Hacked website – Viagra/Cialis Code ONLY showing up on mobile phone

  • I’m a fairly new user to WordPress and I built my brother’s website eclipsecustom.com. We noticed about 3 weeks ago when you visit the site on your phone at the bottom of the Contact Us page is a bunch of links for cheap viagra, cialis, etc…

    I have no idea where to find this code since it ONLY shows up on a phone and not when visited on a PC, I checked the Contact Us page on WordPress and can’t see any code there and not sure where to look in the other files. We have tested it out with 3 different phones iPhone and Samsung Galaxy and they all show the code. I’m also using the Auto Dezmembrari theme. I recently changed all passwords to hosting and Word Press as well.

    Any help with clear and detailed instructions would be greatly appreciated!! www.eclipsecustom.com

    Thanks!
    Steph

Viewing 4 replies - 1 through 4 (of 4 total)

  • Hi there!

    Actually, it does show on a PC… you just don’t see it on the screen.

    Open up your website and view the source code and look for this:

    <div class="fixedheader_c">

    That is where it’s coming from and you either need to poke at your header.php or index.php file to remove it out.

    Check your theme for any suspicious files and check your theme for any suspicious coding and check your widgets.

    Thread Starter sdefazio

    (@sdefazio)

    Hi EMG,

    Thanks for the suggestions! I viewed the source code for both homepage and contact us page and searched for <div class=”fixedheader_c”>
    but it says not found. Any ideas or am I missing something? I also checked both my index and header php files and could not find fixed header.
    Thanks!

    If you looked in your theme’s template files and can’t find that piece of code, then it is likely being injected into your site through some sort of malicious script.

    What happens if you deactivate all of your plugins? Swap to another theme?

    It’s time to check all of your folders related to your website for suspicious files.

    Edit: re: ‘view the source code’, I visited your site, hit Ctrl + U, and viewed the Source Code that popped up in a separate window. It VERY clearly shows me that block of code and the text within that’s advertising.

    When you do the same thing, does it not show up for you?

    Additionally, please please read through this thread and read the Resources listed.

    Some Ideas on What to Do

    Most unfortunately, cleaning out a hacked site usually isn’t an easy job and it requires some thoroughness.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hacked website – Viagra/Cialis Code ONLY showing up on mobile phone’ is closed to new replies.