Question

I am a Adwords customer of 19 years and Google has discovered that on a couple of my landing pages have malware on them. They have disapproved ALL of our ads for 4-5 weeks now. We have gone through the "process" of scanning the website sucuri. net and it comes back clean. We submit screen shots to Google but they continue to say that the malware exists. Godaddy. com and Wordstream (our hosting site and PPC company) have never seen this. Has anyone else dealt with this?  

Answer 1

Deactivate your theme, switch to default theme, deactivate all plugin, and then contact Google again. Try that everytime and it works

Answer 2

Run your site through wordfence scans. Does it come up clean? Are you on shared hosting? Just finished cleaning up a nasty hacked site

Answer 3

We dealt with this with an engineering client. Our IT team was able to eventually identify the problem and solution, but the company didn't want to pay to get it fixed. They kept trying to run ads under different accounts and eventually got blacklisted.  

Answer 4

This plugin for malware search was helped me twice in a while:  
https://wordpress.org/plugins/gotmls/

Comments

And its free

Answer 5

I had this happen. You have to call them and escalate it. Your domain is blocked.  

Comments

Even with a clean site you’ll still be rejected.  

---

@skatole True I had faced similar issue where they flagged the domain hence any new ads would go directly into disapproval without any specific reason

Answer 6

A link from a website with malware can contaminate a page.  

Answer 7

This happened to my client recently. They go off old info and u have to escalate to get them to review the site thoroughly.  

Answer 8

I had this when speaking to a company. Google had sent a list of nearly every link attached to his site saying they were all malware. After a load of different tests and nothing coming back with any issues I told him to try and resubmit them. The next morning they were all back on!  

Answer 9

Client had similar issue, kept happening even after deep clean up, moved the domain off godaddy and it never happened again.  

Comments

@selfcontrol762 This is probably our next step. I listed below what we are doing. I'll keep this string posted on the results.  

Answer 10

Kyle, you have at least 3 subdomains. Check all of them. If there are comments on your blog check those. *Every* outbound link is suspect. Nofollow won’t save you. Hacked sites don’t always look hacked. If you’re linking to a hacked site that’s enough.  

Comments

@eastern I did the scan on sucuri. net and found that our "info. " had some issues. Thank you. Ill keep you posted!  

Answer 11

If you’re using an open source CRM, Google will flag you. You will have to remove it.  

Answer 12

Google struggles with javascript, so if the pages are java-heavy / include a lot of animations and things like that, I'd recommend trimming them back.  

Answer 13

Innstall Sitelock

Answer 14

This is what my webguy is doing: 1) Download all files from server 2) Update all wordpress files from fresh downloaded files 3) Update all plugins files from fresh downloaded files 4) check all theme files manualy remove un-wanted code from these files 5) check all other files manualy and remove un-wanted code from these files 6) clean the server 7) Lastly uploaded all scan files

Answer 15

I appreciate everyone's feedback and will keep you posted on the results! Thank you!  

Answer 16

Turn off comments and delete all existing comments.  

Answer 17

My guess is the outbound links and comments / reviews from dubious accounts and found on the page or site.  

Answer 18

That's why is always recommended back up your websites in situations like this so you can do clean install when needed.