Sunday, March 3, 2013

Possible Malware Website. (Advisory provided by Google)


Google scan shows "Possible Malware Website" banner if a site has hyperlinks or redirections to one or more malicious sites especially malware hosted websites. These links or redirections may be in the form of script in a file(possibly php or javascript) or maybe a htaccess rule for redirection.

1)For the fixation please go through the "Safe Browsing diagnostic" link for the domain provided in
the google malware banner and note down the particular malware domain links which are causing this issue.
You can use the below scanning tools which shows if any other authorities have blacklisted.

# http://www.siteadvisor.com
# http://sitecheck.sucuri.net
# http://siteinspector.comodo.com/

2) Find the entries of the particular malware domains(or codes) that we got from the above method in
the home directory of the site. (I usually try # grep -irl malware-domain /home/user/* )

3) Remove the entries(maybe a redirection rule or a javascript) of the malware domains from the file,
Make sure to take the backup of the existing file and moving to /home/corrupted_files

4) After removing the malware entries, Request the google-webmasters(or other authorities) for
verification of this site so that it won't be blocklisted in the scan later.
(Please refer 3.98 Webmastertool for reviewing infected pages for requisition to webmasters) :)

No comments:

Post a Comment