Most Urgent Response Needed-adsense Injected

[nandla]

Hi All.
I'm having very strange problem.
my site having 2 adsense codes on very top of the page and very bottom of the page, and i'm unable to find who have inserted these ads. my site has not been hacked, no any password change.
I've looked into header.php and footer.php of my theme but i did not find any adsense code there.
I disabled all the plugins but the ads are still there.
can any one suggest a quick solution for this.

[edited by: engine at 8:48 am (utc) on Apr 30, 2011]

[johnmoose]

www.example.com gives: Warning: Cannot modify header information - headers already sent with an ad on top

and:

example.com gives your site with an ad the top and bottom with pub id ending 5578 (the inserted ads)

and 2 more ads with pub id ending 3065, I assume that these are yours.

I would change the password and upload an updated page without the these extra ads and check the all other pages.

Good luck!

[nandla]

I've checked each template page of my wordpress theme but no luck. now realized the same ads on all other sites hosted on this server. like 1crick.com :(

[viggen]

...your host maybe playing games with you`?

[nandla]

The site is hosted on hostgator and thats i dont think is the company which do such stupid things, what do u guess?

[johnmoose]

Have you tried contacting them and see what they have to say about this?

[nandla]

Problem resolved:
Problem resolved by upgrading wordpress to latest version.
But still the cause is unknown :(

[londrum]

maybe it was part of your old wordpress theme? sometimes theme authors include backlinks and ads to pay for "development".

[DaStarBuG]

search for base64 in your database.
Sounds like an sql injection to me.

[jk3210]

If you use a WP plugin to insert your ads, some of those plugins will divert up to 12% of your ads to THEIR Adsense account.

[nandla]

search for base64 in your database.
Sounds like an sql injection to me.

That could be the main reason I think.

Im using such themes for last 3 years and never had the issues like this. and i;m not using any plugin to insert google ads, they are manually placed in theme files.

[londrum]

change the theme back to the default, and see if the ads disappear. if they do, then it must be the 3rd-party theme.

[indyank]

if it is an sql injection, how did upgrading wordpress to the latest version helped? As far as i know, the latest release did not have any security fix.

[DaStarBuG]

but maybe the datastore or the cache which was injected got flushed during the update!?