Links in copy of website with popups - Issue

[SilverNodashi]

Which words are highlighted?

Could you send a screenshot of the highlighted words?

I checked the URL with some online malware scanners and it didn't return any malware in the websites, so it's either something on your PC's, network firewall / proxy server, or perhaps your ISP's transparent proxy server.

http://sitecheck.sucuri.net/results/www.paraffin.co.za/sawc/

http://siteinspector.comodo.com/public/reports/15946826

[Dave A]

Rudi - I think you checked the wrong page. The homepage doesn't seem to have a problem.

Here's a snip of the page where the word options is hit by the drop down problem:

[SilverNodashi]

Rudi - I think you checked the wrong page. The homepage doesn't seem to have a problem.

Here's a snip of the page where the word options is hit by the drop down problem:

[ATTACH=CONFIG]3724[/ATTACH]

Yes, you're right, I didn't see it.

There's some banner advertising code at the bottom of that page, in the HTML code, which is probably causing this.

Look here:

<script src="http://sg.peron.com/v1.1/js/gen.js?d=24xxxxx">
</script>
<script src="https://cdncache1-a.akamahd.net/loaders/1490/l.js?aoi=1311xxxxx&amp;pid=1xx0&amp;zoneid=25xxxx" >
</script>

P.S. I delibarely changed the values in those URL's so the affiliate can't benefit from click troughs from this side, in case it was added by a cracker / script kiddie.

Those banner ad scripts are designed in such a way that it would return a different URL than the source URL, which makes them hard to find in website code.

[lance71]

Thanks a lot for the response, we are looking into that now, its just strange the developer cant see the pop ups that I and you guys see for some reason so making it a bit difficult but have sent him your last response which will hopefully get to the bottom of this.

Thanks again

[Dave A]

its just strange the developer cant see the pop ups that I and you guys see for some reason

Indeed it is!!

Maybe time for a new developer?

[lance71]

Haha no the developer is great he just hasn't come across this problem yet.

It seems it was that little script exactly and we are busy going through the site checking for the problem pages and removing it. Thank you to everyone for the help, it has been very useful and finally we are back on track to deliver the site.

Lance