hoe to stop malware on my sites

[OneSix]

My site have been pulled from google because malware, what can I do to protect myself? every time we correct the issues, it sees to happen again. What can I do to secure myself?

http://thuglicious.com/maintour.html
http://www.legalpimp.com/

[Bec]

My site have been pulled from google because malware, what can I do to protect myself? every time we correct the issues, it sees to happen again. What can I do to secure myself?

http://thuglicious.com/maintour.html
http://www.legalpimp.com/

Are you using virtual hosting or do you have a dedicated server?

[OneSix]

a dedicated server with Phatservers, i had a talk with them but they told me it's nothing to do with the server.

[Bec]

Then how is malware getting downloaded off your site if the server hasn't been hacked in some manner?

[OneSix]

that's what i said but they said im index.html page had iframe code inserted in to it loading an external URL

[Bec]

Ok, so are you bringing in another site via an IFrame? If so, removing it should fix your problem and then you can contact Google and try and get your site reinstated.

[OneSix]

yeah, i'm gonna do that

[steven619]

They are right.. it doesn't have to do with the server but your site(s).
Odds are you have an outdated or an unsecured script in place.

Most of the time it is some type of formail but it could by any script.. php or anything else. You have to go through your logs and see what has been hacked and plug the hole. Always make sure all scripts and forms up kept updated.

Your hosting might be able to help pin it down for you if you are not used to that kind of work. Or you can hire a developer to take a peek and fix it for you.

Then.. when done... your google error should be removed.
Also.. the google security warning should include some information what the issue is.

[OneSix]

Thanks mate, a lot of help. Any ideas on a developer trustworthy and reasonable?

[steven619]

I work with Stephen from Speed Pixels .com. He is good and knows php well. Bec may also know a few that are good to use.

[OneSix]

thanks mate

[HunkyLuke]

hopefully you have this fixed by now, but if not, your host should be helping you out here. If it isn't, then move hosts! NationalNet is an extremely good host with amazing support, if you ever had a situation like this with them, they would help you - not tell you to go away like your host did.

[Lippi]

Yes, National Net helped me many times with configuring and installing scripts and always took a hight priority to security.
They never would say something like "it's your problem". And all this service is included in your hosting plan, so don't be affraid to pay extra for this.
Also they will react on your request in a couple of minutes or even faster.

[OneSix]

thanks for all the feed back, i'm gonna check out NationalNet coz people seem happy with them.