one of the web site (in Drupal 7.43) I am looking after (apparently not that well, although updates have always been applied) has been hacked. There's now extra text in the footer pointing to an Italian escort web site.
The following code is the culprit:
<div class=ctolls><div id='analytics_data'><a href='http://www.cerco-incontri.c-o-m/escort/lombardia/milano/donna/65844-karmen-3202833395' title='escort milano' target='_blank'>incontri escort milano</a> - ... </div></div></div>
(Note that I removed some of the code - that's the 3 dots. And I added dashes to the URL to avoid to point to it).
I don't know what to do to remove it ! :-( Any help would be appreciated.