5 replies to this topic

[MangoSango]

Okay it seems my Wordpress blog (/blog) on my website is infected with a Malware. I have tried all I could with my basic knowledge and now its weekend so I cant reach my hosting provider until monday. Google did not (yet) detect it. What should I do to avoid damage on my rankings if Google would find out before I can fix it?

Would you advice me to disallow access for the bots to the infected directory through robots.txt? Any other ideas?

[Mikl]

I can't give you any advice on the removal of the malware, but as far as Google is concerned, they have a malware review procedure. See:
http://support.googl...p;answer=168328

But presumably that won't do you any good until after the site has been cleaned.

As for using robots.txt to block crawler access, I would think that would be a good plan, although it will only be of benefit if the crawler happens to visit your site over the weekend (or until your hosting company can deal with the issue). But I'm not expert. With luck, one of the forum regulars will be able to advise on this.

[chrishirst]

"a malware" is not particularly specific which is it?

However:

check for this, http://sucuri.net/ma...minibar-js.html or this, http://sucuri.net/ma...idename-js.html

http://blog.armorize...sidenamejs.html

And examine your .htaccess file for this http://www.marksanbo...eferral-hijack/

[MangoSango]

@ Christhirst: I'm not sure which malware. The malware itself is not hosted on my server but pops up through another website when visiting my blog. I'm sure my hosting company can resolve it but I thought there where some tips I could do until they got it fixed.

@ Mikl: Thanks for the tip!

[chrishirst]

Sounds like a code injection attack, some wordpress plugins are poorly coded and prone to such attacks.

Use Firefox and Live HTTP Headers or Tamper Data to see where the requests are being sent to.

[shera1]

I feel your pain. I went through this in October. If you would like some tips on how to fix your site let me know- PM me .
I would not take the risk of leaving it up- You don't mention what type of malware- however it may possibly infect visitors to your site indirectly and you don't want them to make that connection to you!
Personally- if you can't contact your host company for help until Monday, I would put up a "Site undergoing Maintenance " type page up for now and also change your htaccess file/ robot.txt file to block google bots until you fix.