Hosting Blog

How to deal with a Hacking/Malware/IFrame notice from Google about your domain

First of all, please scan your local system with some good antivirus software as well as antimalware software and make sure you have no virus or malware on your system. Then you need to download all web data from the server and scan it with the antivirus and antimalware software. After that please make sure no unknown iframe, malicious script or code files are in your data. Then delete all data using FTP and reupload your scanned files. Also change your FTP user password after scanning for problems and update your Adobe software, as recent exploits have used Adobe Flash, Shockwave, and PDF Reader to steal passwords from users. Here are quick links to update your versions of Adobe software:

http://get.adobe.com/flashplayer/
http://get.adobe.com/reader/
http://get.adobe.com/shockwave

After cleaning up your site, report to Google Webmaster that your data has been scanned and that your data is now safe. Please see the link below for Google Webmaster:

http://www.google.com/webmasters/

1- Sign in to the webmaster tool.
2- Enter any of your Gmail account details.
3- Click on the Add a Site button.
4- Enter your website name and press enter.
5- Now, you need to verify that you are a site owner. Select any method from the verification method dropbox.
5- Follow the instructions for domain verification.
6- After verification, you will see a message like this "This site may be distributing malware. More details".
7- Click on More Details.
8- Click on Request a Review.
9- Select "I certify that I have removed badware or badware links from my site, according to StopBadware.org's Security Tips For Websites."
10- Click on Request a Review.

After that Google will review your web data again. If everything is good now, Google will remove your domain from the unsafe content distribution domain list. As per Google, the review can take up to 30 days but I have seen Google review websites within 24 hours of reporting. After this your domain will not show a red alert.