Google your site may have been hacked. Suspect SQL injection

Permalink
I recently received a webmasters tool warning regarding a site of mine.

Unfortunately, it appears that your site has been hacked.
A hacker may have modified existing pages or added spam content to your site. You may not be able to easily see these problems if the hacker has configured your server to only show the spam content to certain visitors. To protect visitors to your site, Google’s search results may label your site’s pages as hacked. We may also show an older, clean version of your site.
Sample URLs
http://www.site.com/?yxjhc=890266...

However that address /?yxjhc=890266 does not display any unusual links, nothing seems wrong or altered in the source code. Its a duplicate of my home page. I cannot find this page as a version and am slightly at a loss. Anyone seen anything similar before or have a clue what to look into for a resolution.
It it hacked and other sites are reporting it clean of any malicious links and such.

I can of course share the web address if it would help, I was just thinking this maybe something more generic.

 
JohntheFish replied on at Permalink Reply
JohntheFish
Are you sure it was from Google and not a phishing or trojan/virus planting spoof?
slowdive replied on at Permalink Reply
I user webmaster tools extensively so I am certain its real and on my webmaster account as a notification.
Also if you google the site google is displaying a "this site maybe hacked"
Steevb replied on at Permalink Reply
Steevb
Is this actually your site and content?

The linked site is not C5 and is promoting a CMS. I know 'Salesforce' as a CRM.

If this is not your content you need to look at your server set up and file structure.

I've seen this before with a French Paypal hacker, amongst others.
slowdive replied on at Permalink Reply
The site in question is Arasa.info and the link google is concerned about ishttp://www.arasa.info/?yxjhc=890266...
I just cannot see it existing within C5 or on the server itself. As I say AVG and Isithacked are not reporting a problem.
Also the source code at a glance onhttp://www.arasa.info/?yxjhc=890266... looks clean.
Steevb replied on at Permalink Reply
Steevb
Whoops, sorry 'mysite.com' was generic?

Anyway, I can't see any issues.

Just go through the Google suggestions list to fix.
slowdive replied on at Permalink Reply
Thanks Steevb
It was just strange to have a page version popping up that I have no idea where it comes from.
I'll go the webmaster root and see if anything pops up.
slowdive replied on at Permalink Reply
Curious as well what could be causing that page version to exist even?