Part 2: “Warning: Visiting this site may harm your computer!”

Originally posted. November 12, 2009

When I post this Article previously I was not in any impression that it will be appreciated by all of you in this massive manner, I received many mails and requests to share more in sequence about the relevant subject.

As for actually getting rid of that message. Apparently Google did indeed find malicious software on the concerning site (it was full of program downloads after all). A program can be declared ‘malicious’ for many reasons: it installs unwanted side-programs, it gets itself access to things it shouldn’t, and so on. If a person reports this to Google and Google verifies it, they will block the website, If so, it will display the warning. The only REAL solution would be to get rid of that program from your website, and/or to contact Google about it, since they are the ones that are causing the block in the first place.

It is difficult to say without full information but it sounds as if your security software provides some form of reputation filtering capability which enables it to identify potentially malicious / compromised web sites, and that the web site that you are attempting to visit has been identified as potentially carrying malicious content.

Assuming that the software is identifying these websites correctly as being potentially malicious, it is likely to be for one of 2 reasons:

1) It is a “genuine” web site that has been compromised and hosts either a browser exploit or similar malicious code.

OR

2) It is a malicious web site that is trying to trick you into visiting it as it hosts a browser exploit or similar malicious code.

If you think that some of the web sites that the system is identifying as potentially malicious are actually good web sites, I would suggest that you contact either the manufacturer of your security software or the web site owner and ask that they investigate the issue. Since cyber criminals use web downloads as their preferred means of getting their malicious code onto PC’s to either turn them into members of their Bonnets and / or steal your personal information however, I would suggest that you heed the warnings that are being presented to you and don’t visit the web sites concerned.

Also remember that where do you see this error, how does it look like and where does it come from? Google, for example, has some sort of website checking tool that gives you a similar message, when you get redirected to a malicious website from Google.

Should you get this error very frequently (or even worse, randomly), and not only when visiting sites from Google. You most likely have spyware/malware on your computer. Most usually these ‘fake’ warnings have a link/button somewhere, which redirects you to some fishy, third-party website where you must download an executable.

When you have the option ‘Block reported websites’ enabled in Mozilla / Chrome Firefox to give a warning page, before you could enter the website. This is a feature in Mozilla Firefox (and most likely Chrome as well), which you can turn of (though I wouldn’t recommend it; that feature’s there for a reason, of course). In Mozilla 3.x it can be found under:

Extra -> Options -> ‘Security’ tab -> Uncheck the ‘Block reported websites’ checkbox (second option)

The problem occurs only in Windows server coz windows firewall cannot block the malwares. So the only option left is to switch to Linux server.

I wonder if you are using any ftp software to upload your files. If you have the password stored in your ftp software this becomes an entry point for the major grumbler attacks these days. Try removing the password.

In my 5  years experience most frequently, these problems are caused by compromised FTP accounts. We have seen this happen a lot. If you are getting this error from your virus protection or on a search engine listing is likely somebody has compromised your FTP. What happens is your ftp access gets into somebody else hands and they insert malicious code into your site without changing it. If you believe this to be your problem
1. Change your ftp password.
2. Clean all computers that will access your site via FTP. This could be quite involved.
3. Upload a clean copy of your site form before the problem.

Switch from FTP to SFTP to make sure you are safe. Your host may have to alter your account.

I have found even a robust password to be very helpful

This should fix you up.

Just delete that iframe and upload the index page again and then submitting your site through GOOGLE webmasters for a review.

Most malware affected sites have ongoing infections. I would recommend using a Web Application scanner on a regular basis.

• Increase Blog Traffic with Google Analytics Are you wondering if it is really possible to increase blog traffic through the use of an analytics tool? How is such a tool going to be responsible for bringing traffic to your blog? Analytics tools are not actually directly responsible for increasing your blog traffic, but if you use......
• Are created For Adsense Web sites Destroying Google search? It's taken place for you. You've searched for one thing on the internet as well as some encouraging results look. Clicking using a url, but when you reach the site all that you view are some adverts and zilch possibly remotely near what you searched for. And that means......
• 3 Tips For How To Get Site Visitors And Hyperlink-Building To Your Web Site Doing business on the Internet isn't much different from doing business wherever else. If you are active and creative you will get success. If you happen to have these two qualities it will be wise to use them to construct site visitors to your website. How to get traffic to......