Thread:Project:Support desk/Googlebot spam (cloaking?)/reply (2)

No good idea. You should first find out, how the attacker infected your wiki. Just replacing the sourcecode is only curing the symptoms, but not the cause. That way you will likely get infected again: Maybe in two months, maybe in two weeks or maybe just tommorrow.

You should search all your files in your installation for one of these spam words like "cialis". This should give you a clue of which files in fact are the ones infected.

Maybe the change dates of the files also help: Everything, which was changed when the infected files were changed, is likely to be malicious as well.

HTH