<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Helping hacked sites</title>
	<atom:link href="http://www.mattcutts.com/blog/helping-hacked-sites/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mattcutts.com/blog/helping-hacked-sites/</link>
	<description>neat fun stuff</description>
	<lastBuildDate>Fri, 06 Nov 2009 18:35:07 -0800</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Alan</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-393627</link>
		<dc:creator>Alan</dc:creator>
		<pubDate>Fri, 18 Sep 2009 17:41:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-393627</guid>
		<description>After reading these posts, I feel like I&#039;m re-living the nightmare of the past 5 weeks. Simply put, like most, our website was hacked via our blog, loading spammy drug links and defacing our htaccess code.  In time, our previously superior SERPs were gone one day and shortly thereafter, business come to complete halt.  
Google was great to work with and after 5 weeks of hard work, the site and code was cleaned and Google put us back in the results... and within 2 days, our previously high SERPs returned... but not the traffic.

Here&#039;s the question: It&#039;s been over 2 weeks and our Google traffic has only returned to approx 35-40% of it pre-hacked levels.  I would assume that traffic would come back to comparable levels, at least 80% of previous levels. No one has been able to provide an explaination.

The only consideration: our blog was the point of attack and was taken down. The new blog went up yesterday... a fully cleaned version, secured, etc. The blog was somewhat active, with approx 300 posts. But still... might provide some google links to the site.

Anyone.... an explaination? and if so, ideas or suggestions what I can do next to uncover any lingering issues or problems?  

Thanks</description>
		<content:encoded><![CDATA[<p>After reading these posts, I feel like I&#8217;m re-living the nightmare of the past 5 weeks. Simply put, like most, our website was hacked via our blog, loading spammy drug links and defacing our htaccess code.  In time, our previously superior SERPs were gone one day and shortly thereafter, business come to complete halt.<br />
Google was great to work with and after 5 weeks of hard work, the site and code was cleaned and Google put us back in the results&#8230; and within 2 days, our previously high SERPs returned&#8230; but not the traffic.</p>
<p>Here&#8217;s the question: It&#8217;s been over 2 weeks and our Google traffic has only returned to approx 35-40% of it pre-hacked levels.  I would assume that traffic would come back to comparable levels, at least 80% of previous levels. No one has been able to provide an explaination.</p>
<p>The only consideration: our blog was the point of attack and was taken down. The new blog went up yesterday&#8230; a fully cleaned version, secured, etc. The blog was somewhat active, with approx 300 posts. But still&#8230; might provide some google links to the site.</p>
<p>Anyone&#8230;. an explaination? and if so, ideas or suggestions what I can do next to uncover any lingering issues or problems?  </p>
<p>Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 3xseo</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-378666</link>
		<dc:creator>3xseo</dc:creator>
		<pubDate>Wed, 19 Aug 2009 23:21:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-378666</guid>
		<description>Well my site was hacked and  dozens of links of Viagra were installed hidden behind the CSS.
I didn&#039;t noticed until the site  was removed from Google results few days ago. When I found the problem I removed all this content and filled a re inclusion request in the webmaster tools.
Nothing happened yet. and of course no body from Google even bothered to give a hint if the message was read or if this is the reason the site was removed. But it is good to know I am not alone with this problem..</description>
		<content:encoded><![CDATA[<p>Well my site was hacked and  dozens of links of Viagra were installed hidden behind the CSS.<br />
I didn&#8217;t noticed until the site  was removed from Google results few days ago. When I found the problem I removed all this content and filled a re inclusion request in the webmaster tools.<br />
Nothing happened yet. and of course no body from Google even bothered to give a hint if the message was read or if this is the reason the site was removed. But it is good to know I am not alone with this problem..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mark</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-369606</link>
		<dc:creator>Mark</dc:creator>
		<pubDate>Mon, 03 Aug 2009 09:34:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-369606</guid>
		<description>I don&#039;t get it. Some sites have more than 100 links on a page but still they have a Pr &gt; 0. But other websites having less than 100 Outbound links and having related website links couldn&#039;t get any Pr.</description>
		<content:encoded><![CDATA[<p>I don&#8217;t get it. Some sites have more than 100 links on a page but still they have a Pr &gt; 0. But other websites having less than 100 Outbound links and having related website links couldn&#8217;t get any Pr.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Blackball Online</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-365892</link>
		<dc:creator>Blackball Online</dc:creator>
		<pubDate>Mon, 27 Jul 2009 03:03:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-365892</guid>
		<description>The procedures seems to be in place, but the manpower? Google owns their own algo, so it can flag anything it wishes. Hackers hack, and we have to clean it up. Would be nice to see some more on the treatment of these parties and the legal ramifications to discourage such activities in the future.</description>
		<content:encoded><![CDATA[<p>The procedures seems to be in place, but the manpower? Google owns their own algo, so it can flag anything it wishes. Hackers hack, and we have to clean it up. Would be nice to see some more on the treatment of these parties and the legal ramifications to discourage such activities in the future.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Elias Davidsson</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-340472</link>
		<dc:creator>Elias Davidsson</dc:creator>
		<pubDate>Thu, 04 Jun 2009 16:54:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-340472</guid>
		<description>My site has been hacked.  I removed what I could and submitted to Google.  Google said it still found malware on my site.  How am I to identify what should be removed?  What &quot;words&quot; or &quot;strings&quot; should I look for?

Has Google a monopoly over the internet?</description>
		<content:encoded><![CDATA[<p>My site has been hacked.  I removed what I could and submitted to Google.  Google said it still found malware on my site.  How am I to identify what should be removed?  What &#8220;words&#8221; or &#8220;strings&#8221; should I look for?</p>
<p>Has Google a monopoly over the internet?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Online Shopping Centre</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-327802</link>
		<dc:creator>Online Shopping Centre</dc:creator>
		<pubDate>Sat, 25 Apr 2009 08:19:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-327802</guid>
		<description>One of our websites had also been de-indexed from Google, I have a webmaster account but no mention is made of the site. I&#039;ll try to request reconsideration today. Seriously though, hackers are giving genuine website owners a hard time by exploiting our weaknesses.</description>
		<content:encoded><![CDATA[<p>One of our websites had also been de-indexed from Google, I have a webmaster account but no mention is made of the site. I&#8217;ll try to request reconsideration today. Seriously though, hackers are giving genuine website owners a hard time by exploiting our weaknesses.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Allen Edwards</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-287206</link>
		<dc:creator>Allen Edwards</dc:creator>
		<pubDate>Mon, 23 Mar 2009 19:50:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-287206</guid>
		<description>One of our websites got hacked with hidden text, hence Google removed us from index.  We completely cleaned the hidden text and went through the reconsideration process.

Here&#039;s my problem.  Google IS the search engine of choice.  Many companies, like ours, depend on this search engine for our business.  We&#039;ve been online for over 11 years and never had a problem.  All of a sudden, we get hacked and are now removed from Google for a minimum of 30-days.  THAT HURTS!  Especially for something that&#039;s not our fault.

I think that Google should have a more expedited reconsideration process for first-time offenders and/or for sites that have a long, positive history.</description>
		<content:encoded><![CDATA[<p>One of our websites got hacked with hidden text, hence Google removed us from index.  We completely cleaned the hidden text and went through the reconsideration process.</p>
<p>Here&#8217;s my problem.  Google IS the search engine of choice.  Many companies, like ours, depend on this search engine for our business.  We&#8217;ve been online for over 11 years and never had a problem.  All of a sudden, we get hacked and are now removed from Google for a minimum of 30-days.  THAT HURTS!  Especially for something that&#8217;s not our fault.</p>
<p>I think that Google should have a more expedited reconsideration process for first-time offenders and/or for sites that have a long, positive history.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Steve</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-133902</link>
		<dc:creator>Steve</dc:creator>
		<pubDate>Tue, 23 Sep 2008 23:03:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-133902</guid>
		<description>Thanks for your post Matt.

One of my sites has just been hacked (first time). Fixed by moving the hosting. I now just have the very anxious wait to have the site re-included into your index. I had hoped I had acted quick enough - sadly not.

I looked for a website monitoring service that could possibly detect if one&#039;s site has been hacked - without luck.

Do you know of one? Many thanks again.</description>
		<content:encoded><![CDATA[<p>Thanks for your post Matt.</p>
<p>One of my sites has just been hacked (first time). Fixed by moving the hosting. I now just have the very anxious wait to have the site re-included into your index. I had hoped I had acted quick enough &#8211; sadly not.</p>
<p>I looked for a website monitoring service that could possibly detect if one&#8217;s site has been hacked &#8211; without luck.</p>
<p>Do you know of one? Many thanks again.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Matt Morris</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-130951</link>
		<dc:creator>Matt Morris</dc:creator>
		<pubDate>Sun, 27 Jul 2008 01:56:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-130951</guid>
		<description>Hey Matt-

I&#039;ve read through most of the posts on this blog...Our site was attacked by malware two weeks ago.  We received all of the blacklist e-mails from Google, and our site was fixed immediately.  We are now in the process of having our site re-built in .asp.net platform with hopes of protecting our site from future attacks.

Our search terms were #1 or at least on the first page for the vast majority of our keywords, and now they&#039;re gone.  Our positions have completely dropped off.  I know we are indexed because I can find some of our keywords ranked really low (ie page 10-20).  

I&#039;ve read a lot of posts on other forums of horror stories of people having fixed their sites and 3-4 months have passed, and their sites still haven&#039;t been returned to their high rankings.  

Your original post to Ryan (first post at top of page) said that his site would return to the top of search engines within a couple of days.  Can you tell me why isn&#039;t this happening for us?  

We are also a paid advertiser and do upwards of $75K of advertising with Google, and our paid listings were able to be up within a couple of hours of us fixing our site.  

What is your opinion on our situation?  There is no way for us to gauge whether or not our placement will ever come back.  Should we continue to wait, or try to start finding other ways to get our site back up to #1 on natural listings?

Thanks so much for your time,

Matt Morris</description>
		<content:encoded><![CDATA[<p>Hey Matt-</p>
<p>I&#8217;ve read through most of the posts on this blog&#8230;Our site was attacked by malware two weeks ago.  We received all of the blacklist e-mails from Google, and our site was fixed immediately.  We are now in the process of having our site re-built in .asp.net platform with hopes of protecting our site from future attacks.</p>
<p>Our search terms were #1 or at least on the first page for the vast majority of our keywords, and now they&#8217;re gone.  Our positions have completely dropped off.  I know we are indexed because I can find some of our keywords ranked really low (ie page 10-20).  </p>
<p>I&#8217;ve read a lot of posts on other forums of horror stories of people having fixed their sites and 3-4 months have passed, and their sites still haven&#8217;t been returned to their high rankings.  </p>
<p>Your original post to Ryan (first post at top of page) said that his site would return to the top of search engines within a couple of days.  Can you tell me why isn&#8217;t this happening for us?  </p>
<p>We are also a paid advertiser and do upwards of $75K of advertising with Google, and our paid listings were able to be up within a couple of hours of us fixing our site.  </p>
<p>What is your opinion on our situation?  There is no way for us to gauge whether or not our placement will ever come back.  Should we continue to wait, or try to start finding other ways to get our site back up to #1 on natural listings?</p>
<p>Thanks so much for your time,</p>
<p>Matt Morris</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tim</title>
		<link>http://www.mattcutts.com/blog/helping-hacked-sites/#comment-129871</link>
		<dc:creator>Tim</dc:creator>
		<pubDate>Sun, 06 Jul 2008 22:38:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattcutts.com/blog/?p=954#comment-129871</guid>
		<description>Hi Matt, 

We run many websites. With the increasing sql injection attacks we found 2 sites with vulnerabilities had be hacked on the 13th of June. The hack places javascript links to malware on the site. On the 16th of june we saw Google traffic drop on both sites significantly. 

We fixed the vulnerability and have submitted a reconsideration. My questions is:

Are the messages in the webmaster tools an automatted system?

Google was obviously aware of the issue and reacted in the best interest of the user. However we only discoved the issue days later and a message in the webmaster tools would have been very useful.</description>
		<content:encoded><![CDATA[<p>Hi Matt, </p>
<p>We run many websites. With the increasing sql injection attacks we found 2 sites with vulnerabilities had be hacked on the 13th of June. The hack places javascript links to malware on the site. On the 16th of june we saw Google traffic drop on both sites significantly. </p>
<p>We fixed the vulnerability and have submitted a reconsideration. My questions is:</p>
<p>Are the messages in the webmaster tools an automatted system?</p>
<p>Google was obviously aware of the issue and reacted in the best interest of the user. However we only discoved the issue days later and a message in the webmaster tools would have been very useful.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
