No, it happens whether I’m logged in or not. On my cell phone, trying to access the website I’m forwarded to a cpalead.com survey page to “unlock” access to the site.
So now I know it’s hacked 🙁
The problem is I can’t find any code in any page that looks like it’s causing the forwarding. Again, I’ve looked through every single page in my themes root looking for the code that’s causing the grey overlay and now have gone back looking for anything with cpalead.com with no luck.
It’s not really my site, I’m just helping friends who don’t know anything about websites.
I’ll work my way through all that stuff as I have the time but right now (and in for the next 24 hours, til I have a moment to go through all the resources you listed) I need to find where that code is at so I can get the website functioning.
About 3/4 of the time using Safari or Chrome, you can’t see the problem but using Firefox and mobile devices it’s really bad and you can easily see the offending code using Firebug.
I know, I’ve been through it once before but I’m too short on time over the next day or two to do a full-on proper cleaning which is why I’m just trying to find the code so I can remove it as a band-aid til I have a chance to do it properly the moment I get a chance.
I Think some one is screwing with me….
So I’m looking at the code in firebug and when I refreshed the page over in my safari browser suddenly the website worked fine and I couldn’t see the malicious code in the inspector anymore.
I checked this with Chrome. (code seems to have disappeared)
And in Firefox with firebug (same thing, malicious code is suddenly gone.)
I rescanned the site with Sucuri and all those red warning boxes turned green and it says the site is clean…. suddenly, magically.
Ever heard of something like that happening before? Maybe the host caught it and took care of it. Is that a thing that happens?
Good grief. I’m glad my husband was looking over my shoulder when that happened, or I’d think I’m going completely mad.
I’ll switch to a new more updated theme later this week for them. The one being used now is really old and I’m sure full of holes and backdoors.
Viewing 10 replies - 1 through 10 (of 10 total)
The topic ‘Can't Remove Mysterious Overlay On Site and Dashboard’ is closed to new replies.