Malware Warning and Ranking Disappeared

Hi guys
My server got malware infection - It appears in the search listing as
This site may harm your computer"

Obvious action was to restore the site from previous clean backup

I am concerned about my 3 sites that were on the same server and had the same infectino
One critical site i moved to a different host with a fresh Wp copy and fresh everything.

What I noticed is that 2 sites out of 3 disappeared from Google Rankings - NTH

No Manual Penalty in Webmaster. Site is not Deindexed

Is this a coincidence ? or an Update or a algorithm penalty or infection related issue?

I have already requested a review for all the sites

Well they are cracking down hard now:
http://www.msn.com/en-gb/money/tech...e-sites/ar-AAk52PR?li=BBiaL6p&ocid=spartandhp
https://www.searchenginejournal.com/google-cracking-repeat-offenders-safe-browsing/178217/
http://www.pcworld.com/article/3139...s-websites-with-repeat-offender-warnings.html
https://techcrunch.com/2016/11/09/g...es-on-sites-that-continuously-spread-malware/
https://consumerist.com/2016/11/09/google-to-warn-users-of-sites-repeatedly-infected-with-malware/
https://www.scmagazine.com/google-safe-browsing-cracks-down-on-repeat-offenders/article/571926/
http://www.pcmag.com/news/349436/google-cracks-down-on-sites-trying-to-dupe-its-security-warn
https://threatpost.com/google-to-red-flag-repeat-offender-websites/121872/
http://www.theinquirer.net/inquirer...repeat-offender-tags-to-safe-browsing-feature
http://www.techspot.com/news/66982-google-boosts-safe-browsing-program-tagging-repeat-offenders.html

Webmaster tools will tell you which pages got flagged so you can check if they were hacked.
Sometimes using shady ad networks trigger this type of warning, so you may verify that as well.

Yah , half of our dev department is working on cleaning customers websites. According to the TM almost all are with nulled/cracked wp themes/plugins.

It is not the first time we have said that using piracy themes/scripts is risky .

Google Webmaster Tool will delay with the notification and depending on the malware your website can be flagged or fully deindexed.

The review time is ~24-72h

If you are using any nulled/cracked theme etc consider performing full malware scan if you are lucky and the malware is not encrypted it will be detected .

Don't request review before you are 100% sure that your website is ok.

Also get a SSL cert

Cheers
Alex-CyberHour

That mKes sense
Already moved the critical site to a new host with dedi ip and SSL
And i gave up on nulled scripts long back

Would they drop sites completely if they show malware infection?

Do i have any hope of my site recovering back?

Once G review your websites they will be reindexed. In normal case you won't lose your ranks.

In your case , since you are not using nulled scripts then the malware was injected somehow (your computer or 3rd party) or it could be a .pdf file or even .jpeg

If you have any .pdf files take them down rescan or create them again
And again, wait for the G notification for the exact reason.

Alex

Had the same issue recently and discovered it was because of a jQuery files upload plugin that got installed on our site when we purchased a theme from ThemeForest. So need to be careful, our host helped us identify this script and we since fixed the loophole.

There are some scripts you can run on your server to help detect possible "malicious scripts", perhaps your host can help you as well.

Google Search Console also showed a warning, albeit 3 days later, however we had since fixed it and when we sent it back for a review to Google it came back clean and marked as "issue resolved".

CyberHour said:

Yah , half of our dev department is working on cleaning customers websites. According to the TM almost all are with nulled/cracked wp themes/plugins.

It is not the first time we have said that using piracy themes/scripts is risky .

Google Webmaster Tool will delay with the notification and depending on the malware your website can be flagged or fully deindexed.

The review time is ~24-72h

If you are using any nulled/cracked theme etc consider performing full malware scan if you are lucky and the malware is not encrypted it will be detected .

Don't request review before you are 100% sure that your website is ok.

Also get a SSL cert
r

Click to expand...

This right here. I had the same problem a few weeks ago. I scanned my stuff multiple times and nothing came up. In the end, submitting a review (which took about 2 full weeks) removed the 'malware' notification on the search results. Everything was still indexed during the process though. I was also using a nulled theme and believe that to be the problem.

All in all, be careful what you're using, and yes, get an SSL.