2

In Google webmaster tools > diagnostics > crawl errors I'm seeing a bunch of errors that link to sub-pages like /tour/overview/Scripts/ForceDownload.asp The /tour/overview does exist, but this subfolder doesn't (and shouldn't - it's not even an ASP server). More bafflingly, the "linked from" pages listed do exist but do not have these links.

I suspect some malware may be the cause but I've yet to find any trace of it.

2
  • Did the links exist at some point in the past? It could just be old information Apr 29, 2012 at 11:43
  • no. and the issue was only dated a month ago. For now I've marked the issues as resolved, so I'll wait and see if they come back.
    – Jack
    Apr 29, 2012 at 15:31

1 Answer 1

3

Looking at the source of your page, I see the following lines of JavaScript code:

//call multiBox
var initMultiBox = new multiBox({
    ...
    addDownload: false,//do you want the files to be downloadable?
    pathToDownloadScript: './Scripts/ForceDownload.asp',//if above is true, specify path to download script (classicASP and ASP.NET versions included)

Apparently, Google is picking up this path from the JS code and trying to crawl it.

The ASP script and the JS code appear to be part of multiBox. By the way, you're probably lucky that your server doesn't run ASP — looking at the source, that script seems to allow downloading arbitrary files under the webserver document root, bypassing any server access controls. (The ASPX version is slightly better, in that it comes with a forbidden extension list, but it still seems to treat any unrecognized extensions as allowed.)

1
  • ouch! can't believe I missed that.
    – Jack
    Apr 30, 2012 at 6:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.