Hey, guys.
I wanted to let you know that I pulled what I was told was malicious code from the site and (with any luck) you guys should stop seeing malware errors.
Except… I don’t think that’s happening.
I let people know about the code change yesterday through my Twitter account and asked people to let me know if they were still seeing the error. Some people said the error messages stopped, others said they were still getting them.
My suspicion is that people using Safari and Chrome were the ones getting the error messages in the first place. After I made the code change, things look clear for Safari users, but not Chrome.
My guess is because, like an elephant, Google never seems to forget and I’m wondering if I have to send a letter to them to have the site reindexed.
Are there any readers who use both Safari and Chrome? Or, can I ask everyone to reply to this blog post and let me know 1.) If they see the error and 2.) What browser they’re using?
We need to narrow this down and I think we’re getting closer, but we need your help!
I just got the warning a minute ago on Safari, when I clicked to read this news post. But after that I tried again I didn’t get the warning anymore. Reset cache/history, still no warning.
On Chrome the warning is still there though.
Both Safari and Chrome are Working For Me.
As well as IE8, Firefox, Opera, Flock, and Avant
jquery.js line 139 function advQuery() is adding the script link to go00ogle.net
google say you do not have malware last time it checked
http://safebrowsing.clients.google.com/safebrowsing/diagnostic%3Fsite%3Dhttp://www.theaterhopper.com/
using browser
ozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.31 Safari/530.5
on hit your website:
The website at http://www.theaterhopper.com contains elements from the site go00ogle.net/ which appears to host malware software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer.
using Firefox with Firebug debugger
it seems that in http://www.theaterhopper.com/wordpress/wp-includes/js/jquery/jquery.js%3Fver%3D1.3.2 at line 138
in function advQuery/ it look likes it’s about to add a script like to http://google.com/%3Ctracknumber%3E%3F/if.php/ then does a set of string replacements/ and changes the %22o%22 in google.com to o zero zero o/ and replace .com with .net making it go00ogle.net
I’m using chrome, and I got multiple malware errors when loading this page. After clearing the cache, I only got the go00ogle.net malware error.
I’m using Chrome and I got multiple malware errors.
I’m using Firefox and i still got a warning from my anti virus, I’m using avast and as soon as i loaded the page it blocked a connection to something.This is also happening on another webcomic i read.but thought i would try and be some help, not much but still help none the less.
I am also a Firefox user with Avast and I see it about once a day. I took a screen shot but I don’t really know what to do with it, and I’m sure you have a mountain of screen shots by now.
Just to add my two pennies worth,
Got Malware “suspicious pdf download” error from Symantec EndPoint Protection software and IE7 combination
No more problems in Chrome 2.0.172.31, Internet Explorer 7.0.6001.18000 or Firefox 3.0.11.
firefox is fine for me as is the Safari 4 beta.
Forgive me I’m not a regular visitor. I’ve been having the exact problem on my web forum for about a week. It is a JS exploit. How did you clean up your site? Can you maybe offer some help? If you can that would be great.
Thanks,
Jeremy