http://www.projectalex.org
When this site is accessed by mobile device, the user is redirected to either the app store, StubHub or some other place. Accessing the site from desktop/laptop is fine.
I ran it through Sucuri SiteCheck and sure enough it is infected.
The person I built this site for will be checking with her host provider (GoDaddy). I installed the Anti-Malware and Brute Force Security plugin, but seems I'd need to pay $14.99 at least to have it scan deeper.
I'm not totally confident to go into the php and try to fix it. Though the site is backed up with BackUp Buddy, I don't know how long ago this malware was installed, and it seems I can only download up to May 20 through the plugin's dashboard. Does BackUp Buddy store additional backups that I can access by going into the site via a File Manager?
Looking for steps and advice. Thanks!