Need help securing site Willing to Pay

11 replies
Hi

Some time ago Google listed my site as possibly dangerous:

The following has been done so far

(1) My host replaced the site with a back up
Result, Website clean for +/- 10days

(2) I replaced the site with full (old) copies on 4 occasions
Results, Site was clean for +/- 8 daysdays on each occasion

(3) To rule out the possibility of keyloggers I transferred old non infected copies to a new computer, using this computer I changed the website & ftp settings before uploading clean copies

Result Site was clean for about 20 days but google listed the site as dangerous on Sunday

Google lists the site as having 7 script exploits and 5 trojans (I don't know if that's the same exploit 7 different times or 7 different exploits... same goes for the trojan listing)

As can be imagined, since google accounts for 75% of my search engine traffic this has hurt my traffic pretty badly, I'm also slowly moving off the front page of google due to the loss of clicks on my site listing.

Anyone who thinks he can solve the problem please answer this post or send me a PM or both

As stated in the title I'm willing to pay

Thanks

Michael
#pay #securing #site
  • I had an issue similar once, it got resolved when I registered as a webmaster with google and submitted the site for a 'google review' - GOOGLE that lol for more info

    Its good because when the site comes back still infected, they tell you precisely where the issue is...and if your site is clean, they should lift the warning signs
    {{ DiscussionBoard.errors[1374016].message }}
  • Profile picture of the author mmurtha
    Hey Michael,

    I had this problem with Google for one of my sites. I found out it was the scripts I was using that caused the problem. I had no trojans or script exploits, but the detection software that Google uses or used then could not distinguish the difference.

    The solution - I filled out that form of Google's explaining that my site had no viruses etc .. and that they made a mistake. They got back to me within 24 hrs about it, and had my site cleared too.

    I know I posted the link that leads to that form in this forum someplace, but will have to hunt it down.


    If this is not the case, the only other thing I have done when infected is to look thru the files on the server and see if there are any wierd files or code you cannot identify.

    And no, there's no need for payment.
    {{ DiscussionBoard.errors[1374064].message }}
  • Profile picture of the author Michael Tracey
    Hi Murtha

    Thanks, I don't know about the presence of Trojans but there's definitely script exploits (I Frame) on the site

    Michael
    {{ DiscussionBoard.errors[1374106].message }}
    • Profile picture of the author mmurtha
      Originally Posted by Michael Tracey View Post

      Hi Murtha

      Thanks, I don't know about the presence of Trojans but there's definitely script exploits (I Frame) on the site

      Michael
      Then you have some code someone incerted into your files. If your backups have the exploits too, then the only thing you can do is check thru all the files and find the "IFrame" code. If you can find part of that code, do a find and replace thru the rest of the files, and delete.

      It is a long and tedious processes I know, but it is either that or redo the site from scratch.

      Wish Ihad better news for you ...


      Mary
      {{ DiscussionBoard.errors[1374134].message }}
    • Profile picture of the author Michael Mayo
      Hi Michael,
      Good to see you here again.

      I've helped a few warriors solve this type of problem in the past.

      If you like, I will take a look at it for you and try to rectify the problem.

      Of course there would be no charge.

      Michael
      {{ DiscussionBoard.errors[1374143].message }}
      • Profile picture of the author mmurtha
        Originally Posted by Michael Mayo View Post

        Hi Michael,
        Good to see you here again.

        I've helped a few warriors solve this type of problem in the past.

        If you like, I will take a look at it for you and try to rectify the problem.

        Of course there would be no charge.

        Michael
        That is the nicer thing to do isn't it? I'm glad to see you offering to help Michael. I can't at the moment cause I'm deep into code myself and have to finish this by 3:00.



        Michael T,

        Good to see you in print and hope you get fixed up soon!
        {{ DiscussionBoard.errors[1374159].message }}
        • Profile picture of the author Michael Mayo
          Hi Michael,

          Just checking back in to see if you have any one working on the problem yet?

          If so that's fine and I hope you get it solved.

          If not my offer still stands as some students at my site cut school today...lol

          Darn Veterans , Umm...wait, I'm a one too! Maybe I should have cut with them?

          Have a Great Day!
          Michael
          {{ DiscussionBoard.errors[1374369].message }}
  • Profile picture of the author Naveed Peerzade
    Michael, I faced the issue of iframe inject for 3 times.. here is what you must do.

    1.. Without visiting your site, scan your computer for virus.
    2.. without opening your site in IE download it from ftp. open it in notepad.. and look at the source code see if there is any iframe ..
    3.. see the patern of the iframe and search it in google.. most of the time there are many other people face same iframe injections.. and some webmaster release a short script that will search and replace this code from all the files on your server
    4.. You can also get help of your webhost to get the codes removed from all your infected files..

    5.. REMEMBER, to make your computer clean first... In my case it happend because of my programmers PC was infected as I got log of FTP connections showing his ip addresses.

    Let me know if you find any iframe script.. I will look for the search replace script I used that time..
    Signature

    .
    MinisiteExpert.com

    InstantProductEngine.com (Luanching Soon) .. Instantly Create Unique Profit-Pulling Products, In Less than 10 Minutes...Guaranteed!
    .

    {{ DiscussionBoard.errors[1374158].message }}
  • Profile picture of the author Michael Tracey
    Hi Michael,

    Thanks for the offer which is accepted with gratitude.
    Slow response due to my iSP having problems
    I'll send you passwords etc in the next couple of minutes

    Michael
    {{ DiscussionBoard.errors[1374504].message }}
    • Profile picture of the author Michael Mayo
      Hi Michael,

      No Problem my friend. Just giving back as you have done for so many years.

      I'm sure that I'm not the only one that appreciates the time and effort that
      you have put into not only this forum but also all the help you have given to
      people around you for so many years.

      Just about to leave the office to travel home. I Will check my PM's when I arrive.

      God Bless,
      Have a Great Day!
      Michael
      {{ DiscussionBoard.errors[1374528].message }}
  • Profile picture of the author Michael Mayo
    Hi Michael,
    I know it's late where you are. I did not receive your info yet so I assume that you lost
    connection seeing you were having problems with your ISP.

    No Problem. When you get the opportunity send me a PM or email with the details and
    I''ll make time to check it out.

    Have a Great Day!
    Michael
    {{ DiscussionBoard.errors[1375180].message }}

Trending Topics