modx site: suspected malware site

Client’s site gets a suspected malware site warning. Web host suggested I request a review from Google Web Master tool, the site was not added to WMT and I was trying to do this before submitting my request. There is a problem though, though I am able to access to manager but I am unable to go to ’resource’ as every click brings me back to the warning page - I think this is cause by the frame but not sure about it.

I managed to get around this by adding the google verification code directly from phpMyAdmin.

I tried to inspect if there is malicious code in the Modx files, but really don’t know where to begin to look for. I checked ’index.php’, don’t see anything suspicious.

According to google:
http://www.google.com/safebrowsing/diagnostic?site=http://marinersq.com/&hl=en
Advice please.

Looks like you’re running an older version of MODx. Please review the security threads to make sure you don’t have some legacy files laying around. Next, make sure you’ve not been bitten by the Adobe Acrobat vulnerability that was/is going around. That thing is NASTY and means you pretty much need to change all passwords, wipe the server, and reinstall clean.

hi rthrash, thanks so much.

The site is using MODx 0.9.6.3, I just checked, Evolution 1.0.0 is the latest GA. I aware this version but thought there are still snippets that are not compatible is that correct? That is the reason I didn’t upgrade.

I’ve had the same problem just a few days ago.

I found the information in this topic very helpful: http://modxcms.com/forums/index.php/topic,36412.0.html and even more information here: http://25yearsofprogramming.com:80/blog/20071223.htm

My site was also using 0.9.6.3. I uploaded 0.9.6.3 again (which was clean) and did an upgrade to the same version. Also uploaded all snippets and plugins I added over time. This solved my problem.

Hope this information helps you to solve your problem too.

Good luck.

Hi WebBe,

Thanks for the links.

I am going to run a clean installation. I changed the password before my initial post, but going to re-change it.
The thread mentioned only related to Windows, Antivirus and Malware software, but I am a Mac user, and yes, I don’t have have a similar tool. Anybody has any usggestion on this?

This reminds me when working on a site two days ago Coda asked is I wanted to grant a access to a suspicious network, I opted No.