Hi,
Google is reporting Malware on some of my sites and has removed them from its index.
It only seems to be affecting php pages. Google webmaster tools states in could not find any malicious code on the site so it's not javascript of an iframe. I've checked out .htaccess and httpd.conf as google suggested and found nothing out of the ordinary. The sites do not redirect me only people in the US and Europe from what I can gather so far.
Does anyone have any suggestions as to how this might be occurring or where else I could look? My server admin is running a virus scan on the server at the moment so hopefully that will sort it out.
If anyone wants to check it out for themselves one of the sites is
http://www.gay-spa.com/ (Gay Content Warning!!!, and be careful of anything which tries to install) I would be interested to see if people are still getting redirected and how persistent the virus / worm / whatever is.
I'm trying to decide whether I should turn off apache until the virus scan is complete to protect my surfers, but as I don't really know what is happening I'm not sure if that is an over reaction or not. If anyone is brave enough to check out the url and click on a few links and let me know what happens I'd be grateful!
Thanks!