Warning - visiting this web site may harm your computer!

Forums › Off topic › Warning - visiting this web site may harm your computer!

simon14

1889 posts

Uber Geek

Trusted

#41111 9-Sep-2009 22:07

Hi there,

I made a site for a company a few years ago. Over the past few years, they have had someone else making changes for them. Their new webmaster did a run on them so they have asked me to help fix an issue they are experiencing.

When someone goes to the site, they get the error message:

Warning - visiting this web site may harm your computer! - the page you are about to visit may be a web forgery!
You can learn more about malware and how to protect yourself at StopBadware.org. This page is very likely to have been designed to trick users into sharing personal or financial information. Entering any personal information on this page may result in identity theft or other fraud.

You can read more about phishing here antiphishing.org.

Or you can continue to http://wardrobeorganiser.co.nz/ at your own risk.

You can also turn off safe browsing warnings by going to Google Desktop preferences.

I've reloaded the site from my original backup and this error message is still occuring.

The website in question is: www.wardrobeorganiser.co.nz

It appears the site is being picked up as a phishing website (which is isn't)

Anyone know how to stop this from occuring?

Cheers

1 | 2

2053 posts

Uber Geek

#254574 9-Sep-2009 22:11

Not happening here in Opera or IE, see the site perfectly

MyHeritage

Shop MyHeritage and uncover your origins and find new relatives with a simple DNA test. (affiliate link).

johnr

19282 posts

Uber Geek
Inactive user

#254577 9-Sep-2009 22:13

Does it in Firefox

itxtme

2053 posts

Uber Geek

#254579 9-Sep-2009 22:14

Does it if you google the web address too

Requesting a malware review of your site back to top

Once you have reviewed your site and are sure it is clean, you can can submit a request for review. Note that you'll need to verify site ownership before you can request a site review.
On the Webmaster Tools Home page, select the site you want.
In the Parts of this site may be distributing malware message, click More details.
Click Request a review.

We'll review your site and, if we determine that it doesn't host or distribute badware, we'll remove the identification from the search results.

http://www.google.com/support/webmasters/bin/answer.py?answer=45432

Send it back in for review ;)

simon14

1889 posts

Uber Geek

Trusted

#254584 9-Sep-2009 22:19

itxtme: Does it if you google the web address too

Requesting a malware review of your site back to top

Once you have reviewed your site and are sure it is clean, you can can submit a request for review. Note that you'll need to verify site ownership before you can request a site review.
On the Webmaster Tools Home page, select the site you want.
In the Parts of this site may be distributing malware message, click More details.
Click Request a review.

We'll review your site and, if we determine that it doesn't host or distribute badware, we'll remove the identification from the search results.

http://www.google.com/support/webmasters/bin/answer.py?answer=45432

Send it back in for review ;)

Thanks so much!! Have submitted.

PM your bank account number and i'll deposit you 10c to say thanks :)

ZollyMonsta

2988 posts

Uber Geek

ID Verified

Trusted

#254586 9-Sep-2009 22:20

What browser? I see via Firefox....

This web site at wardrobeorganiser.co.nz has been reported as an attack site and has been blocked based on your security preferences. Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system. Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.

So someone has maybe reported the site as a 'bad site' on a list somewhere...

From the url: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://wardrobeorganiser.co.nz/

What happened when Google visited this site?

Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-08-18, and the last time suspicious content was found on this site was on 2009-08-18.

Malicious software includes 7 trojan(s).

Malicious software is hosted on 3 domain(s), including 3bj.ru/, bestfilmlife.cn/, 3bp.ru/.
This site was hosted on 1 network(s) including AS24466 (UNIX).

So maybe the site has been compromised at some stage? The url above (safebrowsing url) offers advice on how to get this protection cleared...

Check out my LPFM Radio Station at www.thecheese.co.nz - Now on iHeart Radio, TuneIn and Radio Garden

As per the usual std disclaimer.. "All thoughts typed here are my own."

freitasm

BDFL - Memuneh
76397 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#254590 9-Sep-2009 22:22

Both Google Chrome and Firefox will show this message. It happens when Google goes through the site and find some malware in it.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

ZollyMonsta

2988 posts

Uber Geek

ID Verified

Trusted

#254592 9-Sep-2009 22:22

Note: IE8 seems to load the site ok... and no warnings from Avaast about any nasties upon load.
So maybe it's a false positive report they have had... I'd contact the google safebrowsing folk and see if they can help.

Check out my LPFM Radio Station at www.thecheese.co.nz - Now on iHeart Radio, TuneIn and Radio Garden

As per the usual std disclaimer.. "All thoughts typed here are my own."

ZollyMonsta

2988 posts

Uber Geek

ID Verified

Trusted

#254593 9-Sep-2009 22:23

freitasm: Both Google Chrome and Firefox will show this message. It happens when Google goes through the site and find some malware in it.

Thought so... I think it's clean though... nothing reported by Avaast when loaded in IE8..

Check out my LPFM Radio Station at www.thecheese.co.nz - Now on iHeart Radio, TuneIn and Radio Garden

As per the usual std disclaimer.. "All thoughts typed here are my own."

simon14

1889 posts

Uber Geek

Trusted

#254597 9-Sep-2009 22:26

ZollyMonsta:
freitasm: Both Google Chrome and Firefox will show this message. It happens when Google goes through the site and find some malware in it.

Thought so... I think it's clean though... nothing reported by Avaast when loaded in IE8..

I reloaded the site from my last backup point so it likely cleared whatever harmful changes their old webmaster may have put into it.

Now i guess i just have to wait for Google to review the site again....

timestyles

424 posts

Ultimate Geek

#254613 9-Sep-2009 23:43

Does anyone know what browser Google uses to provide a suitable test system for potential hacking?

antbs

370 posts

Ultimate Geek

Trusted

#254614 9-Sep-2009 23:46

Simon14: PM your bank account number and i'll deposit you 10c to say thanks :)

haha, 10c? I think it's more of an effort to PM the bank details. :P

nate

6469 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#254621 10-Sep-2009 01:06

simon14: I reloaded the site from my last backup point so it likely cleared whatever harmful changes their old webmaster may have put into it.

I had this happen to a friend's website, turns out one of the other sites on the same server they were being hosted on was hacked, and the infection spread to them all.

It may not have been the previous web guy.

/my $0.02

ZollyMonsta

2988 posts

Uber Geek

ID Verified

Trusted

#254636 10-Sep-2009 07:17

simon14:

Now i guess i just have to wait for Google to review the site again....

Click on the link I provided.. they have a link to have them re-check the site.... Else you could be waiting for a while :)

Check out my LPFM Radio Station at www.thecheese.co.nz - Now on iHeart Radio, TuneIn and Radio Garden

As per the usual std disclaimer.. "All thoughts typed here are my own."

itxtme

2053 posts

Uber Geek

#254640 10-Sep-2009 07:38

simon14:

Thanks so much!! Have submitted.

PM your bank account number and i'll deposit you 10c to say thanks :)

No problem, let us know how long it takes to be reviewed - I am interested to see how quick they are!!

boby55

1539 posts

Uber Geek

Trusted

#254645 10-Sep-2009 07:57

The bad code doesn't have to be on your site..... e.g if you use shared webhosting and a site that is on the same server as you gets pinged by google, google blacklist that ip meaning every site on the server will get that message.

1 | 2