This malware is commonly paired with other injections, specifically those found in bogus .htaccess documents or spammy .html information. look for your file system for any not long ago modified or added https://www.youtube.com/watch?v=v6ObHdplX8Y