annoying ad of www.watchliveonline.org on my site

Still not enough *sigh*

@esmi Have you tried changing your WordPress password?

Sorry? None of my sites have been hacked.

In my case, just for testing, in the theme folder I was changed the folder’s name of “javascript” to “javascript2” and the problem is solved.

esmi, you have some theme that call jquery-1.6.3.min.js to test?

Why would any theme be calling jQuery 1.6 when WordPress ships with jQuery 1.7? It’s not only pointless. It can be downright dangerous. See https://quirm.net/2012/05/31/perils-of-using-older-versions-of-jquery/

yes my “old” theme had the call of jquery-1.6.3.min.js
so it was for me no plugin … it was already included in the function.php of the theme

try change the name of folder “javascript” inside of theme folder. If worked, create a new folder called “javascript” and move one-by-one of the .js files, until locate the malicious script. In my case, it worked.

yes my “old” theme had the call of jquery-1.6.3.min.js

If your old theme is loading from jqueryc .com or jquerys .com (I put the space in intentionally) then I am reasonably sure that either you are hacked or you’ve gotten your theme from E-V-I-L people who intend you harm.

yes i already could fix the problem just wanted to say that it was already with the theme ??

The original report of this issue concerned a site using a WPORG theme. The downloaded theme itself was fine. It was the site that was hacked. This is not a theme-specific hack.