
 * Is the site clean, or is an iframe to google.com still an indication of infection?
   I’m not familiar if that could be part of my theme, and I can’t seem to come 
   up with anything in Google. Thank you!

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [ftschumann](https://wordpress.org/support/users/ftschumann/)
 * (@ftschumann)
 * [11 years, 7 months ago](https://wordpress.org/support/topic/code-injection-attack-help-is-iframe-to-googlecom-ok/#post-5618500)
 * You could try doing a scan with the plugin called Wordfence. Sometimes it can
   come back with a few false readings, but it’s usually a good indication.
 *  Thread Starter [quetzalpie](https://wordpress.org/support/users/quetzalpie/)
 * (@quetzalpie)
 * [11 years, 7 months ago](https://wordpress.org/support/topic/code-injection-attack-help-is-iframe-to-googlecom-ok/#post-5618544)
 * Good idea, thanks. I was running iThemes Security and its “malware scanner” just
   tells me whether or not the site has been blacklisted, which is not helpful. 
   I didn’t realize Wordfence was better. 🙂
 *  [ftschumann](https://wordpress.org/support/users/ftschumann/)
 * (@ftschumann)
 * [11 years, 7 months ago](https://wordpress.org/support/topic/code-injection-attack-help-is-iframe-to-googlecom-ok/#post-5618553)
 * Wordfence doesn’t tell you if you’re blacklisted, it simply scans all files to
   see if anything has been changed and if it suspects any malware. 🙂

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Code injection attack help – is iframe to google.com OK?’ is closed to
new replies.

## Tags

 * [iframe](https://wordpress.org/support/topic-tag/iframe/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 2 participants
 * Last reply from: [ftschumann](https://wordpress.org/support/users/ftschumann/)
 * Last activity: [11 years, 7 months ago](https://wordpress.org/support/topic/code-injection-attack-help-is-iframe-to-googlecom-ok/#post-5618553)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics