November 24, 2009

More Information about Malware Details



A month ago we announced the release of a new Webmaster Tools feature that helps webmasters identify malicious content that has been surreptitiously added to their sites. We've been working on improving the quality of the feature since it launched, and yesterday we released some changes that should make the information even more useful. Most of the changes have occurred behind the scenes, but the end result is that we can provide more data, with higher accuracy, and do so more quickly. If your site is receiving a malware warning for Google search results, please visit Webmaster Tools for more details about the problematic code that our automated systems have discovered.

We will continue to improve the feature over time and welcome feedback via comments on this blogpost. If you are a webmaster of a compromised site and use the feature to help clean your site, please include feedback in the comment field of the appeal request.

4 comments:

  1. I am not a webmaster, just an ordinary web user. Are you aware of what I presume to be fake Google pages that come up uninvited whenever I have IE7 open? The pages use the Google logo and are filled with advertising. When I first encountered the problem, page names included:
    • Newspedia
    • Main Stories
    • Business Rumours
    • Culture and Arts.

    Sometimes after being away from my computer for a while, I would find 15-20 pages open. There is also a page with a Windows-like logo called Joomla! That page says “Torrid Reviews – This site is temporarily unavailable. Please notify the System Administrator.”

    I assumed this was malware and spent $140 to have Symantecs NortonLive try to find the source. Norton techniciands in India had never seen this problem and had to consult with their Research team. On the second attempt, after many hours, one technician seemed to have solved the matter. However, the problem is back, this time with the following page titles:
    • Torrid Reviews
    • Profitable Stories
    • Medicine Tales
    • Whacking Stuff
    • Marketing Stories

    The pages are clearly produced by malware because of the ridiculous titles, menu items and misspellings. Now that I'm reading this blog, I'm wondering why Symantecs has not been provided with your warnings and tools? I really feel that I should be reimbursed for the Symantecs charge. In any case,please advise me on whether I should go back to Symantecs or, if not, what tool to use to eliminate this problem.

    Thank you,
    Alison Massa

    ReplyDelete
  2. Since I wrote this comment, I'm happy to say that I found Malwarebytes Anti-Malware. It worked snd the problem has not returned. It was the only product I tried that both found and removed the problem for free. I found it through a Foxfire blog, http://support.mozilla.com/en-US/forum/1/516688 -- where many users were complaining about the fake Google invasion
    I hope Google is taking full note of this.

    ReplyDelete
  3. Hi,

    Are you aware of intruder alerts from 209.85.231.83 server?
    Is subnet scan from same server a valid one from Google.

    Please reply to Sudarshan.ms@gmail.com

    Thank you,
    Sudarshan

    ReplyDelete
  4. browser exploits will always come up, maybe all we could is slow them down.


    for free basic-to-advanced ethical hacking tutorials visit :

    pinoysecurity.blogspot.com

    ReplyDelete

You are welcome to contribute comments, but they should be relevant to the conversation. We reserve the right to remove off-topic remarks in the interest of keeping the conversation focused and engaging. Shameless self-promotion is well, shameless, and will get canned.

Note: Only a member of this blog may post a comment.