: Hacked content detected email from Google I received an email from Google listing two links to a site of mine witch resolve on my regular "Page not found" page, the listed hacked links are:

I received an email from Google listing two links to a site of mine witch resolve on my regular "Page not found" page, the listed hacked links are:

example.com/Cialis http://example.com/Cialis-time-to-take-effect

I've received another email about the top link already but could not find anything, so I submitted a reconsideration request and now they came back with two hacked links. How can I fix this?

The website was build on Drupal 7, I had tried to clear the cache & double checked my ftp directory but nothing... what can I do?

EDIT 1

I'm on shared hosting with GoDaddy:
- Im on the latest Drupal 7 core, 7.41 already!
- I see a file bdcanhfj.php in the root of my ftp, no idea what that
is, it contains a whole bunch of php variables that get concatenated
but there's no function call in it at all. I'll remove that file.

EDIT 2

Updated ftp credentials!

EDIT 3
- I know that Drupal 8 is out but I haven't quite gottenm around to look at it yet i.e. I can not update this site just yet.
-As for an ACL, how do I configure this best? The site shall be reachable for everyone. How would you recommend to setup an ACL?