Categories: Malware & hacked sites :

PHP.net flagged "Contains Malware" - No way to Request A Review?

Showing 1-117 of 117 messages
PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 12:13 AM
I've read the FAQs and searched the help center. 
My URL is: http://php.net

The entire php.net domain has been flagged, most certainly incorrectly, as containing malware.
In the Webmaster tools we however cannot find any place where we can "Request A Review"..

We would greatly appreciate if a manual review can be done for the file in question, http://static.php.net/www.php.net/userprefs.js, as we are very baffled.

-Hannes


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jens Jacobsen 10/24/13 12:33 AM
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? János Pásztor 10/24/13 12:34 AM
Looks like php.net operators can file a review request in Webmaster Tools.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 12:39 AM
Like I said, there is no such button/link in our webmaster tool panel.
These instructions are out of date.

Furthermore, going to Search Traffic -> Manual Actions -> Request a Review (which seems to be the new workflow according to some blogs) does not work either, as Manual Actions does not give us any choice either.


We are therefore someone from Google is monitoring these forums and will help us out here.

-Hannes

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? János Pásztor 10/24/13 12:41 AM
In that case let's get the word out. The more people hit "Me too" the more likely the topic will get noticed I guess.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Michael Kappel 10/24/13 12:46 AM
Good luck!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 12:47 AM
Jumped through some hoops, now I have that lovely button and have submitted a Request for Reviewal :]

-Hannes

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Amedeo Fadini 10/24/13 12:48 AM
Me too!
It's also very difficult for the common user to proceed and visit the site despite the pop-ups,
i need to read some documentation abotu a pear packages and it was a great surprise.
If someone will start a class action and ask google for a refund, I'm here.

amefad


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? János Pásztor 10/24/13 12:50 AM
I'd love to know what hoops you had to jump through, could be useful.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Paw Cabelin 10/24/13 12:52 AM
I've experienced the same problem too. How to hit the "Me too" button?
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? bartfriederichs 10/24/13 12:56 AM
@Paw Cabelin, seems like replying makes a "me too".

Well... me too! I heavily rely on the php.net docs to get work done.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Mika Aho 10/24/13 1:01 AM
Same here.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 1:06 AM
I do not know which hoop it what exactly, we tried plenty :)

I finally saw the button when I authenticated another Google account and logged into the webmaster tools using that account...
May simply have been just over 60minutes had passed since we got the initial alert, or another day hit in my timezone or the moon is pretty full :)


-Hannes

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? azi nuamid 10/24/13 1:08 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Andreas Hartmann 10/24/13 1:13 AM
Not cool I need this site.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Victor van den Bosch 10/24/13 1:14 AM
I rely on php.net and find this flag curious, it impedes me in my work :|
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Michael Weißflog 10/24/13 1:14 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Francesco Abeni 10/24/13 1:21 AM
Me too!


Joomla! Extension: http://extensions.gibilogic.com

GiBiLogic snc +39 030 20 300 32 - in...@gibilogic.com - www.gibilogic.com

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Kris Craig 10/24/13 1:22 AM
Moi, aussi!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? alepe 10/24/13 1:26 AM
+ me too. What was exactly the problem? Is all the site infected?
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? John Myce 10/24/13 1:27 AM
Posted on our website and on Reddit: http://www.reddit.com/r/technology/comments/1p41pl/google_flags_phpnet_as_website_with_malware_this/ (Please vote it up to spread the word)
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Eike Kuiper 10/24/13 1:27 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Ezekiel Victor 10/24/13 1:27 AM
Me too, augh!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jari Z 10/24/13 1:27 AM
Me too, I can't do my job without php.net !
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? vrnagy 10/24/13 1:29 AM
+ me too.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Umberto Di Lorenzo 10/24/13 1:30 AM
me too! wtf??
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? János Pásztor 10/24/13 1:33 AM
A better way to get the word out is to promote THIS topic instead of your own site because this at least Google will see.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Christian J. Kiewiet 10/24/13 1:36 AM
Me, too!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Kristoffe Brodeur 10/24/13 1:37 AM
me too! wtf! there is NO problem with that site or distribution. SITEWIDE? google, "check your links, son"

seriously. google, you are possibly the largest internet company there is, and you let a backbone of the web, php, get flagged and flag mine for linking to the SAME page for over 2~3 years until some bogus claim today?

really... fix it.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Maarten Verijdt 10/24/13 1:38 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jun Yamut 10/24/13 1:38 AM
Is the site secure? How did Google tag this as a malware site? I've been using this since forever. Maybe it's scanning your pages and finding something suspicious going on. Anything funny on your servers? 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? James Bridge-Butler 10/24/13 1:40 AM
Me Too (for lack of an obviously visible me too button)
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Lars E.rnst 10/24/13 1:42 AM
How could THAT happen... I need my php.net, especially now with the nice new beta template :)
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Marek `saji` Augustynowicz 10/24/13 1:44 AM
In the meantime, you can use http://devdocs.io/php/ (does not contain comments from php.net).
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? RobertPlant 10/24/13 1:46 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Ognjen Milošević 10/24/13 1:50 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Andy Burton 10/24/13 1:51 AM
Me too...


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Thomas Ghaye 10/24/13 1:52 AM
Me too, that's really annoying ... and i found this link if it can help :
http://www.google.com/safebrowsing/diagnostic?site=http://php.net/manual/en/function.next.php&hl=en

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Francesco Abeni 10/24/13 1:53 AM
Or use a browser different than Chrome...


Joomla! Extension: http://extensions.gibilogic.com

GiBiLogic snc +39 030 20 300 32 - in...@gibilogic.com - www.gibilogic.com

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Andrea Gardoni 10/24/13 2:01 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? pierrefar 10/24/13 2:01 AM
Hi Hannes

Can you check the Malware page in Webmaster Tools again? There might have been a short delay for the Webmaster Tools to update with the data.

Also, looking at the userprefs.js file now, it doesn't looked compromised any more. Given your comment about being "very baffled", I strongly suggest looking into how it was hacked to begin with and how it got fixed.

Hope this helps,
Pierre
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Máté Farkas 10/24/13 2:01 AM
Me, too.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Eric Herrmann 10/24/13 2:03 AM
Firefox also says bad things. "Reported Attack Page!", to be precise. IE and Opera chill out, though.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? James Harland 10/24/13 2:05 AM
That's because Firefox (and Safari IIRC) also uses Google's Safe Browsing API. IE and Opera do not.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? dbinoj 10/24/13 2:07 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Stefano Paone 10/24/13 2:07 AM
Me too. Please solve this problem, i'm studying php and i don't want spend my money for a paper manual  ;)
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Patrick Nussbaum 10/24/13 2:12 AM
I was wondering if the server might got hacked, the reason Google blacklisted you would be very interesting
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 2:14 AM
I see no evidence for that file ever being compromised.

To make the decision easier for Googlers, we have deleted the file, and the functionality it provided (should sync to all mirrors in the next 15minutes).

-Hannes

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? James Moorhouse 10/24/13 2:18 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Barnabas Nanna 10/24/13 2:20 AM
This is an outrage. How can php.net be flagged as malware and blocked. The notification doesn't event have a 'Proceed Anyway' link. This is plot againt php. However typing the url directly on your address bar works for now.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? A-Flyer 10/24/13 2:21 AM
Me too.
This is really annoying to have on a page of my site. 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Stefano Paone 10/24/13 2:25 AM


Il giorno giovedì 24 ottobre 2013 11:20:05 UTC+2, Barnabas Nanna ha scritto:
 ...However typing the url directly on your address bar works for now.



i'm doing it but it doesn't work, what's your browser? 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Yannis Berrouag 10/24/13 2:31 AM
me tooooooooooo !
Aidan Wa 10/24/13 2:39 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Markus J Doetsch 10/24/13 2:40 AM
regardless of this issue, i recommend an offline docset reader such as dash.

on a funny sidenote: it's about time php got recognized at the malware it really is! :D
(j/k of course, i work with it too ;)
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? p4l4cl][n 10/24/13 2:45 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Markus J Doetsch 10/24/13 2:45 AM
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? jenson555 10/24/13 2:49 AM
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Colin Hunt 10/24/13 2:51 AM
Is it possible the functions.js file that userprefs.js is injecting into the website HTML is the problem? The file looks very suspicious as it is heavily obfuscated..
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Zsolt Kacsándi 10/24/13 3:06 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? David Horvath (dacr) 10/24/13 3:11 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Zeev Suraski' 10/24/13 3:15 AM
Pierre,

Do you have any evidence that this file was truly compromised beforehand?  We see nothing int he Webmaster Tools.  It seems to be implied from your words that you you previously looked at userprefs.js and it was compromised, and later on when you checked again it wasn't.  While in the meantime we completely removed the file - it's still very interesting for us to know whether this file was truly compromised, or whether it was some false positive on Google's testing.

Zeev
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Rafael Lucio 10/24/13 3:17 AM
metoo!!!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Hannes Magnusson 10/24/13 3:18 AM
Realizing now that you may be a Googler, we would appreciate if you told us which exact server you found that compromised file, along with a copy of it.
And since you can no longer verify the issue, we would appreciate if you enabled our site again :)

-Hannes


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jakob Bowyer 10/24/13 3:21 AM
Hahahahahahahahaha~

You are so funny!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Daniel Leppänen 10/24/13 3:27 AM
Me too. GetItUp!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Thái Học Nguyễn 10/24/13 3:29 AM
me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? hamdan k abu taima 10/24/13 3:29 AM
To court >>>>>>>>>>>>>>
snknsnp 10/24/13 3:34 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Nemanja Vukosav 10/24/13 3:34 AM
Me too!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jerald Johnson 10/24/13 3:39 AM
All these "me too" posts are annoying and are making this hard to follow what is actual relevance and what is useless posts.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Mohamed Nisar 10/24/13 3:41 AM
+1
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Ste Daniels 10/24/13 3:42 AM
This Hacker News discussion might be enlightening https://news.ycombinator.com/item?id=6603831 specifically the thread started by karma_fountain https://news.ycombinator.com/item?id=6604156 more specifically the appended JS injection code mentioned further down https://news.ycombinator.com/item?id=6604251.

Someone's even gone to the trouble of roughly de-obfuscating it for you: https://news.ycombinator.com/item?id=6604377

Steve Daniels
Atlan Ark 10/24/13 3:43 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? tbill110 10/24/13 3:43 AM
They say it's no longer there but still will not let us visit. Perhaps you didn't buy enough adwords. lol

Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jerald Johnson 10/24/13 3:46 AM
If you don't know, on chrome click advanced and click proceed anyway. Looking at Ste's post, the malic code has indeed been removed.
tbill110 10/24/13 3:47 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? jasondt 10/24/13 3:47 AM
me too! is anyone else curious that google doesn't have a whitelist for the safe browsing api? I'd think they would have their competitors white listed to avoid a case such as this and possible antitrust litigation. Microsoft, Yahoo, or Facebook probably wouldn't be as cool about this.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? JohnMu 10/24/13 3:51 AM
Yes, we also saw variations of the same kind of obfuscated JavaScript on that page. Thanks for the links to the HN threads!

If you have not taken steps to resolve this issue on the server, I would recommend assuming that the server is still compromised. 

Cheers
John
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Atlan Ark 10/24/13 3:52 AM
saw that too before it was removed. there was definitly something malicous attached inside the js. would be good to find out what was the gateway for that crap. otherwise it can happen again.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? digitalnature 10/24/13 3:54 AM
Why? What if someone manages to inject malicious code into these sites? How would you know about this if google white-lists them?
Nick Riker 10/24/13 4:01 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Wellington Santana 10/24/13 4:04 AM
Me tooooooooo!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? FridayWithJohn 10/24/13 4:05 AM
The file has indeed been changed a lot lately. In fact as can be seen here: http://lerdorf.com/static.log.gz that file has changed in size from: 2602 bytes to 5821 to 1279 all in the space of 25 hours... that is really suspicious
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Leigh T 10/24/13 4:10 AM
2602 was the original file, with a search completion function.
1279 is the updated file, with the search completion function removed.

5821 is the suspicious entry.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? jenson555 10/24/13 4:11 AM
Hello Zeev,

Google don't provide exact location/details of file where the the malware link contains. If they found some malware stuff in any of our domain , They'll completely blacklist the whole website! No Info about where it actually affected..like main Server/Domain, Subdomain or anything! This will create total uncertainty!
 
http://jsunpack.jeek.org/?report=bfcdcb81dbeb4765758fc52bec15f252e7724966


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? tigersprout 10/24/13 4:13 AM
+1.  It's nice Google is looking out for us but blocking the whole site is a bit over zealous!

Can we have PHP.net back again please!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Barnabas Nanna 10/24/13 4:22 AM
Typing php.net in Opera works. Both Firefox, Safari and Chrome will give you the warning as they both use the StopBadWare service. Firefox's warning has the Ignore link below in the notification though.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Barnabas Nanna 10/24/13 4:23 AM
The browser is Opera
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? ste.richards 10/24/13 4:32 AM
+1 Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Pierre-Yves Gicquel 10/24/13 4:36 AM
Me too :(
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? jenson555 10/24/13 4:39 AM
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Zeev Suraski' 10/24/13 4:51 AM
John,

Is it possible for you to provide us with these variations of the file at secu...@php.net?
It's a static file that mirrors source control, the file is absolutely fine on the server and the source control doesn't show any chances in recent years (well, except for one we've intentionally put in today).

Thanks!

Zeev
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Patrick Webster 10/24/13 4:57 AM
+1
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Sinapah . 10/24/13 5:02 AM
Me to!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Johan Dahlstedt 10/24/13 5:04 AM
Me too!
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Bruce-AT 10/24/13 5:09 AM
Correct - Pierre Far is Webmaster Trends Analyst at Google
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? schnödendrö 10/24/13 5:21 AM


Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Jeff R Day 10/24/13 5:24 AM
Me too :(
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? David Vander Elst 10/24/13 5:34 AM
Me too... wt* is going on ? 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? ronyclau 10/24/13 5:41 AM
Me, too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? morehawes 10/24/13 5:48 AM
There is a mirror available here: http://php.mirrors.pair.com
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Rodrigo Z. Armond 10/24/13 5:49 AM
Wasn't a LFI attack?
BinaryKitten 10/24/13 5:53 AM <This message has been deleted.>
BinaryKitten 10/24/13 5:54 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? 2ndmouse 10/24/13 5:56 AM
If google have detected malware on php.net, presumably a threat exists on that site. What's the point of using a browser that bypasses the detection.  
Case Armitage 10/24/13 6:09 AM <This message has been deleted.>
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Gábor Szabó 10/24/13 6:19 AM
Me too
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? DusanDz 10/24/13 6:19 AM
@Hannes Magnusson 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Rodrigo Z. Armond 10/24/13 6:39 AM
I'm only asking this because I saw some entries in posted log.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? ggloogle 10/24/13 6:45 AM
Yesterday, when I had a php.net page open, my Avast anti-spyware program suddenly flagged a malicious content warning. In light of that, I really don't blame Google. Other people with anti-spyware software are most certainly getting similar warnings. Why? This wasn't a problem before. Therefore, something has certainly changed. Don't blame Google.

Admins of php.net, please clean up your site so I can return.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Eduardo Domingues 10/24/13 7:09 AM
Apparently the website is back to normal. 
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? 2ndmouse 10/24/13 7:23 AM
Google's warning is still in place. How can the site be "back to normal"
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Eduardo Domingues 10/24/13 7:29 AM
I do not get any google warning anymore at least not in the home page.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? 2ndmouse 10/24/13 7:50 AM
If you search for 'php.net' on google, the warning is still there.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Justin Bowler 10/24/13 8:00 AM
It has not been flagged incorrectly. 

A quick trace of the network calls shows that all pages on the site are attempting to load the stat.htm file from the stated source.

The site admins need to fix the pages to stop loading this page.
Re: PHP.net flagged "Contains Malware" - No way to Request A Review? Andrew Jeremy Gargan 10/25/13 1:02 AM
You can download an HTML version of the manual. That way you won't need a net connection to study it.

You can get the manual in multiple parts or a complete .chm (windows mainly)

HTH
More topics »