Malware warnings?

Connect with other users about what to run on your webhosting (and how to run it) here.
Post Reply
TOML
New to forums
New to forums
Posts: 5
https://www.youtube.com/channel/UC40BgXanDqOYoVCYFDSTfHA
Joined: Wed Feb 16, 2011 9:29 pm

Malware warnings?

Post by TOML »

Today while editing the Drupal 6.19 install on our site(editing a theme's colors in particular) as I went to update it i started receiving the following warning in Google Chrome 10 Dev.

"Warning: Something's Not Right Here!
seidn.site.nfoservers.com contains content from webarh.com, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed, and perhaps try again tomorrow or go somewhere else.
We have already notified webarh.com that we found malware on the site. For more about the problems found on webarh.com, visit the Google Safe Browsing diagnostic page."

Then when viewed from FireFox, it is all plain text, no design lay out or anything else is present.


My question is, is it something that i did while editing the theme? Or did something happen to the database?
User avatar
kraze
Former staff
Former staff
Posts: 4362
Joined: Fri Sep 17, 2010 9:06 am
Location: California

Re: Malware warnings?

Post by kraze »

Hi we recently had this issue come up before. I am going to copy and paste my answer from another thread :)

Chrome sometimes delivers false positives. A lot of the time Chrome will also check existing links or outside links located in the source of the template or even Drupal install it self. Since many of todays website templates are made by foreign people their will usually be suspicious links located in side of a templates source and Chrome will flag that. Usually it will clear it self up in couple of days. Sometimes new sites are marked as spam.

I also suggest using Google webmaster tools:https://www.google.com/webmasters/tools/

They have a Malware scanner which you can use to scan you site and can hopefully get a better response.

Also I would suggest checking through your public_html file in your FTP to see if their are any suspicious looking files or files you have not put their. This is a very rare case but it is possible a hacker did some type of hack and placed a file or attempted to execute something through your site.
@Kraze^NFo> Juski has a very valid point
@Juski> Got my new signature, thanks!
@Kraze^NFo> Out of context!
@Juski> Doesn't matter!
@Juski> You said I had a valid point! You can't take it back now! It's out there!
User avatar
Edge100x
Founder
Founder
Posts: 13120
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Malware warnings?

Post by Edge100x »

Here's the other thread that this was mentioned in: http://www.nfoservers.com/forums/viewto ... =45&t=5006

It's possible that this version of Drupal has vulnerabilities, as all CMSes are very common attack targets and have to release new versions frequently. I see that Drupal 7 is out, so I'll work on updating that autoinstaller.
TOML
New to forums
New to forums
Posts: 5
Joined: Wed Feb 16, 2011 9:29 pm

Re: Malware warnings?

Post by TOML »

thanks guys, ill take a look at that public_html file
User avatar
Edge100x
Founder
Founder
Posts: 13120
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Malware warnings?

Post by Edge100x »

I spent a couple of hours pushing out a Drupal 7 autoinstaller last night. If you're just starting, I'd recommend installing that from scratch :).
TOML
New to forums
New to forums
Posts: 5
Joined: Wed Feb 16, 2011 9:29 pm

Re: Malware warnings?

Post by TOML »

Edge100x wrote:I spent a couple of hours pushing out a Drupal 7 autoinstaller last night. If you're just starting, I'd recommend installing that from scratch :).
sweet, i dont have much up, just simple info and a link to the phpbb3 i did, so ill just delete the database and start from scratch

thanks man
User avatar
kraze
Former staff
Former staff
Posts: 4362
Joined: Fri Sep 17, 2010 9:06 am
Location: California

Re: Malware warnings?

Post by kraze »

No problem! Please let us know if you run in to any more problems.
@Kraze^NFo> Juski has a very valid point
@Juski> Got my new signature, thanks!
@Kraze^NFo> Out of context!
@Juski> Doesn't matter!
@Juski> You said I had a valid point! You can't take it back now! It's out there!
TOML
New to forums
New to forums
Posts: 5
Joined: Wed Feb 16, 2011 9:29 pm

Re: Malware warnings?

Post by TOML »

will do, dont know if it is an issue, but fresh setup of Drupal 7 gives this on the site when i first access it:
Notice: unserialize(): Error at offset 40 of 38 bytes in variable_initialize() (line 749 of /usr/www/seidn/public/Drupal/includes/bootstrap.inc).
User avatar
Edge100x
Founder
Founder
Posts: 13120
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Malware warnings?

Post by Edge100x »

Nod, that error should go away when you reload the page. It happens because the cache needs to be refilled.
TOML
New to forums
New to forums
Posts: 5
Joined: Wed Feb 16, 2011 9:29 pm

Re: Malware warnings?

Post by TOML »

ahh, ok, it went away on the front page, but on some of the pages in the Admin area it is still around.

Is there a way yet to integrate a PHPBB3 forum into Drupal? Or is it still not working right?

Any suggestions for a good forum that works well with drupal, but has similar functionality as PHPBB3(i want some people to have forum admin, with drupal's built in they need access to everything to manually edit the forum)?
User avatar
Edge100x
Founder
Founder
Posts: 13120
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Malware warnings?

Post by Edge100x »

I'll have to check out that cache issue, then. I likely need to adjust the autoinstaller to behave a little differently. Drupal 7 is a bit of a pain to automate a setup for..

There are likely forums with Drupal integration available, but I don't personally know them.
Post Reply