Hi,
I have been through the web content on this domain name and attempted to clean out all the iframes and java codes that have caused this site to be blocked. However this site has not been picked up by google since the 17th june.
Is there anything I can do to have google index the site again? Or is it just a case of sitting and waiting?
Your Google Safe Browsing Diagnostic page says your site is infected by gumblar and martuz.
These steal your FTP password from your PC and then use it to hack your site. In other words, the reason the site is hacked is because your PC is infected, and cleaning up the site won’t do any good until you also clean your local PC.
Everyone with FTP access to your site needs to scan their PCs with antivirus/antispyware programs.
Hi,
Thanks for your reply.
This will be difficult – its not my website, i work for the hosting company who host this site. Dare i say a shed load of people in this company have FTP’d into this site aswell as our customer.
Having a lot of fun with these “hacked” websites. I have been tasked to resolve issues like this and get the site live, I have little experience with HTML and PHP etc, so locating Java and iframes is not as straightforward for me, Thus me finding this website for a bit of help :)
Is there any program you would reccomend for this scan? I have AVG already and it is not showing any issues.
What I’d suggest is designate two people to have FTP access, such as the customer and you. Both should do thorough scans. Then change the FTP password and for now don’t give it to anyone until they’ve done scans, too.
Everyone else who’s had FTP access should eventually do scans because a gumblar-infected PC will infect every website it logs into.
This page shows what malicious iframes and JavaScript look like, and discusses other issues you’re likely to encounter:
http://25yearsofprogramming.com/blog/20071223.htm
This page has, among other information that you might find useful, a list of links to online virus scanners:
http://25yearsofprogramming.com/blog/20070705.htm
With the evidence of infection so high, I’d recommend scanning with at least two different ones.