I experienced the same horrible pop-ups as others described above. Didn’t know how to troubleshoot this myself, so spent money for a SiteLock service to scan and remove the malware from my site. It looks like it came down to deactivating Sweet Captcha. Wish I had discovered that myself. ??
