sitesecure

This has happened to many of my clients recently, largely due to some viruses that after infecting a local machine, recovers stored user id/pw information for FTP from the PC. The virus then uploads hidden iframe scripts into pages, causing visitors to these pages to get infected.

Fortunately, Google is finding these quickly and blocking access to the site, but unfortunately many unknowing site owners are not removing the scripts and/or don’t know how to go about requesting Google review the site. You can find information on how to request a review from Google at https://googlewebmastercentral.blogspot.com/2008/08/hey-google-i-no-longer-have-badware.html .

If you need assistance in removing the content that caused the malware/attack site label, I’ve found https://www.iframehack.com to be fantastic. They have assisted me with several sites that I manage and each time the infection was removed and with their assistance, the Google block was removed within a couple of days.

Hope this helps others out there!

If you are having trouble removing the scripts from your pages and/or getting your site back into Google’s good graces, you might want to check out https://www.iframehack.com . Their blog provides quite a bit of information on the hack, including a list of the domains that these hidden iframes are directing traffic to, and provide a service that removes the malicious content from all of the pages on your site that were affected by the virus/trojan and assists with getting the site reincluded in Google results and having the “attack site” label removed.

Hope this helps someone!

If you are having trouble removing the scripts from your pages and/or getting your site back into Google’s good graces, you might want to check out https://www.iframehack.com . Their blog provides quite a bit of information on the hack, including a list of the domains that these hidden iframes are directing traffic to, and provide a service that removes the malicious content from all of the pages on your site that were affected by the virus/trojan and assists with getting the site reincluded in Google results and having the “attack site” label removed.

Hope this helps someone!