JS code is executed on client side (user browser)
In this message hosting provider said that SPAM is sent from your server.
Si in this case there are 2 ways:
1. Someone knows email password of your email and send messages via SMTP remote connection - you can ask hosting company to check which IPs accessed your server.
2. Someone hacked access to server and knows everything - it is better to reinstall everything from scratch.
3. Maybe someone elese will add more. I am not the best sysadmin (only 4 years expirience)
|