I have been fighting this for months and I just can't seem to get it cleaned out.  After a few days my system files show as modified and google will list the site as possibly hacked.  Looks like its injecting some code into search results pimping cialis pills.  Honestly at this point I think I need a professional to take a look but not sure where to turn.  Not looking for free help just someone with experience.

Are you running the latest version, 4.3.6 ?

If so, please file a ticket to support and mention this topic. 

1. You can contact @newbie LAC who is the security expert for a review.

2. Send in a ticket to IPS Support.  

3. Make sure you have a database backup just in case.