Hi , I have 4 websites on servage hosting that blocked by google for suspicious malware , also i found bad diagnostic report about servage hosting .. ( CLICK HERE ) I contact servage support regarding my blocked websites and to clean the directory of my websites but they send me message saying that i need to secure my folders and not to use the permision 777 etc .. But actually on google dignostic report it says that servage has like 1500 out of 9000 website infected with malware etc and this make me feel that the problem is not my end , that there server is not secured enough and they got to fix it and clean my website their side .. ANY WAY .. I wonder if i move my websites to another hosting provider will help to fix the things .. ALso i need to know how to clean my websites from these suspicious malwares ,.. Its urgent case and i need help ASAP even if i pay for the help .. The message given by google diagnostic report as following .. ------------------------------------ The First Blocked website diagnostic report : What happened when Google visited this site? Of the 4 pages we tested on the site over the past 90 days, 1 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-01-31, and the last time suspicious content was found on this site was on 2011-01-31. Malicious software is hosted on 1 domain(s), including werwefwe3.co.cc/. ----------------------------------- The SECOND Blocked website diagnostic report : What happened when Google visited this site? Of the 33 pages we tested on the site over the past 90 days, 15 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-01-31, and the last time suspicious content was found on this site was on 2011-01-31. Malicious software includes 2 scripting exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine. Malicious software is hosted on 6 domain(s), including stronat.com/, fwq1.co.cc/, 77.242.0.0/. 1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including stronat.com/. ---------------------------------------------- The THIRD Blocked website diagnostic report : What happened when Google visited this site? Of the 68 pages we tested on the site over the past 90 days, 6 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-01-31, and the last time suspicious content was found on this site was on 2011-01-30. Malicious software is hosted on 1 domain(s), including werwefwe3.co.cc/. This site was hosted on 1 network(s) including AS29671 (SERVAGE). ------------------------------------------------------------ The last Blocked website diagnostic report : What happened when Google visited this site? Of the 3 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-01-29, and the last time suspicious content was found on this site was on 2011-01-29. Malicious software is hosted on 1 domain(s), including stronat.com/. This site was hosted on 1 network(s) including AS29671 (SERVAGE). Please help me to find the infected pages and to tell me how to remove the malwares ... Thanks in advance
If you are on a Shared hosting service, it's hard to figure out the exact source of the malware. The server could have been compromised and they have infected a large number of websites on it. It could only be your websites that are infected due to insecure folder permissions, security hole in your application/scripts etc. It is hard to find out without a Root access. Regarding, the changing of the hosting provider, if you are OK with their support, it is better to stay with them but get a VPS OR a Dedicated server for you, where you don't have to share the server with other clients. And above all, you can secure your server/websites your way to minimize the risk of hacking/injections.
It is well known in webmaster circles that servage has been compromised and sites hosted there can be pretty much hacked at will. It is unlikely that your site(s) have been hacked due to your own folder permissions or security holes in your scripts - the problem is with servage. Securing your sites (which you should always do anyway of course) won't help if they are on servage's servers because the hackers have access at a higher level - servage are well aware of this but seem totally incapable of doing anything about it. Just to be clear - this is not a recent problem, it's been going on for a year or more now. Best advice for anyone on servage - dump them asap and get a proper host ... even godaddy is better than servage, and that's saying something ! (but you can do much better than godaddy !)
you need to list your site on google webmaster tools check what it was flagged for and fix it and then request a review of the site