It's been a busy week pushing forward with my new niche sites - not an easy task when you have a development project for a demanding customer on the go. However, I have to make time in order to be less reliant on them (bit of a catch 22 really)
Anyway, yesterday my day was ruined dealing with an unfortunate incident. I will readily admit it was really my fault because I didn't attend to something that I should of. Despite having mapped out my week which included launching my 3rd niche site, I had to drop everything and deal with a Malware incident.
One of my older sites that earns a moderate income of around $20 per day saw a dip over the easter weekend. I wasn't overly worried as I assumed perhaps it was just a holiday slump and besides, I was busy on other things. On Thursday my earnings were down to around $2 and I was really worrying now. I was beginning to feel relaxed with this low maintenance, regular income and didn't want to see it go down the pan.
What did I do? I started looking to see if others were complaining about an Adsense drop. What I found was speculation about the very same weekend and the introduction of the Google Caffeine update. Bearing in mind I still hadn't looked at my site - why would I? I know what it looks like. 
At this point I was about to just sit back and let others worry about fiddling with their sites, chasing their tails trying to second guess Google. I found it is just not worth panicking because if you have built your site right then it should come good in the end.
All that was left to do was a quick "site:mysite.com" on Google see if the count was normal and then I could just put it behind me for a while - then I saw this next to every one of the 900+ pages:
This site may harm your computer
Now panic sets in. Mistake? Bad problem? What do I do? I FINALLY pop over to the site to find that rather lovely Firefox red warning page
Reported Attack Page!
Now I really did have a problem. I popped onto the server and opened up the logs, choosing the day that the traffic started to drop. And there it was - SQL inject attempts (including the successful one at the end). They had inserted some javascript into a description field while wiping out my subject in the process of trying. Annoyingly the latter is used as the title tag so I have some blank title listings in Google now. 
It was all down to an insignificant, small 3rd party script that I have always known was a bit ropey - more fool me.
I got it fixed moderately quickly and restored a backup from well before the attack as the site hadn't been updated for about 8 weeks.
Now to get those warnings removed. All it took was logging into my Google webmaster account and requesting a malware review of my site.
I was quite worried about how long it was going to take but it was pretty quick - I submitted at around 2pm and the browser warning was lifted at around 9pm. Unfortunately I was still stuck with This site may harm your computer on every single one of my Google results which really worried me that this was going to last for quite a while. However all was well another 2 hours later.
So, there it is, a ruined day, lost income which could take a while to recover and possibly a damaged reputation. At least the warning removal was fairly painless and pretty quick but it didn't feel like it at the time while I was waiting.
I am not going to let it get me down and I got that 3rd niche site launched today together with an article submission to ezinearticles pointing to it. So now I am back on track with an important lesson learned.
Tags: malware warning, google, firefox