unknown ad popups on my wp website
-
Hi.
I’m working on a new site, installing plugins and customizing it.
The problem is, since yesterday, many times when I click on menu items or other areas on the site, ad popups appears and I have no idea where they are comming from.
I can see the popup windos address starts with the onclkds.com domain before it redirects to some random address with random ads.
I’ve tried scanning the site with antiwalware plugins like Quttera and Wordfence with no avail.
I’ve tried with different bwosers and computers, popup appears in all of them, so is it no my pc with the problem.
i hope someone can help with this, been working on this site for 15 days, starting over would kill me and I’m not sure if this thing would attack the site again.
-
I found this infection in my WordPress site. It came from a theme which I installed from an unofficial source. (live and learn I guess).
It logs the IP address of authenticated users and won’t show the ads to those uses. Smart.
The malicious files I found in my wp-includes directory:
wp-feed.php (This file contains the IP addresses of authenticated users)
wp-vcd.php
wp-tmp.php
The files I found throughout my theme:
Multiple copies of class.theme-modules.php
A bunch of code at the start of most functions.php files.
- The topic ‘unknown ad popups on my wp website’ is closed to new replies.