Redleg

"Aw Snap" My website has been hacked! Now what? A few tips from redleg.

Remove a Google malware warning? This site provides website owners with information and tools to assist them in finding and removing hacks - malware, malicious redirects, phishing, spam from their sites.

Tools
File Viewer --> The File Viewer is an online tool website owners can use to check a website for malicious redirects, malicious scripts and other bad stuff. The tool allows the user to "spoof" both the user agent and http referrer in the request for a URL to check for conditional redirects and/or conditional spam hacks.
Is Flagged? --> Checks a URL to see if it is currently listed in Google's Malware API, if Google has the URL flagged malware, unwanted, phishing. Also checks if any URLs from your site are currently listed in a couple of Phishing DBs. Can be helpful in finding which URLs to submit to Google for Phishing review.
Decoder base64 & escaped strings --> base64 encoded php code is frequently used by hackers to obfuscate their malicious code. This on line tool will decode most base64 encoded strings, eval or echo (base64_decode(, (gzinflate(base64_decode(, (gzuncompress(base64_decode(, (gzinflate(str_rot13(base64_decode('. In most cases you will be able to get an idea of what the code does.
Simple script to find "text" (base64_decode) in your files --> This article contains a listing for a simple php script which, when placed on your site, will spider the files searching for strings of "text" commonly used by hackers such as base64 and list out any files containing the string. The "text" to search for can easily be modified as needed.
Help Articles
    
Code Examples
Get Assistance
If you are having problems finding the cause of a malware warning I encourage you to seek assistance on the Google forum. - Webmaster Central Help Forum. You will need to provide your URL for someone to take a look and try to identify any issues. * The Forum is indexed and threads will show up in search results -- You can use a URL shortner service like http://goo.gl/ to mask your URL if you do not want the post to show up in a search for your domain name!
Google has a very comprehensive set of posts to assist web site owners in cleaning up a site at Webmaster help for hacked sites. The articles explain the process "step-by-step" and have some excellent videos that explain each step in detail. If you are having problems getting your site cleaned up and cleared I highly recommend you read (and watch) the entire series.


I am frequently (at least once anyway) asked if I accept donations, I don't -- but if you are so inclined -- you could make a donation to Save the Children.




Privacy Policy
aw-snap.info does NOT use cookies, I do not store information about websites that are checked, visitors preferences, record user-specific information on which pages the user access or visit, customize page content based on visitors browser type or other information that the visitor sends via their browser. If you use one of the tools, File Viewer, Blogger Tool or base64 decoder the information you submit does show up in my server logs. The specific information that is logged is disclosed in the Privacy Policy for each Tool.