Website Contains Malware!?

[Divvy]

Hi guys,

Maybe someone can help me with this...

If we enter in the website
http://bukkakeforum.net

Appears the following message:
The Website Ahead Contains Malware!
Google Chrome has blocked access to bukkakeforum.net for now.

Even if you have visited this website safely in the past, visiting it now is very likely to infect your computer with malware.

Malware is malicious software that causes things like identity theft, financial loss, and permanent file deletion.

Screenshot:
https://vborg.vbsupport.ru/external/2013/09/17.png

If we click "Details about problems on this website" we going to this explanation:
Google Safe Browsing diagnostic page for bukkakeforum.net (http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fbukkakeforum.net%2Fad mincp%2Findex.php&client=googlechrome&hl=en-US)

Screenshot:
https://vborg.vbsupport.ru/external/2013/09/18.png

I checked website index code source but could find anything suspicious, can someone please take a look?
Index (activity): Paste2.org - Viewing Paste bMAd5CZ5 (http://paste2.org/bMAd5CZ5)
Forum: Paste2.org - Viewing Paste Ps2VEcGV (http://paste2.org/Ps2VEcGV)

Any ideas? Please advice!

Thanks!

Best regards,
Tim

[ForceHSS]

What version is ur tapatalk

--------------- Added 26 Sep 2013 at 19:54 ---------------

Got this after running some tests
The web site contains a remote javascript or iframe that is currently blacklisted. That can be used to infect visitors of your own web site and generate cross-site warnings. If you don't have access to the remote site, remove the link (or iframe or javascript) from your site pointing to it.

It also looks like google has blacklisted your site

--------------- Added 26 Sep 2013 at 20:21 ---------------

Check for http://abcactyness1973.tk/src.js in your header

warning no one click this link

Edit: Staff edit, replaced link by using php bb code that way no one can accidentally click on it regardless ;).

[Divvy]

Thank you so much buddy!

I already removed the malware code thanks to you through phpmyadmin, was in the template table.

Now I think that I need to Fill a review request through google webmasters right?
Or is enough to wait for google robots to check my website again?
This for google remove the warning page and the warning from google results.

Best regards

[ozzy47]

IIRC, you do need to fill a review request through google webmasters.

[Divvy]

I filled a review and they said that the website is still infected. :-(
Anymore ideas guys?

I really can't find it...

[inphoenix]

I am having the same issue with my site. www.tabletsupportforum.com. Chrome totally blocks it but IE still works with a warning. Any help would be appreciated.

EDIT : The FTP user Id won't work even after I've reset the password !!

This is what I see.

What happened when Google visited this site?
Of the 47 pages we tested on the site over the past 90 days, 18 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2013-09-26, and the last time suspicious content was found on this site was on 2013-09-26.
Malicious software is hosted on 2 domain(s), including embecafac1973.tk/, 1380214218.hopto.org/.

4 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including googledrive.com/, denrenefku1970.tk/, embecafac1973.tk/.

This site was hosted on 1 network(s) including AS26496 (26496-GO-DADDY-COM-LLC).

--------------- Added 1380390836 at 1380390836 ---------------

I was able to get support from mods here and also from vBulletin. Greatly appreciate their help.

Resubmitted review request to Google. Hopefully I will be unblocked today.