This site: Fashioncow was hacked, I think by installing a bad plugin. The site loads just fine, but if you click anywhere on the window it pops up a window that loads howitworkz.com/galleries.html.
The plugin was wp-featured-post-with-thumbnail. It has since been deleted.
Somehow there is a javascript which is the source of the problem. It is getting to the page through wp_footer I think. Of course that makes me suspect plugins. The plugin mentioned above had links to donate links (!) howitworkz.com, so that was the obvious culprit. Unfortunately the hack is still in effect after deleting wp-featured-post-with-thumbnail.
I just don't know how to find the code that calls wp_footer, and there is no reason that it has to be a plugin. Anyone know how to fix this? Google searches for howitworkz and hacked, etc, turn up nothing.
