D
D
Denis Kainazarov2013-12-16 10:46:26
Google
Denis Kainazarov, 2013-12-16 10:46:26

The site was blacklisted. What to do?

Greetings people!
Straight to the point:
The site was blocked by Google as a site attacking computers.
I checked all php scripts - there are no changes with the last backup.
I checked the database - there is also nothing suspicious.
So javascript is to blame.
I checked the templates - from the scripts there are only jcarousel and jquery.
As well as share42 and sitehard widgets.
I scanned the site through third-party services - and they definitely swear at share42.com and code.jquery.com
Replaced links from code.jquery.com with local ones (transferred from another project) and cut down share42.
I sent a request to review the site through Google webmaster tools and I'm waiting for a response.
Who faced similar advise what else can be done?
Do not offer links to people who will do everything for me for n kilodollars.

Answer the question

In order to leave comments, you need to log in

6 answer(s)
F
Fray, 2013-12-16
@iit

but nothing, if it was determined as spam / viral, just demolish and wait.
well, yes, if the project is focused on promotion in the category, you can safely start another project, since there will be no weather for half a year.

S
Sergey, 2013-12-16
@bondbig

If the server is dedik or vds, then run rkhunter+tiger+chkrootkit.
Well, for the future - to have an integrity control system on the server, such as tripwire or csf + lfd in general.
If shared - then carefully check the scripts, compare with the standards / backups.

P
plustilino, 2013-12-16
@plustilino

I have Yandex "marked" the site as "containing malware and viruses". After cleaning the files a week later, everything returned to its place. Delivery didn't get worse.

D
Dmitry Filatov, 2013-12-16
@i_dozi

In the google webmaster tool, look at what they are swearing at, there may also be a "Problem solved" button.

P
PhantomBlade, 2013-12-16
@PhantomBlade

It is worth checking how the site is displayed on mobile devices (the virus may not impersonate itself without certain conditions).
Check .htaccess, I often came across sites that in this file appeared lines with redirects to any kind of burda (as a rule, a check for mobile devices was also added there and from a regular computer it was not immediately clear what was wrong)

D
Denis Kainazarov, 2014-01-12
@iit

thanks to everyone, I had to dig through all the sources of the two projects, but not in vain. I found 4 shells and a couple of scripts that gave out viruses to users. Everything is great at the moment.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question