A new window with spam pops up whenever you click any link

Try deactivating all plugins. If that resolves the issue, reactivate each one individually until you find the cause.

If that does not resolve the issue, try switching to the Twenty Fifteen theme to rule-out a theme-specific issue (theme functions can interfere like plugins).

Hi James!

Thanks for your help.

I deactivated all plugins and I could still see the pop up.

So I switched to Twenty Fifteen, and the problem was gone ??

What do you think I could do to figure out whats bad with my theme?

Thanks!
Guido

What is the name of the theme, and where did you get it from?

The name of the theme is Spoon, I purchased it at Mojo Themes.

Thanks again James for your help ??

Ok, that’s a commercial (not free) theme.

If you made no customizations to the theme, try replacing it with a freshly downloaded copy (from the vendor you purchased it from).

If you made customizations, or if replacing the theme makes no difference, please go to their official support channel. In order to be good stewards of the WordPress community, and encourage innovation and progress, we feel it’s important to direct people to those official locations.

https://www.bricktheme.com/submit-ticket/

Forum volunteers are also not given access to commercial products, so they would not know why your commercial theme is not working properly. This is one other reason why volunteers forward you to the commercial product’s vendors. The vendors are responsible for supporting their commercial product.

Thanks again James! I really appreciate your time. I’ll do what you say. Thanks!

You’re welcome!

iltanomattone, I just checked your website, it looks like you solved your problem.
I encountered the same problem this morning. What did you end up doing?

Thanks a lot for your time ??
Andre

He probably contacted https://www.bricktheme.com/submit-ticket/ where they support the theme they sell. ??

Same problem here as of yesterday?!

https://www.gmgweb.com.au/

I have updated WP from 3.x to 4.1, updated all plugins, deleted the existing user and created a new one (strong password) and the problem persists!

I have searched the DB for ‘googleframe’ and ‘https://wikipedia-org.cn/click.js ‘…nothing?!#

The theme is a custom child of 2014. When I change the theme to 2015, the problem is seemingly gone. So where do I begin searching in the theme files for this issue please?

Hey guys! It was a critical issue for my business, so I hired digital security advisor that removed the hack in 2 hours.

As I don’t have a technical profile so I don’t know what he did.

If you want I can give you his contact.

Thanks for the advice iltanomattone! I found and removed the issue myself. I installed a plugin Anti-Malware, that detected several possible files…

In the root directory of the hosting there were several folders that I’m not sure if they should be there or not, but in each there was an ‘installer.php’ file; I zipped this up (just in case I did need it) and then deleted each file. This fixed it for me, but still unknown if the problem will come back. I created a new user (removed the old one), created new secret keys in the wp-config file, updated WP from 3.x to 4.1 and updated all the plugins, so hopefully that will assist?!

iltanomattone, who did you use to clean it up please?

the problem has returned, and I found injected Russian code in a widgets area as well…

[removed from public forum]

Hope it helps!

Thank you! We will contact him ??