Link to home
Start Free TrialLog in
Avatar of geeta_m9
geeta_m9

asked on

Inline Advertisments Appearing in Wordpress Blogs

I noticed that for some of the blogs posted on my website, there are hyperlinks to ads appearing within the blog (microsoft, windows, etc.): http://www.saiprograms.com/news/2012/03.  When I click on the blog, it disappears. However, it appears in the overall thread and I would like to get rid of it. I would appreciate any advice on how I could do so.

Thanks.
Avatar of Gary
Gary
Flag of Ireland image

What posts in particular?

Are you sure you don't have any browser addons/malware injecting the ads
Avatar of geeta_m9
geeta_m9

ASKER

Well, if you go to the link that I posted and scroll down the page, you will notice that  the third blog down the page has the following hyperlink: "buy microsoft office 2013 registration key" and the blog below it has the hyperlink: "windows 7 home premium product key windows 7 pro to buy"
ASKER CERTIFIED SOLUTION
Avatar of Gary
Gary
Flag of Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you for this information.
I don't see anything when I visit the site so you might have a browser add-on that is inserting the ads.

I also ran a Sucuri scan on the site to see if any malicious/annoying javascript is installed:

http://sitecheck.sucuri.net/results/www.saiprograms.com/

Nothing malicious is there, but your server and WordPress are out of date and either or both may be hacked.  Or it may be the browser.  You need to start doing deep scans and notify your ISP to get them to help.

Thanks, Gary, for referencing my article.
Jason, on the linked page look just under the (red) blog titles from the third one down - I didn't see it at first
Ah, didn't see that either.

Yeah, you're definitely hacked.  Unless you know a lot about this, I would definitely pay for Sucuri to come in and fix things.  They are either in your database directly and adding something to the excerpt (bad) or are calling functions that modify the Loop and excerpt (also bad).  In either scenario, assume the worst.

You should also notify your ISP right away to make sure they are aware of the hack and have their stuff together.  While old themes/plugins/WordPress installs are one vector for attack, poorly configured/maintained servers that allow an attacker access via the command line are much more common.
Thank you, Jason.