Hi,
My site is www.silverlakefun.com.
Why my site still got the warning site from stopbadware.org.
I have cleaned my source code and re-load the new pages. I have verified my site via
the Google web master tool and request new review, but didn’t get anything back.
Please help! This is really bad for our business.
Piyanuch Richard.
Hello :-),
Jaal Scan ID # 68303724-892 output
Malicious code detected on line 55 of www.silverlakefun.com
starts with
<!—ifr ame src="hxx p://q1n.in:8 080/index.p h>
Please look at the copy of the page on the server, if you cannot locate this code, it is probably being injected at runtime, when a user is requesting the page. It might be useful to then wipe out the hosting directory and check for malware, on the server and in the backend database. You can also ask for help from your hosting provider. Please check out other pages too.
If you have any specific issues feel free to ask for help.
Also, I am collecting info from people affected by attacks like this, if it would be possible for you to share your experience, could you kindly shoot me a mail at a.banerje e @ s top the hac ker .com (please remove the spaces).
We also provide vulnerability identification and mitigation services to help websites from being infected in the first place.
Hope this helps,
-A
Dr. Anirban Banerjee,
Jaal LLC, Riverside, CA.
www.stopthehacker.com
Jaal: Protecting the Internet, one website at a time™
You should easily be able to find the code that Anirban has identified. However, your site is not currently listed as suspicious, which leads me to believe that you have cleaned it, passed a review (as of 2009-07-18) and are infected, once again.
http://www.google.com/safebrowsing/diagnostic?site=www.silverlakefun.com
You probably need to scan and clean your local computer(s) used for FTP access to your site and change your passwords. Stolen FTP credentials is currently one of the more common methods of web-sites being hacked.
You may also benefit from using the following article as a guide to reveiwing and cleaning and securing your site.
Hi Dr. Anirban! :-)
Thank you very much for your suggestion. I couldn’t done this without your help.
I have been followed you advise and also follow the tip from “How to remove the ‘This site may harm your computer”.
I called my hosting provider, they scanned my account but they found nothing wrong with the account.
So they told me;
1. to delete all the files on my host,
2. change the password,
So I did and I also scan my computer for any badware.
After I’m sure my pages all clean,
I upload all the pages again.
Hope it would work this time.
Piyanuch.
