Page 1 of 1

Oh my lordy, another hack

Posted: Wed Feb 15, 2012 12:25 pm
by psy
Just went to get IRQ stuff and Mozilla FF presented me with:

Code: Select all

Safe Browsing
Diagnostic page for cmsmadesimple.org/support

What is the current listing status for cmsmadesimple.org/support?

    Site is listed as suspicious - visiting this website may harm your computer.

    Part of this site was listed for suspicious activity 4 time(s) over the past 90 days.

What happened when Google visited this site?

    Of the 11 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2012-02-08, and the last time suspicious content was found on this site was on 2012-02-07.

    Malicious software is hosted on 1 domain(s), including XXXXXXXXXXXXXXXXXXXXXXXXXXXX/.

    This site was hosted on 1 network(s) including XXXXXXXXX.

Has this site acted as an intermediary resulting in further distribution of malware?

    Over the past 90 days, cmsmadesimple.org/support did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

    No, this site has not hosted malicious software over the past 90 days.

How did this happen?

    In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

    Return to the previous page.
    If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre
Don't know why or how to fix. Just reporting what I got.

psy

Re: Oh my lordy, another hack

Posted: Wed Feb 15, 2012 5:55 pm
by Rolf
Thanks for the warning, Psy!
I looked into the sourcecode, but the code mentioned (google-analytics.su) in report isn't there!
The last time Google visited this site was on 2012-02-08, and the last time suspicious content was found on this site was on 2012-02-07.
It looks like this warning is still related to the previous hack and is not a new one. We have removed that code then.

Grtz. Rolf

Re: Oh my lordy, another hack

Posted: Wed Feb 15, 2012 5:57 pm
by doudl
Also received this warning on the FAQ page...

Re: Oh my lordy, another hack

Posted: Mon Feb 20, 2012 6:02 pm
by lucia22
just went to support > professional services and get the google alert saying malicious code?

Re: Oh my lordy, another hack

Posted: Mon Feb 20, 2012 6:40 pm
by Dr.CSS
And if you look at the link as to why it was blocked you will see...

The last time Google visited this site was on 2012-02-19, and the last time suspicious content was found on this site was on 2012-02-07


Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, cmsmadesimple.org/support did not appear to function as an intermediary for the infection of any sites.

Re: Oh my lordy, another hack

Posted: Mon Feb 20, 2012 6:47 pm
by lucia22
sorry, i presumed you were able to request that this message was removed as it was from the other pages like the downloads section as soon as the code was removed? I did not click through to view the details. Sorry again!