So for the last few weeks my blog has been plagued with an Iframe-inf infection.
Avast, wouldnt let me load any part of my site, so at least i know it works.
i ended out finding this post a few days ago, which helped me a treat, but also returns more files that are ok than the ones infected:
here
The shell scripts this guy has created, did help me track the bits i needed to remove which was a link to:
newnetnameshop(dot)cn:8080/index.php
Thanks Fields Marshall, help save my blog.