My Joomla 3 site was recently hacked. Browsing to it with a common web browser works fine, but when you switch the user agent to a web crawler, it displays a spam page. How do I track down where the code is that does this?
I replaced index.php in the root with a test page and the test page appears. When I replace index.php in the root of a template, the spam page appears when using a web crawler user agent.
Any help would be greatly appreciated.