How do I convince Google that I don't have malware on my site?

Question

Google

When I log in to Google Webmaster Tools, I see the message “Severe errors were found related to the state of the site. Dangerous malware detected." Malicious software is a program that lies in a closed area of ​​the site (it can only be downloaded in the user's account, there are no direct links on public pages). The program is processed by Themida protector (protection against reverse engineering), so some antiviruses find something in it (everything is different), but Kaspersky, DrWeb and NOD32 consider the program safe (it really is). What to do? Does Google malware detection affect indexing and rankings? How to reset this status? There is a button "I removed all malware" and the ability to write a comment when this button is pressed, but it is unlikely that anyone will read my explanations if there is a file in the old place. Changing the path to the file is not an option, because Google has already found the program once. Setting a password for the archive will make life difficult for users.

Answer 1

Try to wrap the program in setup?

Answer 2

I think you can try these 2 options:

1. Use a robots file
2. Drive to the archive with a password

Answer 3

If you have an installer on your site, use 7z or another archiver to wrap your installer. That is, sfx will be unpacked first and after unpacking it will automatically run your packed setup.exe.
In the very interface of the SFX archive, which is shown during unpacking, you can put a message about false positives of antiviruses, so that users do not get scared.
If the site contains not an installer, but a program that does not need it, then just pack it in SFX with the addition of a message to the interface of the SFX unpacker about false positives.

Answer 4

Give unauthorized users a 404 error (of course 403 is more correct, but you never know how Google will react), otherwise Googlebot will click on the link and find the program again.

Answer 5

And if the file itself is stored on a third-party host? Then the "virus" will not be on your site...