homepage Welcome to WebmasterWorld Guest from 54.211.73.232
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Hardware and OS Related Technologies / Website Technology Issues
Forum Library, Charter, Moderators: phranque

Website Technology Issues Forum

    
Site has virus?
when using search engines only
texasville

WebmasterWorld Senior Member 5+ Year Member



 
Msg#: 3788253 posted 9:11 pm on Nov 17, 2008 (gmt 0)

I manage a site that is straight html, no php or asp, no databases, no cgi forms. The traffic fell off dramatically a few days ago and still ranks about the same in serps.
I just noticed that when I search for a term in the search engines (both google and msn) and click on this site, I get a redirect and warning about my pc being infected with a virus and it shows a page with "antivirus 2008 on it and a scan bar.
Now the funny thing is, it does not happen when I go directly to the site from my browsers. Just from search engines.
It has only a stat tracking js and a bookmark js on the home page, no other little devices.
I have looked thru the site and see nothing in it that would be causing this. How are they doing this to me?
Any help would be appreciated as to what to look for. This thing is stealing all the search engine traffic.

 

Edouard_H

10+ Year Member



 
Msg#: 3788253 posted 9:19 pm on Nov 17, 2008 (gmt 0)

Sounds more like malware on your local machine - possibly 'go.google' hijack - than a problem with the website.

[edited by: Edouard_H at 9:20 pm (utc) on Nov. 17, 2008]

jdMorgan

WebmasterWorld Senior Member jdmorgan us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3788253 posted 9:30 pm on Nov 17, 2008 (gmt 0)

A fairly-well-known Web hosting company (previously located in Kentucky, but now in Ohio?) had their servers broken-into. The .htaccess files were hacked to deliver different pages to search engines versus users.

Check your .htaccess files if you are hosted on an Apache server.

Jim

[edited by: jdMorgan at 9:30 pm (utc) on Nov. 17, 2008]

texasville

WebmasterWorld Senior Member 5+ Year Member



 
Msg#: 3788253 posted 9:53 pm on Nov 17, 2008 (gmt 0)

It has also infected two other sites that I manage and also have on the same host. just got out of live chat with support there. They are blaming me even tho I haven't opened either site since moving to a new machine that has no info about the sites access.
It is in the .htaccess files.
Thanks guys. I suspect we are talking about the same host there Jim.

jdMorgan

WebmasterWorld Senior Member jdmorgan us a WebmasterWorld Top Contributor of All Time 10+ Year Member



 
Msg#: 3788253 posted 10:14 pm on Nov 17, 2008 (gmt 0)

If they blame you, you can chuckle at them and tell them to just fix the problem, because it's getting to the point where Webmasters don't even have to mention their name when discussing this well-known exploit -- as this thread demonstrates...

I'd add a smiley to that line, but unfortunately, this subject isn't funny.

I've got one client who hosts with them. If I see any sign of tampering with .htaccess or robots.txt files, we're out of there. There are simply too many other hosts who take server security more seriously than public relations or finger-pointing...

Jim

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Hardware and OS Related Technologies / Website Technology Issues
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved