Virus in code and png file

[Just_ha]

Hey guys, I did a freelance website for a client about 3 months ago. I completed the job and he paid me for it, in the mean time i was looking to hire a SEO expert to work on the backend. about a month down the road the site got hacked, and some files were dumped into the ftp which cause users to be redirected to some Russian site. I got the programmers to delete everything out of the FTP and re-upload the work files, it seems to be working fine now (not redirecting people), but Google still remains to flag the site, saying there is something wrong with a line of code and 1 png image file, I'm not sure what to do now and the programmers don't either, client is threatening to bill me for time that the site is down. Any help or suggestions please?

thanks.

this is the website
www.benchmarkgroup.ca

this is the message the client got from google after we deleted everything out of the ftp and reupload the work files and resubmit a request for the warning page to be removed from the site.

Google still shows these 2 as Malware errors:

<iframe src="http://www.google.com/maps/ms?msa=0&amp;msid=20
1075425174460035464.0004b8735ecd308078fcb&amp;ie=UTF8&amp;t=
m&amp;ll=43.656819,-79.39476&amp;spn=0.043468,0.076389&amp;z
=13&amp;output=embed" frameborder="0" marginwidth="0" margin
height="0" scrolling="no" width="445" height="350">


URL: http://benchmarkgroup.ca//wp-content/themes/benchmark/images/BM_googlemap.png

Last checked: June 25, 2012

General problem

When Google last tested this page, your server returned content that directed the browser to a site that serves malware. Unfortunately, Google could not isolate the malicious code within this page.

 

[chrishirst]

Check the .htaccess rules for search engine referral redirects and 404 response redirects.


http://www.marksanborn.net/php/php-include-injection-and-google-referral-hijack/

 

[MarkR]

Did you patch the attack vector?

If not there is nothing to stop the attacker hitting the site over and over. You should look to get the code reviewed and the site checked over by someone with experience in the field.