Securi still showing Infected with Malware

Home Forums Support Forum Securi still showing Infected with Malware

This topic contains 18 replies, has 2 voices, and was last updated by  Michal Barus 1 year, 4 months ago.

Viewing 15 posts - 1 through 15 (of 19 total)
  • Author
    Posts
  • #1491

    Michal Barus
    Member

    Hi,

    I love this plugin and going to donate if you solve this issue for me.

    The plugin found many backdoors and threats but when I go back to Securi website at https://sitecheck.sucuri.net/ it shows the same malware are there still. I tried to Force re-scna at bottom but still the same.

    I scan both websites 2 times and now it shows some Read/Write errors. Can you please help me and I will donate because if it does what it does and both sites will be clear on Securi you have another customers. Thanks!

     

    http://extrasireland.com/

    http://www.productionpeople.ie/

    Mike

    #1492

    Michal Barus
    Member

    My apologize, http://www.productionpeople.ie/ not showing anymore malware on securi this morning.

     

    http://extrasireland.com/ still showing blacklisted and malware. Can you please check. thanks

    #1493

    Anti-Malware Admin
    Key Master

    Can you send me a login to that site so I can find that last threat and add it to my definition updates? You can reply to my email address directly with the login detail.

    #1494

    Anti-Malware Admin
    Key Master

    Oh, hold on, I just re-scanned that second site on sucuri’s sitecheck and it is clean too. It said that the results were 48 hour old so I guess you didn’t do the re-scan on that site.

    You still need to request a review in your Google Webmaster Tools account to get that site off the blacklist.

    #1495

    Michal Barus
    Member

    hi, for sure i press re-scan and still the same:

     

    Website:
    extrasireland.com/

    Status:
    Site Potentially Harmful. Immediate Action is Required.

    Web Trust:
    Blacklisted (10 Blacklists Checked): Indicates that a major security company (such as Google, McAfee, Norton, etc) is blocking access to your website for security reasons. Please see our recommendation below to fix this issue and restore your traffic.

    #1496

    Michal Barus
    Member

    i did re-scan many times and still on securi is malware. strange

    #1497

    Michal Barus
    Member

    i did on firefox now where the site never been scan in securi and still malware there. and i did re-scan. thanks

    #1498

    Anti-Malware Admin
    Key Master

    If you look carefully at the results you are seeing you shoulod note that the actual threat is now gone. there are no more infected URLs on your site and Sucuri is now confirming this. What they are still saying, and this is what you are focusing on, is that your site is still BLACKLISTED (not infected ;-)

    You still need to request a review in your Google Webmaster Tools account to get your site off Google’s blacklist. Then Sucuri will show that it’s all good :-)

    #1499

    Michal Barus
    Member

    ok now i see. thanks so much . going to send you some money :)

    #1500

    Michal Barus
    Member

    sorry one more thing.

    extrasireland on google search console showing:
    Security Issues

    Currently, we haven’t detected any security issues with your site’s content. If you want to learn more about security issues and how they could affect your site, review our resources for hacked sites.
    However, if you see a malware warning in the browser when navigating to your site, it’s likely that your site is referencing code or content from another domain that has malware. Read up on cross-site malware and learn how to address it.
    But on securi its still showing blacklisted.

    ANother production people on search console :

    URL injection

    These pages appear to be created by a hacker with the intent of spamming search results.

    Show details

    Sample URLs
    Last detected

    http://www.productionpeople.ie/viagra-online-sale

    3/12/16

    http://www.productionpeople.ie/lowest-price-generic-viagra

    3/12/16

    http://www.productionpeople.ie/canadian-levitra-for-sale

    3/12/16

     

     

    But on Securi is clean. Dont understan. Can you please check.. thanks

    #1501

    Anti-Malware Admin
    Key Master

    These URLs are currently returning 404 errors (which is good), this means that you have already removed the threat that was producing those pages. It looks like Google indexed those pages on the 12th and cached the spam content that was displayed at that time. Now you just have to wait for Google to re-index your site and clear out the cache for those pages. It may take some time but you can upload a current XML sitemap to Google Webmaster Tools and sometimes Request a Review to speed up the process of re-indexing those pages.

    #1502

    Michal Barus
    Member

    i thought so. thank you very much.

    #1514

    Michal Barus
    Member

     

    sorry but now I have again malware on www.productionpeople.ie/

    Securi telling me:

    ISSUE DETECTED
    DEFINITION
    INFECTED URL

    SEO Spam
    MW:SPAM:SEO?sb
    http://www.productionpeople.ie/candidates/ ( View Payload )

    SEO Spam
    MW:SPAM:SEO?sb
    http://www.productionpeople.ie/testimonials/ ( View Payload )

    SEO Spam
    MW:SPAM:SEO?s
    http://www.productionpeople.ie/author/stevensh/ ( View Payload )

     

    I ran scan another and I see new malwares and threats. I changed the password and have Wordfence installed. Do you know why did I get it again ?

    #1515

    Anti-Malware Admin
    Key Master

    This is a different kind of threat, maybe it was there from the fist hack, can you fix it with my plugin and then check the infection dates in the Quarantine to see if they are the same as the last infection or if they are newer?

    #1516

    Michal Barus
    Member

    ok was there from wednesday but other site in search console still showing this:

    i submitted sitemap week ago and still the same Yesterday google index the site again and still the same issue

    URL injection

    Follow-up, April 6th:
    I asked Norton to review and re-check the site.

    Follow-up, April 7th:
    They came back to me from Norton today. So pretty quick.
    Site is clean. Thanks. Mike

Viewing 15 posts - 1 through 15 (of 19 total)

You must be logged in to reply to this topic.

Comments are closed.