Compromised website

By : Forum Member
Published 21st March 2012 |
Read latest comment - 22nd March 2012

I have noticed my website has been labeled by Google as "this site may be compromised" which means infected I guess.

Reading Google's help I followed the recommended steps such as using the "Fetch as Googlebot" tool on the Webmaster tools.
It is explained in the Webmaster Tools page that the above tool can be used for identifying any malware etc.
I have fetched my website using the tool, viewed the content how Google sees it and could not spot any problems with it.

I have also ran the diagnostics tool provided by Google (Safebrowsing) which returned the results below.

What else can I do to make Google remove the message "this site may be compromised" ?

What is the current listing status for Local Hairdressers Milton Keynes | Home Hair Salon

This site is not currently listed as suspicious.

What happened when Google visited this site?

Google has not visited this site within the past 90 days.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, Local Hairdressers Milton Keynes | Home Hair Salon did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

Thanks,
linastylist
Comments
Just for your information, I have managed to solve this problem in literally one day.

My website is not flagged any more as "compromised" by Google

If you wish to know how I have done it, please let me know and I will share the experience

Thanks,
linastylist

You went silent on us for a bit (understandably), it's nice you're in touch again . Glad you were able to sort out the website problem.

Linda
CareersPartnershipUK

Hi Lina

I must admit I haven't seen that before, and looking at the Google help file, it seems pretty scary if you are generating that message!

Results labeled "This site may be compromised" - Web Search Help

I'd be fascinated to know what was the cause, and how you manged to resolve it so quickly

Steve Richardson
Gaffer of My Local Services
My Local Services | Me on LinkedIn

Hi Lina

I must admit I haven't seen that before, and looking at the Google help file, it seems pretty scary if you are generating that message!

Results labeled "This site may be compromised" - Web Search Help

I'd be fascinated to know what was the cause, and how you manged to resolve it so quickly

Yes you are right this looks pretty scary.

The solution consists in 3 steps as follows:

Step1: Identify the problem.
Step2: Fix it
Step3: Make Google review it

In my case the problem was that my website had been hacked and infected.
And actually I should say thank you to Google for pointing this out, otherwise I would have never noticed it.

Although your website looks fine to you, Google may see it differently if your website is infected by a malicious content.

The first thing I tried was to find a way of viewing the website like Google sees it.
This can be done by using the Googlebot tool in the Webmaster tools.
That did not help much unless I missed something.
There are some more tools that you can find on the web as well.

In the Webmaster Tools dashboard you have an overview of your site's performance where a number of keywords etc are listed.
I noticed a strange keyword there which has nothing to do with my website.
It still did not help me to dig in to the problem though.

Luckily I found what I was looking for in Google analytics where a list of the viewed pages including statistics are detailed.
I noticed a number of page names which retracted porn etc content and were under my domain.
I viewed the pages in a browser and saw malicious content (normally hidden) on top of my pages.
That was the moment when I passed the step1.

I then contacted my hosting provider who advised me on scanning my PC for viruses and malware which I did, but there was nothing else they could help with.
I then managed to identify several "alien" folders and files in my hosting's root directory which represented malicious content.
After successfully deleting those, I reloaded my website in full.
I also changed password in my hosting account.
That was when I passed the step2.

Now the 3rd step I thought would be the most tricky one, however, surprisingly it wasnt.

The action was to make Google aware of my "clean" website and make them remove the "compromised" label or inform me of any more problems which I might not have been aware of.

First thing I did was requesting indexation using the Googlebot tool.
Then I pinged my website using Pingler.com
Finally, again using the Webmaster tool, I submitted a "request for reconsideration" of my website, clearly explaining what happened and what exactly I did to fix it etc.

I was quite surprised seeing my website flag-free in google results on the following day

Hope it helps

Thanks,
linastylist

Very interesting post, I'm glad you've got it sorted, and thanks for sharing with us.

Steve Richardson
Gaffer of My Local Services
My Local Services | Me on LinkedIn

This Thread is now closed for comments