Malware in 2010 : Hiding in Google Search Results

No one will deny it, not even Google. Viruses, malware, spyware and so on, is currently a major issue on the Internet. Google and other search engines has stepped up how they detect and block malware from showing up in their index. But now, in 2010, expect it to get a lot worse. Expect those who produce malware to not look to just infect computers, but to look to get around Google’s malware detection techniques and infect even more computers.

A WebmasterWorld thread has reports of more and more malware getting through Google’s filters. For example, we reported a major malware breach using the keyword phrase blackberry news via CNN as some sort of 302 redirect malware hack. Google finally removed it, but I wonder how many computers were infected by that?

The WebmasterWorld thread is discussing several people’s experiences with recent malware infections they or friends received via a Google search.

I know Google is doing what they can to prevent this, but it is hard to keep up. So just be wary of what you click on via email, Google, Facebook and so on. The best prevention is being smart.

Forum discussion at WebmasterWorld.


No one will deny it, not even Google. Viruses, malware, spyware and so on, is currently a major issue on the Internet. Google and other search engines has stepped up how they detect and block malware from showing up in their index. But now, in 2010, expect it to get a lot worse. Expect those who produce malware to not look to just infect computers, but to look to get around Google’s malware detection techniques and infect even more computers.

A WebmasterWorld thread has reports of more and more malware getting through Google’s filters. For example, we reported a major malware breach using the keyword phrase blackberry news via CNN as some sort of 302 redirect malware hack. Google finally removed it, but I wonder how many computers were infected by that?

The WebmasterWorld thread is discussing several people’s experiences with recent malware infections they or friends received via a Google search.

I know Google is doing what they can to prevent this, but it is hard to keep up. So just be wary of what you click on via email, Google, Facebook and so on. The best prevention is being smart.

Forum discussion at WebmasterWorld.



Upcoming AdWords API v2009 Hack Days in San Francisco & New York

Developers who code for the AdWords API do not want to miss the upcoming AdWords API v2009 Hack Days. There is one in San Francisco on January 7, 2010 and on in New York on January 14, 2010. The event is free and runs most the day, plus you get a free Google lunch. Keep in mind, the event is only for developers.

Eric Koleda from the Google AdWords API Team extended the invite in the AdWords API Forum. Eric said:

Have you been putting off migrating to v2009? Not sure where to start? Been way too busy? Well it’s time to jump start your v2009 development with some in-person help from Google. Join us in Mountain View or New York for a full day of non-stop v2009 hacking.

To keep things interesting throughout the day, we’ll do some coding demos of the cool things you can do with v2009 that weren’t possible in v13, like asynchronous calls, dynamic ad parameters, and more. Non-engineers beware! This is a developer-only event, and there will be no content or activities for attendees who don’t plan to write code.

Space is limited, and signups are on a first come, first serve basis. We ask that you limit attendees to two people per company. If you are based in Europe please don’t register yet, as a similar EMEA event is in the works and will be announced shortly.

More information and the signup form are available here: http://sites.google.com/site/v2009hackdays/

Event Details include:

Dates: San Francisco – January 7th or New York – January 14th
Time: 10am until 5pm
Locations: 345 Spear St, San Francisco, CA 94105 or 75 9th Ave, New York, NY 10011
Topics: Migrating a sample application to v2009, Using AdParameters to bring your text ads to life, Asynchronous Jobs: massive changes made fast and easy, Effective local advertising with Local Ad Extensions, And more!

Sign up over here.

Forum discussion at AdWords API Forum.


Developers who code for the AdWords API do not want to miss the upcoming AdWords API v2009 Hack Days. There is one in San Francisco on January 7, 2010 and on in New York on January 14, 2010. The event is free and runs most the day, plus you get a free Google lunch. Keep in mind, the event is only for developers.

Eric Koleda from the Google AdWords API Team extended the invite in the AdWords API Forum. Eric said:

Have you been putting off migrating to v2009? Not sure where to start? Been way too busy? Well it’s time to jump start your v2009 development with some in-person help from Google. Join us in Mountain View or New York for a full day of non-stop v2009 hacking.

To keep things interesting throughout the day, we’ll do some coding demos of the cool things you can do with v2009 that weren’t possible in v13, like asynchronous calls, dynamic ad parameters, and more. Non-engineers beware! This is a developer-only event, and there will be no content or activities for attendees who don’t plan to write code.

Space is limited, and signups are on a first come, first serve basis. We ask that you limit attendees to two people per company. If you are based in Europe please don’t register yet, as a similar EMEA event is in the works and will be announced shortly.

More information and the signup form are available here: http://sites.google.com/site/v2009hackdays/

Event Details include:

Dates: San Francisco – January 7th or New York – January 14th
Time: 10am until 5pm
Locations: 345 Spear St, San Francisco, CA 94105 or 75 9th Ave, New York, NY 10011
Topics: Migrating a sample application to v2009, Using AdParameters to bring your text ads to life, Asynchronous Jobs: massive changes made fast and easy, Effective local advertising with Local Ad Extensions, And more!

Sign up over here.

Forum discussion at AdWords API Forum.



Google Updates Keyword Tool in Webmaster Tools: Updates Daily & Shows More Detail

The Google Webmaster Central Blog announced they have updated the keyword tool and data in Google Webmaster Tools. The new additions include:

  • Data updated daily
  • How often is the keyword found
  • Displas top URLs that contain the keyword

Specifically, the new significance column “compares the frequency of a keyword to the frequency of the most popular keyword on your site.” Google adds, “when you click on a keyword to view more details, you will get a list of up to 10 URLs which contain that keyword.” Why is this important, well, if someone does hack into your site, you can easily see if unrelated keywords are showing up and on which pages. Plus, it is just a good tool to see how Google understands your web site.

Here are pictures of the report for this site:

Google WMT Keywords

Google WMT Keywords

Most importantly, the Google Webmaster Team’s Halloween costume not only rocked, but coordinated.

Google Webmaster Team on Halloween

Forum discussion at Google Webmaster Help, DigitalPoint Forums and Cre8asite Forums.


The Google Webmaster Central Blog announced they have updated the keyword tool and data in Google Webmaster Tools. The new additions include:

  • Data updated daily
  • How often is the keyword found
  • Displas top URLs that contain the keyword

Specifically, the new significance column “compares the frequency of a keyword to the frequency of the most popular keyword on your site.” Google adds, “when you click on a keyword to view more details, you will get a list of up to 10 URLs which contain that keyword.” Why is this important, well, if someone does hack into your site, you can easily see if unrelated keywords are showing up and on which pages. Plus, it is just a good tool to see how Google understands your web site.

Here are pictures of the report for this site:

Google WMT Keywords

Google WMT Keywords

Most importantly, the Google Webmaster Team’s Halloween costume not only rocked, but coordinated.

Google Webmaster Team on Halloween

Forum discussion at Google Webmaster Help, DigitalPoint Forums and Cre8asite Forums.



Preemptive Google Reconsideration Requests

A WebmasterWorld thread has a webmaster who noticed his site was spammed and he is anticipating his site to be penalized by Google, and the other search engines.

He asked if he should start early and submit a reconsideration request with Google. A reconsideration request would notify Google of the hack and spam and let them know about it as soon as possible.

So far, all the feedback is that he should not wait until he is actually penalized to submit the reconsideration request. Yes, I know – he was not penalized yet but the belief is that he will be. And if he is not, what is the worst that can happen? This is assuming he does not have real spam on his site.

So he has to clean up the hack and the spam and then submit a reconsideration request.

Forum discussion at WebmasterWorld.


A WebmasterWorld thread has a webmaster who noticed his site was spammed and he is anticipating his site to be penalized by Google, and the other search engines.

He asked if he should start early and submit a reconsideration request with Google. A reconsideration request would notify Google of the hack and spam and let them know about it as soon as possible.

So far, all the feedback is that he should not wait until he is actually penalized to submit the reconsideration request. Yes, I know – he was not penalized yet but the belief is that he will be. And if he is not, what is the worst that can happen? This is assuming he does not have real spam on his site.

So he has to clean up the hack and the spam and then submit a reconsideration request.

Forum discussion at WebmasterWorld.



Quick & Dirty Referral Tracking

Ever wondered where people came from to sign up for your web app? Recently I wanted to track referrals for Tender and wanted something quick and dirty. The only problem? Our setup page is on a different domain than our marketing site. This meant I couldn’t use Google Analytics since it thought every “goal” came from exactly one place: the marketing site.

Ever wondered where people came from to sign up for your web app? Recently I wanted to track referrals for Tender and wanted something quick and dirty. The only problem? Our setup page is on a different domain than our marketing site. This meant I couldn’t use Google Analytics since it thought every “goal” came from exactly one place: the marketing site.

So instead, what I did was hack together a quick referral script using Javascript to track where people came from and add that to a field on the Site model (each install of Tender is considered a ‘Site’). The Javascript (in MooTools):

var Tracker = new Class({
  tracker: null,

  initialize: function(){
    this.initCookie();
    this.updateCookie();
    this.markLinks();

    var field = $('site_referral');
    if (field){
      field.value = this.tracker;
    }
  },

  initCookie: function(){
    this.tracker = Cookie.read('tracker');
    if (!this.tracker || this.tracker == "") this.setTracker();
  },

  // Order of precidence
  // 1. ?source= from in the URL
  // 2. ?utm_campaign= in the URL
  // 3. Referrer / Direct
  setTracker: function(){
    var final_source = document.referrer ? document.referrer : "direct";
    var args = $get();
    if (args.utm_campaign && args.utm_campaign.trim() != '') final_source = args.utm_campaign;
    if (args.source && args.source.trim() != '') final_source = args.source;
    Cookie.write('tracker', final_source, {duration:1});
    this.tracker = final_source;
  },

  // Updates the cookie if another ?source or ?utm_campiagn is set
  updateCookie: function(){
    var final_source = null;
    var args = $get();
    if (args.utm_campaign && args.utm_campaign.trim() != '') final_source = args.utm_campaign;
    if (args.source && args.source.trim() != '') final_source = args.source;
    if (final_source){
      Cookie.write('tracker', final_source, {duration:1});
      this.tracker = final_source;
    }
  },

  markLinks: function(){
    $$('a.signup-link').each(function(el){
      el.href += "?source=" + this.tracker;
    }, this);
  }
});

function $get(key,url){
   if(arguments.length < 2) url =location.href;
   if(arguments.length > 0 && key != ""){
       if(key == "#"){
            var regex = new RegExp("[#]([^$]*)");
        } else if(key == "?"){
            var regex = new RegExp("[?]([^#$]*)");
        } else {
            var regex = new RegExp("[?&]"+key+"=([^&#]*)");
        }
        var results = regex.exec(url);
        return (results == null )? "" : results[1];
    } else {
        url = url.split("?");
        var results = {};
            if(url.length > 1){
                url = url[1].split("#");
                if(url.length > 1) results["hash"] = url[1];
                url[0].split("&").each(function(item,index){
                    item = item.split("=");
                    results[item[0]] = item[1];
                });
            }
        return results;
    }
}

The way this works is the following:

  1. If someone comes with ?source=something or ?utm_campain=something (a Google Analytics keyword), it stores that value in a cookie called ‘tracker’
  2. If no ?source or ?utm_campaign can be found, it stores the referrer
  3. If no referrer can be found, it stores the value ‘direct’
  4. Every URL that has the class signup-link gets ?source=trackerhere appended, so that the referral gets tracked over to our setup domain.
  5. If it finds a field with the id of site_referral (the rails default for Site#referral field), it sets that value to whatever is stored in the tracker cookie.

Now when people sign up, I can see where they came from in the admin panel:

Referral Screen

Seth Godin: Sliced Bread

Malcolm Gladwell: Outliers

Anthony Parinello: Your Price is Too High