Your site could have been reinfected after you cleaned it up, if the security vulnerability that allowed it to get infected originally hasn’t been fixed. This may be something you need your web hosting provider to help with.
Does Google’s Webmaster Tools console list any example URLs of places where problems have been found?
Yesterday it listed http://aloftgroup.com and www.aloftgroup.com/main.html as possibly containing maleware. The main.html file had a piece of malicious javascript in it. I deleted the page and replaced it with a clean version. Now it says:
"Sample pages that may be distributing malware: http://aloftgroup.com/"
There is nothing there, I deleted the html pages with clean ones and have checked the source code and everything is as it should be so I can’t figure out what google is finding.
The only other thing I can think of is I had a couple of secondary domains on that server, in my old default.cfm file I had a redirect script that checks what domain users are coming from and then redirects them to the appropriate directory.
For example anyone going to www.aloftpr.com would be sent to http://www.aloftgroup.com/pressroom/ the domain for aloftpr.com was also marked bad by google so I’m thinking maybe the fact that my main page was linked to www.aloftpr.com is causing the issue. I have removed the script and changed my default page from .cfm to .html.
I’m now waiting for google to re-review the site. I’m at my wits end because I can’t find anything else wrong and my hosting company can’t either. I have no databases running and no forms.
Thanks for your help
so maybe someone hacked your .htaccess file?
I was very recently hit badly, also with a javascript virus (Yahoo Counter starts).
After 36 hours of working on it together with my provider we solved the issues and I doubt it will ever happen again.
One of the most important things I implemented: delete ALL user-Id’s-password combinations from your computer(s) and keep them ONLY on a hardcopy (i.e. paper). Second very important thing is only use SFTP.
If you make sure that your compu is clean and you use paper version of keeping sensitive data and you use SFTP only, there will be no worries for the time being!
Good luck!
