blocked by google safe browsing

[mmvashonit]

i've had a couple people tell me my site is infected. one of them sent me the report from the Google Safe Browsing addon for Firefox, below.

As near as i can tell, it's either been wrongly reported by someone to a blacklist or it is keying somehow on an updatedate function in the vBulletin code and taking that as the supposed host of malicious software, updatedate.cn. Or maybe someone else on that server is infected?

Anyone else had this happen? I'm contacting my host to see if they can tell if it's compromised but since that updatedate is in the vb code I thought i'd check here to see if others are getting hosed. False positives and kneejerk blacklisting are a royal pain I deal with a lot on the email side of my biz.

Thanks much.

---------------------------------------------
Safe Browsing
Diagnostic page for tbirdforums.com

What is the current listing status for tbirdforums.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-07-22, and the last time suspicious content was found on this site was on 2009-07-22.

Malicious software is hosted on 1 domain(s), including updatedate.cn/.

This site was hosted on 1 network(s) including AS2914 (NTT).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, tbirdforums.com did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
-----------------------------------------------

[Marco van Herwaarden]

Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
AFAIK this only means that at 1 time in the past 90 days there have been a mallicious page, or a link to a mallicious page on your site. This can very well have been a spam post that you already have deleted.

But i am not an expert in this field.

But have you requested a review as mentioned?

[mmvashonit]

oops, forgot to mention the site. www.tbirdforums.com/forums

[motowebmaster]

If you search your domain in the Google, or in the integrated Firefox search box, you will see the Google Search result with the alert you've described.

When you click on the alert link (not your site), a subsequent page has a link within it for site administrators. The URL is below:

http://www.google.com/support/webmasters/bin/answer.py?answer=45432

You might try using the Diagnostics feature in the VB Admin Panel to search for suspect file versions. If malware has been installed as a file, or if a standard vb file has been modified, it should show up.