Clean Malware From Xenforo

My Xenforo-based forum (nfsw due to the spam but sfw homepage) has started acting up: visitors get bounced to random sites without doing anything. I have not added any new add-ons or run updates recently, so I suspect something slipped in through an exploit and injected code somewhere in the file system or database.

I need a security-minded Xenforo specialist to track down every malicious fragment, remove it cleanly, and harden the installation so the issue does not reoccur.

I’ll give you SSH and Xenforo admin access for the audit.