The Website Ahead Contains Malware! - How to deal with this ?
-
Hello,
I got in webmaster tools :
The Website Ahead Contains Malware!
When i go to the website i cant see the site and im getting a page that saying the same thing, a Malware! problem.
I search in Google information's about this and its look like someone hack to our website and install something in the code.Is any one have experience with this ?
How can i fix this ? its a very big website....Need help !!!!
Thank you
-
Something like that happened to me and, i installed the OSE Firewall http://wordpress.org/plugins/ose-firewall/
It worked better than Sucuri wich is payed, although in Sucuri they give help to you.
Also try to speak with your server, they can help you find strange files and do a check up on server and database.
-
There's another service, provided by McAfee that scans your site for possible vulnerabilities and even provides with a bath ONLY if your site is proven to be safe and you fix any issue they can find. Can't remember the price though, but I used it in the past and they scan the entire site daily, totally recommended.
-
Edmond - No, I didn't use their service, as it was quite expensive and I figured I'd be able to fix it myself in 2-3 hours of cleaning (which I was able to do). Let us know how the process goes...
-- Jeff
-
I notice that : http://sitecheck.sucuri.net/scanner/ have a service that can clean the site.
Did you use it ?
-
Hi Edmond,
First, I'd suggest you to re-upload all your files.
Then you can do some damage assessment and find out where is the hack and how they went through.
Let's start with that, re-upaload.
If your site uses a CMS, you should update the CMS right away, if it is wordpress, I'd also suggest to use a service like CloudFlare with a PRO account and make use of the WAF (web application firewall) to help prevent another infection while you are still fixing things. WAF offers dozens of fixes to wordpress loopholes that an attacker may use to gain access.
If your site doesn't use a CMS, you need to find out how they accessed your site, usual causes are mysql injection or a brute force attack to get FTP/DB access.
A Plus - Google Webmaster Help on Hacked sites:
-
Edmond -
I've had this happen in the past, and it can take a while to resolve.
First, go through the site and find out where all of the malware has been uploaded. It's possible it's in new files, or added to existing files. It could also be located in the database as well, if it's a database-driven site. I'd recommend going through EVERY file tree via FTP and look for odd files. Don't just rely on timestamps, though, as some malware can be uploaded without leaving a "recent" timestamp.
If you haven't changed anything recently, you may be able to just restore the site from an older backup. That said, sometimes the malware has been sitting on the server, and it hasn't been discovered until recently.
Your hosting company may be able to help.
Once the site is cleaned up, use a third party scanner to make sure it's clean. I've used this one in the past: http://sitecheck.sucuri.net/scanner/
Then, through Google Webmaster tools, request a new scan. This can take several long, long days.
While the site is down / inaccessible, consider posting to social media accounts like Facebook, Twitter, LinkedIn, Google +, etc to let people know that you are working on the issue and it should be resolved quickly.
And then wait... until the restriction is lifted...
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Internationalise all or just part of website?
Hi We are a UK company looking to expand our sales into the US market. We will be setting up a US office. Our (.com) site has a number of main sections relating to different products and services - but only two of these sections will be selling products to the US. /service1 - UK only
International SEO | | AbsolutelyN
/products1 - UK and US - different product names/descriptions for different markets
/service3 - UK and US - not much difference for uk/us pages So the query is do we fully internationalise the site with sub folders /us & /gb and make all content on the site have a different language version. Or do we only give an alternate language version for the two areas that need it? Perhaps /products1/us & /products1/uk We also have top rankings and are concerned about changing the urls. Is one option to keep the existing urls as the 'default' language? The default perhaps being US as it is a .com domain. If not then how do you redirect a url that going forward splits into US or GB sub directories? Another option is to have the current .com become US only and create a .co.uk site. We are in a position to easily do this but research suggests subdirectories is the better way forwards due to aggregated link authority. Many thanks for any thoughts,
Tristan0 -
Multi Regional Website Best Practices
Hi there, I have a website that is targeting 3 countries AU/US & NZ. I have set up hreflang tags for each page on each of the site however I am having difficulties getting it work right. I read this article which was a great insight into the hreflang tags. https://moz.com/blog/hreflang-behaviour-insights and as a result I have implemented hreflang tags in the following manner: When users access the root domain http://[website] it will redirect the user to their locale with a 302 redirect. I have a few questions:
International SEO | | nathanfranklin
1. When building my external link profiles, I'm not sure if I should be building link profiles for http://[website]/ or for the geo graphical pages (http://[website]/aus/ etc..). Note that the http://[website]/ is never used, it just issues a 302 to the actual geographical location. 2. It seems that the hreflang tags are not working correctly. Perhaps its the result of the 302 on the root page, but in google.com.au (using the link http://www.google.com.au/search?hl=en&gl=au&pws=0&q=[branded search]) I would expect that I should see the search results for /aus/ given the fact that the hreflang tags are setup as en-au. Instead I am seeing the root domain page. Is that correct or should it be showing all the pages with /aus/. ALSO If I do a search in google thailand (http://www.google.com.au/search?hl=en&gl=th&pws=0&q=[branded search]) it returns the /aus/ version where it should be showing the /us/ using the x-default hreflang tag. In google webmaster tools I have setup 4 site profiles:
http://[website]/
http://[website]/us/
http://[website]/aus/ (Targeted to Australia)
http://[website]/nz/ (Targeted to New Zealand) Any help would be appreciated. Thanks Nathan1 -
Another website clone issue
My site has been cloned by this f........ http://designer.aimeeprom.com/ original site http://www.5starweddingdirectory.com Still has our logo etc... How can we prevent this from happening, What should I do next. I have pinged them via the interactive chat but they do not reply..
International SEO | | Taiger0 -
Website Migration
Are there any SEO issues with fdmgroup.com that I should address? We recently migrated to a new website redesign. Thanks.
International SEO | | fdmgroup0 -
Sitemap for multilanguage website
Hello sorry silly question but prefer to be sure 🙂 I have an international website with different subfolders .com/es .com .com/fr etc All of them have independant sitemap, but i'd like to add in .com/robot.txt a sitemap with language. Do you know how I can do this ? Tks a lot !
International SEO | | AymanH0 -
For a website in portuguese what would you use? pt.domain.com, br.domain.com or domain.com.br
Hello We are a company with a website in several languages, one of them is portuguese. Our market is 2 times bigger in Brazil than in Portugal, but obviously Brazil has more potential in the future. In domain.com we have our main site in English. What would you use? pt.domain.com, br.domain.com or domain.com.br? In the first case, it means just portuguese, in the second Brazil but it is not geolocalized, and in the third, you are almost ignoring Portugal users... Duplicating content, doesn't seem to make sense... The content is basically international, so it is just the language that matters. Any help will be very much appreciated.
International SEO | | forex-websites0 -
Website Target in Europe
Hi, I am planning a site to target in Europe and I expect to translate my site into ten different languages namely English, French, Spanish, Italian, German, Russian, Greek, Portuguese, Dutch and Swedish. I am doing some study of this case in targeting different countries for SEO, most of the advise are the following: a. Build 10 different websites and target different geographical location in Google Webmaster b. Get 10 different country specific domains for 10 different websites I would like to hear any suggestion if there is anything better than this ? I had all the materials and translation ready but building 10 different websites or getting 10 different domains are very time consuming and costly. I would be appreciated if any one had any advise for me to make the website more management friendly. Thank you. Tom
International SEO | | Stevejobs20110 -
French Canadian Website and French Language URLs
Hello, One of my clients has a question on a new Quebec, Canada version of their website. The website content and copy is in the French Canadian language, but the IT Director has asked if, for the purpose of SEO, should the URLs be in French as well? So, this questions has two parts... For SEO, should the URL's be in French or left in English, to avoid crawl errors? For visitor UX, is there any reason to have them in French versus English?
International SEO | | Aviatech0