Hi guys (1)How does google check for malware? Do they do it manually by staff? (2)Will they check for the page if it needs a login? Thanks
Agree, Google's software check for various malware files located on a server. If the file is located in a secure are, it should not pick it up. Anywhere in you public area the file will be identified and your site listed as containing malware.
Not all the time, google has a webpage setup for people to report attack sites - http://www.google.com/safebrowsing/report_badware/ If a site tried to install malware on your computer, all you have to do is report the site and provide a description of what happened. The site is then reviewed by google. From what I saw on a Matt Cutts video, a lot of sites are reviewed by real people at google. That way there is no doubt about it.
Excellent reply as usual Green rep added. It can be done in both automate and manual but most of the time is automatically. However, all the taken care of reviews process are made manually case by case anyway. I have experienced one of my site got infected and the warning message had been removed only a few hours after manual reviews required sent, while one of my friend took a week before the message removed. Weird
Since Google has installed some virus checking tools on its web crawling bots, so many times the automated process would be used. In some cases manual checking would be done, for example when a site s repeatedly reported for problems by several people or may contain some Trojans for long times.
For my recent experience, google bot will find a malware and warn you on about it on webmaster tool, but not actually labeled your site as 'dangerous'. But if someone did actually report your site while you have malware on it, your site will be then labeled by google. (I got security breach on my sites ->webmaster tool reported malware on all of them, but only the one with high traffics got labeled as dangerous. I didn't anything about them for a few days after warning came up though so it's also my fault.)
Scanning the websites would be surely automatic.... but I guess once the sites are reported for malwares by such scan... there would be real people examining the same to verify and double check the genuineness of the findings! Regards, RightMan
not sure, maybe they are doing it automatically because google do all things automatically like algorithm.