• I’ve witnessed a behavior I’ve never seen before. When I work in the WP admin section writing a new blog post, I get a pop up ad. I’m not noticing it on any other web pages I visit (though I spend much more time in my WP installation than I spend on other blog pages).

    After this happened a few times, I ran Malware Bytes & I also use Kasperksy Internet security.

    It’s not possible that WP itself is running these ads, is it? Unless my security scan programs aren’t getting the source of this, what could be happening?

Viewing 9 replies - 1 through 9 (of 9 total)
  • Moderator James Huff

    (@macmanx)

    Volunteer Moderator

    No, WordPress itself doesn’t run ads.

    Try deactivating all of your plugins. If the ads remain, it’s likely a browser extension or other malware on your computer. If the ads disappear after deactivating your plugins, reactivate each one individually until you find the cause.

    I get this. I am quite sure I get it via the admin page, and not any other.

    yesterday I turned off my adblocker for my own site, and shortly after noticed these ads (bet365 and hotchatdate.com) full new tab ads. I thought it could be pop under from my live site as I run google ads there. I removed the ad (was in via a text widget) and kept going on – ads appeared again. I asked three people trying visiting the site, none got ads.

    Today I did not have another tab open with the live site and the ads appeared (again only my site is not affected by adblocker) and it looks like to be pop up tin new tabs but not forcing the tab open/to be active as I would have seen them way sooner if that was the case.

    I wish more people would go back to these questions if they find the cause of their problem. Now I do have to go through my own plugins trying to turn them off one by one. I’ll get back in this thread if I find the cause.

    admin page = text editor, writing a new post.

    You should try it on another computer, ideally from an entirely different place.

    Case 1 : the problem is no more : that was your computer being infected, time for cleanup.

    Case 2 : the problem is still here, and then it’s your website that’s infected, which is equally as bad.

    In this case 2, my typical copy-and-paste, in such a situation :

    I’m sorry but you have been hacked. You need to start working your way through these resources:
    http://codex.wordpress.org/FAQ_My_site_was_hacked
    http://wordpress.org/support/topic/268083#post-1065779
    http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
    http://ottopress.com/2009/hacked-wordpress-backdoors/
    Anything less will probably result in the hacker walking straight back into your site again.
    Additional Resources:
    Hardening WordPress
    http://sitecheck.sucuri.net/scanner/
    http://www.unmaskparasites.com/
    http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

    Sure, you could temporarily fix the problem with reinstalling wordpress, but facts are facts, and something evil has managed to find a way in. At the very least you’re going to have to change all your passwords (emails, hosting account, ftp, database, wordpress) :-/

    Case 1: Computer is 3 months old, runs McAfee and Windows Defender
    Case 2: The funny thing it happens in the admin pages. Right now I am waiting to see if the ads appear again.

    There’s no extra users like last time the site was infected (Yes I ended up with an entirely new installation!) and I now know how to safeguard myself from the thumbfile-exploit.

    I am more suspecting one of my plugins going rogue as it actually began after updating a bunch of them now that I think about it. Next time I will update ONE at a time and run it for a while. Either the plugins or the new WordPress that was forced updated on practically on all my websites (3 and one client so 4 in all)

    hmm responded to a post that was deleted. 🙂

    … why did my post disappear ?!? O___o

    (if anyone wonders, I was telling there were two options, case 1 : testing on another PC doesn’t reproduce the problem, then it’s the PC, case 2, testing on another PC shows the same problem and then it’s the website, followed by the typical list of links given to people whose wordpresss has been hacked)

    Well, Twinkling, you can always reinstall wordpress (in case of a hack, better remove than overwrite), its themes and plugins, and then reactivating the plugins one by one, with wp-admin testing between each reactivation, should tell you.
    Sure, that’s time-devouring, but there aren’t many ways out of it, sorry for you :-/

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    Spam queue. It happens.

    I get this. I am quite sure I get it via the admin page, and not any other.

    I seem to be on a roll today…

    Rather than jumping on a 2 month old topic can you start your own?

    https://wordpress.org/support/forum/how-to-and-troubleshooting#postform

    It’s the best way to get support for your problem. You may have similar symptoms but the root cause will most likely not have anything to do with the orignal topic.

    I have a tendency to pick up old threads instead of starting my own so all the info is shown in one place instead of cross referring and/or searching for the same thing if the answer is not in the first thread.

    What OP is experiencing is exactly what I do too, so Im quite sure it’s the same thing causing it.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Pop up ads in WP admin page’ is closed to new replies.