My site is an attack site! [resolved]

[arigatomina]

Google has done a review of my site and says it is now clean. They also say it may take a while for news of that to spread. So please ignore the warnings or wait patiently until they go away.  I have no idea how long it will be before they go away.  Google says the site is clean, but Firefox hasn't gotten that message yet.  ;p

Comments

[jukebox_csi]

Oh wow! I hope it winds up being nothing and writing over with backup copies takes care of it. It's good that you caught the edit dates.

[arigatomina]

Yeah, the attack happened on the 17th, so even though I got it cleaned up within 24 hours it will probably take google longer than that to review it. I've put in the request, so I'm just waiting for them to give me an all-clear or tell me there are still suspicious pages/links/scripts somewhere on the site. I've replaced all my pages and someone (hopefully B-chan) has replaced all her pages. So there's no sign of the script I saw earlier. I've also changed my password, so it should be all clear now. I'm hoping.

[goldenjay097]

Okay I wasn't sure if I was the only one getting that. It scared me when google told me that. Hope everything okay. Thank goodness I have chorme and not firefox, it tells me. lol

[caelimane]

What a terrible way to spend your day, wrestling with this kind of crap. So frustrating!

But I'm glad you seem to have gotten things sorted out. The ordeal will be over soon, I hope. *fingers crossed*

[arigatomina]

I think I lucked out. I was answering password requests when I happened to leave my mail - so I had to go back to it. That's when I got the warning since my email is on my site. So I found out about the problem less than 24hrs after the attack started. I killed my wrist clicking buttons to restore the pages, but I was able to get backup copies of them all within 8 or 9 hours. I'm all praises for yahoo webhosting right now. They do a complete site backup of every page every day. Yeah. Who knew, right? But I made my own backup so if this does happen again I can just use ftp to replace them all

[caelimane]

Well, if it had to happen, at least it was brief.

I wonder if it was an actual hacking or just some random floating script that drifted onto your site. The interwebs can seriously make you paranoid. Or at least they make *me* paranoid.... @_@

[arigatomina]

Yeah, I just wish it didn't happen while I was answering password requests. I was directing people to my site just as the site turned bad. The timing is ironic and I'm paranoid enough to wonder if there's a connection.

I went to this 'badsite' place that talked about how to fix the problem and what can cause it. There was a section about scripts, but they would still require the password to my account for them to edit the pages (unless the webhost itself is compromised). According to those sites, hacking is all about the password. Not having a strong enough password, not changing it often enough, or having a bug on your computer that copies your passwords. I can't find any bugs, but I'm definitely guilty of not having a strong password and not changing it often enough. I won't make that mistake again. ^^;

[gigglz2k7]

Hiya Ari! Wow, I'm glad you had such a quick turn around time, woohoo! Well when I look at my bookmarks, I still have the 'attack site' icon but when I actually go to your dot com, it goes right through no problems, yaya!
I didn't go through many links though, did you need us to test em?
*hugglz*

Luv,
GiggLz.

[arigatomina]

No, there's no need to check links. I still have those icons, too, but no more warnings. I think the icons will stick around until you clear your cookies or something like that - like how you have to refresh your browser when a picture gets reuploaded. It looks like firefox has gotten the message. ^^