Malware Attack on Website

We have a website, www.grinerlaw.com that had a malware attack.  We have deleted all the files and re-uploaded the website via a computer that is free of viruses and changed the ftp password.  We have made several requests with google for a malware review and they say the website appears clean.  

The website appears fine in Internet Explorer.  
In firefox the design is all wrong and an error message keeps popping up saying "Some files on the server may be missing or incorrect.  Clear browser cache and try again.  If the problem persists please contact website author".  We have re-created the home page and this error still comes up.
In chrome a big red page comes up that says "Phishing attack ahead".  

I'm wondering if anyone can has a solution to the problems in firefox or chrome?  
Thank you for your help in advance.
Zion PhilPresidentAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Zephyr ICTCloud ArchitectCommented:
I've checked your website on 3 browsers, Safari, Chrome and Firefox from a computer running Mac OS X.

I can't see anything wrong with it in Firefox though, it looks fine in all 3 browsers ... In Chrome I indeed get a warning that the site was recently used for phishing attacks, I'm afraid there's little you can do than just wait for Google to remove you from this "list" ... You might try to enter your url into this removal page ... But still, even then it might take a few days maybe...

Just double check all files in your website directories, make sure nothing is left behind that shouldn't be there ... And, when all is clean and safe, make regular backups so you can easily restore ;-)
0
Dave BaldwinFixer of ProblemsCommented:
Firefox is finding errors in your javascript which is partly why the javascript is putting up that alert about missing files.  Because of the error, it is not loading some of the 'required' files.  The Adobe Muse javascript is where the problems are.
0
William FulksSystems Analyst & WebmasterCommented:
Lines 182-184 show a function that is returning that error. I wonder if it has something to do with your manually restoring everything. It's something to do with Muse trying to validate and failing.
0
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

William FulksSystems Analyst & WebmasterCommented:
Also, if I view Source via Firefox then try to view your index.css, it throws a warning. What's happening is that file is not getting loaded in Firefox so your CSS is not all loading, hence the error and the page not looking right. You've got to wait for it to become un-blacklisted.

Update: Looks like none of your CSS files (site global, master home master) are loading because of the security warning.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Zion PhilPresidentAuthor Commented:
Does anyone have an idea of how long it should normally take to have a phishing warning removed from a website?  We've been entering it on the google removal page for almost 2 weeks and it hasn't been removed yet.
0
William FulksSystems Analyst & WebmasterCommented:
If you keep requesting and it's not going through, there could still be some malicious code out there or some other issue.

I just checked grinerlaw.com on mxtoolbox and you're not blacklisted any more.
0
William FulksSystems Analyst & WebmasterCommented:
Also did a check here - http://sitecheck.sucuri.net/results/grinerlaw.com

Have you tried updating your page, just change something and change it back then resave in order to put a new timestamp on the files? This might be what it's looking for.
0
Zion PhilPresidentAuthor Commented:
Thank you for your help.  Yes, I have tried making updates to the site and re-uploading the whole site hoping that would make a difference but so far nothing has changed.  I'm not quite sure what avenue to take next.
0
Zion PhilPresidentAuthor Commented:
The only thing that worked was to post in the Google forums, then magically 2 days later the site was fixed.
0
William FulksSystems Analyst & WebmasterCommented:
Glad you finally got someone's attention at Google!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Google Chrome OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.