• I’m running a Themeforest template on my WP site. Been fine for over 12 months until 3 days ago when multiple popups loading when clicking on page links.

    The first page its loads appears to be srv.revdepo.com. It then load several others stating my mac needs to be cleaned and betting sites such as BET365.

    I’ve ran Wordfence & Anti-Malware and its not fixed it.

    Anyone have any ideas?

    Thanks

Viewing 5 replies - 1 through 5 (of 5 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    please give us a link to your site and check it via https://sitecheck.sucuri.net

    Thread Starter vannquish

    (@vannquish)

    https://bossmotors.uk/

    Popups also load on mobiles.

    Ran a scan via Sucuri yesterday and it only pickup up a Website Firewall issue.

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    I see this on your page

    <script type='text/javascript' src='//eclkmpsa.com/adServe/banners?tid=79479_131506_0&tagid=2'></script><div class="modal fade" id="login_modal" data-backdrop="static" data-keyboard="true" tabindex="-1">

    Do you have some sort of ad plugin installed?

    In any case, it seems you’ve been hacked. The first right click when I load your page directs me to odd sites.

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    Thread Starter vannquish

    (@vannquish)

    Not that I know of.

    I’ve grabbed a full backup of the site files and searched for [eclkmpsa.com]. No sign of it.

    I’ve viewed the source and it only appears to show on the home page?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    I’m sure it’s either obscured or bring brought in by some other “evil” script. You’re hacked; follow the guide.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Hacked? Multiple Popups loading on my WP site’ is closed to new replies.