it seems all my wordpress sites on my account currently forward to some malware download thing. So I'm now disabling all of them and parallel to this looking for the source.
they forward to www4.realprotectin33.co.cc which shows some malware ads and then wants the user to download an .exe ...
I could not find anything on google on this site. So quickly i can not find any changes in the php files in the themes.
Anyone else has this currently?