I just got a Malware warning from my own site is it in Drupa

[psenger]

I just got Drupal installed, found a nice template from the drupal theme gallery, installed it. Checked it out and it looks nice. Next day, I come back to the website and Chrome warns me that my site has Malware?! What the heck! anyone have this problem? I noticed there is a patch out NFO version of Drupal. My template is Addari ( http://drupal.org/project/addari ).

I think I have to download my whole site and look for the problem. Mean while I rolled back to the old theme.

[kraze]

I also use Chrome and when I visited your site I was given no warning. However Chrome sometimes delivers false positives. A lot of the time Chrome will also check existing links or outside links located in the source of the template or even Drupal install it self. Since many of todays website templates are made by foreign people their will usually be suspicious links located in side of a templates source and Chrome will flag that. Usually it will clear it self up in couple of days. Sometimes new sites are marked as spam.

I also suggest using Google webmaster tools:https://www.google.com/webmasters/tools/

They have a Malware scanner which you can use to scan you site and can hopefully get a better response.

Also I would suggest checking through your public_html file in your FTP to see if their are any suspicious looking files or files you have not put their. This is a very rare case but it is possible a hacker did some type of hack and placed a file or attempted to execute something through your site.

[psenger]

I backed out the theme. Ill go add it back, and scan.

[kraze]

Ok cool. Let me know how it goes

[psenger]

I GREP-ed through all the PHP, CSS, and JavaScript... and guess what I found. Links back to a website that has malware. Cheez Whiz. This mouse has learned his lesson, when in the maze, and you smell cheese, it might be bad cheese.

[kraze]

lol well I am very glad you were able to get it fixed!

[psenger]

Oh this story doesnt end... guess what I found in the .htaccess file!?
....A RewriteRule that looks like any url ending in just "?" would be sent to a malware site.

File modified on October 9th... funny thing, we just created the website.. Feb 2011.

[kraze]

Hm that really odd.