10 {{ upvoteCount | shortNum }}
10 {{ upvoteCount | shortNum }}

HELP! Has My WordPress Site Been Hijacked?

by lastreporter
8 replies
Today I installed and configured the s2member membership plug-in to my Word Press Site. All went well. I checked the Subscribe Now page on my Fire Fox Browser and it worked fine.

But when I checked the page on my Chrome browser on my computer in my office there were several text links that created CPA pop-ups as I put moved my cursor over he words. They were not mine.

I checked my code on my WordPress page and it wasn't showing any additional code.

I went downstairs to another computer and looked at the page in Chrome and the CPA links were not there.

I then went back upstairs, removed Chrome and reinstalled it: the popups once again showed up on the Subscribe Now page.

Please, is there any programming guru out there who can give me a clue as to what is happening here?

I am now running a virus check with Kaspersky, but I am at a lost.

If you can help me it would be must appreciated.
#hijacked #site #wordpress
  • Profile picture of the author shmerns
    Have you went into your cpanel file manager to see if all the files there are yours?
    Signature
    This May Just Be The Last Tool You EVER Use For Leads…
    www.LoriPetrosino.com
    {{ DiscussionBoard.errors[5484225].message }}
    • Profile picture of the author lastreporter
      Originally Posted by shmerns View Post

      Have you went into your cpanel file manager to see if all the files there are yours?
      No. But I will check. Thanks.

      But, if my WordPress was hi-jacked, then the links would show up on every Chrome browser on my different computers, but they only show up on the Chrome browser in my office desktop. It's brand new.

      I am baffled.
      Signature
      Charm City Gallery
      {{ DiscussionBoard.errors[5484237].message }}
  • Profile picture of the author sodevious
    Does it happen with any other websites?
    {{ DiscussionBoard.errors[5484238].message }}
    • Profile picture of the author lastreporter
      Originally Posted by sodevious View Post

      Does it happen with any other websites?
      Yes. The text links appeared under different words "access"and "content" -- and only using a Chrome browser on my office desktop computer.
      Signature
      Charm City Gallery
      {{ DiscussionBoard.errors[5484255].message }}
  • Profile picture of the author socialbuckets
    Its either php/sql injection that means your subscriber plugin/code is not healthy remove it and try some alternative.

    Or you have a virus on your computer. Try to see on other computers
    {{ DiscussionBoard.errors[5484310].message }}
    • Profile picture of the author lastreporter
      Originally Posted by socialbuckets View Post

      Its either php/sql injection that means your subscriber plugin/code is not healthy remove it and try some alternative.

      Or you have a virus on your computer. Try to see on other computers
      It seems that I suddenly have a virus on my office computer that is making text links on key words in articles popping up CPA offers. But it only happens when I use the Chrome browser.

      The CPA popups say they are powered by Text Enhance.

      I just did a Kaspersky virus scan and it showing nothing.

      My computer downstairs does not show the links on either FireFox nor Chrome

      Any suggestions on a scan that would isolate this?
      Signature
      Charm City Gallery
      {{ DiscussionBoard.errors[5484409].message }}
    • Profile picture of the author lastreporter
      Originally Posted by socialbuckets View Post

      Its either php/sql injection that means your subscriber plugin/code is not healthy remove it and try some alternative.

      Or you have a virus on your computer. Try to see on other computers
      Thanks for your help. You were correct. I discovered that when I downloaded the Chrome browser on this computer it came with "I want this" ad-ware. I removed it using the tool on the browser and the text links disappeared.

      Thanks all for your quick response. Warriors are the best people in the world.
      Signature
      Charm City Gallery
      {{ DiscussionBoard.errors[5484460].message }}
  • Profile picture of the author wasabi20
    Nice tips here.
    I will keep this in note for further reference.

    Thanks
    {{ DiscussionBoard.errors[5486905].message }}

Trending Topics