Google has been accusing dwelle.org of hosting malware for a while. I finally tracked it down; something had apparently hacked my Dreamhost account and injected a bunch of IFRAME’s referring to malware sites. My perl skills are dead but I found a helpful sh script by googling “remove davtraff iframe” or something — note that it has to be run under sh, not tcsh. In the end I had to search for and remove the following terms:

davtraff
query-google
step-traff
dailynexus

Any others out there? find ./ -type f | while read ; do grep -l davtraff "$REPLY" ; done > davtraff.txt cat davtraff.txt | while read ; do perl -ni.bak -e 'print unless /davtraff/;' "$REPLY" ; done