WMT says 20,000 occurences of viag.on my site

[digic]

My webmaster tools says that "Google found the keyword viagra on these top pages:"

There are 20,000+ occurences on some URLs, but when I checked it, there no viag** in there. It hurts my rankings and how do I get around with this? Need help very badly.

[tedster]

It sounds like your site has been hacked, and the hack is cloaked so that only googlebot sees the parasite-hosted text and links. In other words, a regular browser won't see it.

To verify this, you can check those pages with the "fetch as googlebot" tool, available within your Webmaster Tools account.

[martinibuster]

Or use FF to view your site with JavaScript turned off. If you can't see it then try it with the Agent Switcher and make FF spoof GoogleBot. But usually turning off JS does the trick.

Does your site use a CMS, like Joomla?

[digic]

Hi, my site is created in Wordpress. I already checked the mentioned URLs with "Fetch as Googlebot" and found nothing.

[serenoo]

probably you have a forum. A viagra spammer posted his link there and then started to link to his post from other forums. Is it possible?

[digic]

Got it with FF Java Turned off and Agent Switcher, there are hundreds of invisible links. Now, what should I do?

[digic]

I checked by theme files and found a script at the bottom of the footer, I removed it. Check again with Agent Switcher, Fetch and FF. The links are gone. Does this mean my website is clean?

[martinibuster]

Joomla and WordPress are popular with hackers. Make sure your WP installation is the latest version. I'm not familiar with the exploit itself so can't advise you on how to clean it. However updating to the latest version will help protect you from having the previous vulnerability exploited.

[digic]

Thanks guys. I am upgrading my Wordpress to its latest version. I also submitted a reconsideration request on WMT.

Million thanks to all.

[bears5122]

Yeah, it's quite common. Happened to me a few years ago. I'd also recommend running some searches on Wordpress security ("hardening wordpress" is a good phrase). There are a lot of small things you can do to really enhance the security of it.

One last thing is to keep an eye on it. Many times if the hole isn't fixed, they'll just keep adding those links. You may want to look at plugins as the cause as well.