2

In Google webmaster tools > diagnostics > crawl errors I'm seeing a bunch of errors that link to sub-pages like /tour/overview/Scripts/ForceDownload.asp The /tour/overview does exist, but this subfolder doesn't (and shouldn't - it's not even an ASP server). More bafflingly, the "linked from" pages listed do exist but do not have these links.

I suspect some malware may be the cause but I've yet to find any trace of it.

2
  • Did the links exist at some point in the past? It could just be old information Commented Apr 29, 2012 at 11:43
  • no. and the issue was only dated a month ago. For now I've marked the issues as resolved, so I'll wait and see if they come back.
    – Jack
    Commented Apr 29, 2012 at 15:31

1 Answer 1

3

Looking at the source of your page, I see the following lines of JavaScript code:

//call multiBox
var initMultiBox = new multiBox({
    ...
    addDownload: false,//do you want the files to be downloadable?
    pathToDownloadScript: './Scripts/ForceDownload.asp',//if above is true, specify path to download script (classicASP and ASP.NET versions included)

Apparently, Google is picking up this path from the JS code and trying to crawl it.

The ASP script and the JS code appear to be part of multiBox. By the way, you're probably lucky that your server doesn't run ASP — looking at the source, that script seems to allow downloading arbitrary files under the webserver document root, bypassing any server access controls. (The ASPX version is slightly better, in that it comes with a forbidden extension list, but it still seems to treat any unrecognized extensions as allowed.)

1
  • ouch! can't believe I missed that.
    – Jack
    Commented Apr 30, 2012 at 6:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.