My site marked as harmful site but I didn't find any malicious codes

Viruses and worms
1

Help! My sites have been marked as harmful sites but when I checked with Google Webmasters Tools, I found nothing malicious.

How can I view the reasons avast! marked my sites as harmful? Or is there any other solution to this matter?

Thank you!

2

It would help if you posted the URL here so we have something to work with ;D

3

it’s homebiz.bukiki.com and atozdogbreed.com :slight_smile:

thanks a lot!

4

INFECTED - homebiz.bukiki.com - see attached screen shot ( click to enlarge)

Malware entry: MW:JS:2368 - http://sucuri.net/malware/malware-entry-mwjs2368

VirusTotal - l10n.js - 5/44
http://www.virustotal.com/file-scan/report.html?id=8250ed52f8caecd78497b78fbdb3dfa6c34eab0b9484e6aa094fae026feafd1d-1315443382

5

INFECTED - atozdogbreed.com - see attached screen shot (click to enlarge)

Malware entry: MW:JS:2368 - http://sucuri.net/malware/malware-entry-mwjs2368

VirusTotal - l10n.js - 5/44
http://www.virustotal.com/file-scan/report.html?id=8250ed52f8caecd78497b78fbdb3dfa6c34eab0b9484e6aa094fae026feafd1d-1315443382

6

ookay… thanks for pointing that for me… now for my next question:

  • how do i search for the files myself? because i have another subdomains inside bukiki.com (people.bukiki.com, travel.bukiki.com) and seems like they all infected
  • and i just remember that the url reported by avast is 91.196.216.20/url.php. what is that URL?
  • lastly, how did those get into my site and how to prevent that happening again?
    .

thank you very much!

7

They are also infected, the first one with a different infection

people.bukiki.com - Malware entry: MW:ANOMALY:SP7 http://sitecheck.sucuri.net/scanner/

VirusTotal - jquery.js - 6/44
http://www.virustotal.com/file-scan/report.html?id=f4ada926db83d8f85c8a487be10b57e76af065984ce91388be1c7414d3d5db74-1315458330

travel.bukiki.com - have the same as the first two - Malware entry: MW:JS:2368 http://sucuri.net/malware/malware-entry-mwjs2368

IP who is - http://www.ip-adress.com/whois/91.196.216.20

8

Information for Website Owners http://stopbadware.org/home/webmasters
Tips for Cleaning & Securing Your Website http://www.stopbadware.org/home/security

Protect your interwebs with Sucuri http://sucuri.net/signup - http://sucuri.net/

9

great! thank you!

10

here’s another one:
when I opened baseballsquare.com’s admin panel (wordpress blog), it is reported to having malware by avast but sucuri didn’t find anything…
what should I do?

thank you!

11

If you think it’s a FP, report it here: http://www.avast.com/contact-form.php?loadStyles

12

another strange thing:

sucuri scan tells that there’s a malware inside bestofgamecheats.com in file jquery.js although I’ve cleaned the file and avast didn’t rise any alerts.
is it an outdated result from sucuri scan?

thanks!

13

Sucuri say clean when i scan it…