Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 26 Sep 2013, 19:11
Divvy Divvy is offline
 
Join Date: Nov 2008
Website Contains Malware!?

Hi guys,

Maybe someone can help me with this...

If we enter in the website

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Appears the following message:
The Website Ahead Contains Malware!
Google Chrome has blocked access to bukkakeforum.net for now.

Even if you have visited this website safely in the past, visiting it now is very likely to infect your computer with malware.

Malware is malicious software that causes things like identity theft, financial loss, and permanent file deletion.
Screenshot:


If we click "Details about problems on this website" we going to this explanation:
Google Safe Browsing diagnostic page for bukkakeforum.net

Screenshot:


I checked website index code source but could find anything suspicious, can someone please take a look?
Index (activity): Paste2.org - Viewing Paste bMAd5CZ5
Forum: Paste2.org - Viewing Paste Ps2VEcGV

Any ideas? Please advice!

Thanks!

Best regards,
Tim
Reply With Quote
  #2  
Old 26 Sep 2013, 19:39
ForceHSS's Avatar
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
What version is ur tapatalk

--------------- Added 26 Sep 2013 at 19:54 ---------------

Got this after running some tests
The web site contains a remote javascript or iframe that is currently blacklisted. That can be used to infect visitors of your own web site and generate cross-site warnings. If you don't have access to the remote site, remove the link (or iframe or javascript) from your site pointing to it.

It also looks like google has blacklisted your site

--------------- Added 26 Sep 2013 at 20:21 ---------------

Check for
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

in your header

warning no one click this link

Edit: Staff edit, replaced link by using php bb code that way no one can accidentally click on it regardless .

Last edited by TheLastSuperman; 26 Sep 2013 at 21:51.
Reply With Quote
  #3  
Old 27 Sep 2013, 11:12
Divvy Divvy is offline
 
Join Date: Nov 2008
Thank you so much buddy!

I already removed the malware code thanks to you through phpmyadmin, was in the template table.

Now I think that I need to Fill a review request through google webmasters right?
Or is enough to wait for google robots to check my website again?
This for google remove the warning page and the warning from google results.

Best regards
Reply With Quote
  #4  
Old 27 Sep 2013, 11:27
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Aug 2009
Real name: Chris
IIRC, you do need to fill a review request through google webmasters.
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​ OzzModz down. Site has had a data breach, checking how the intrusion happened. Change your PW if you use the same one on my site and others.
Reply With Quote
  #5  
Old 27 Sep 2013, 21:55
Divvy Divvy is offline
 
Join Date: Nov 2008
I filled a review and they said that the website is still infected. :-(
Anymore ideas guys?

I really can't find it...
Reply With Quote
  #6  
Old 28 Sep 2013, 00:18
inphoenix inphoenix is offline
 
Join Date: Sep 2011
I am having the same issue with my site. www.tabletsupportforum.com. Chrome totally blocks it but IE still works with a warning. Any help would be appreciated.

EDIT : The FTP user Id won't work even after I've reset the password !!

This is what I see.

What happened when Google visited this site?
Of the 47 pages we tested on the site over the past 90 days, 18 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2013-09-26, and the last time suspicious content was found on this site was on 2013-09-26.
Malicious software is hosted on 2 domain(s), including embecafac1973.tk/, 1380214218.hopto.org/.

4 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including googledrive.com/, denrenefku1970.tk/, embecafac1973.tk/.

This site was hosted on 1 network(s) including AS26496 (26496-GO-DADDY-COM-LLC).

--------------- Added 28 Sep 2013 at 18:53 ---------------

I was able to get support from mods here and also from vBulletin. Greatly appreciate their help.

Resubmitted review request to Google. Hopefully I will be unblocked today.

Last edited by inphoenix; 28 Sep 2013 at 01:27.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 08:38.

Layout Options | Width: Wide Color: