Malware found in the spell check site that CKEditor uses

To disable the spellchecker in CKEditor for Drupal 6:

Go to /admin/settings/ckeditor
For each profile, select "edit"
Expand the "Advanced options" section
set Spell checker: No
(repeat for each profile and clear cache)

To disable the spellchecker in CKEditor for Drupal 7:

Go to /admin/config/content/ckeditor
(same steps as above)

I also have this problem.

Disabling the spellchecker doesn't remove the references to svc.spellchecker.net found in ckeditor.js, which likely means Google will still see those references. I've removed them by hand. Hopefully it doesn't take too long for Google to remove this warning for visitors.

I also just started having this problem today and have not found a way to disable the spellcheck or resolve the problem.

Does anybody have any other suggestions, changes to CKEditor config file, maybe?

We were having this issue today as well.

One note to the above, we are using CKeditor through the WYSIWG Drupal module and as such i do not have the /admin/settings/ckeditor options. I instead added config.scayt_autoStartup = false; to /sites/all/libraries/ckeditor/config.js.

This did not remedy the problem as the svc.spellchecker.net reference was still in the file /sites/all/libraries/ckeditor/ckeditor.js and Google was obviously seeing it there (as mentioned by csdco). I removed (slightly changed) the URL there and it seems to have remedied the warning message.

tacoparty: I removed the svc.spellchecker.net links and replaced them with empty quotes in the 2 places they exist inside ckeditor.js, and also disabled spellchecker using the steps described in #1. Unfortunately all I can do is wait to see if this disappears; it's not like we can contact Google and get a response on something like this.

jvest2000: That is comforting. Hopefully our users no longer see the message at this point.

Solution in #1 above worked for me.

Are there any other paths at which the ckeditor admin page is known to be found? I've tried both /admin/settings/ckeditor and admin/config/content/ckeditor, to no avail.

I did find ckeditor profiles at /admin/settings/wysiwyg -- two of them, one for filtered HTML and the other for full HTML, the two input formats we use. But neither of them offered an option to expand or otherwise link to an advanced section. I did see boxes relating to use of spell check, but they were already unchecked whereas our pages do have the spell check on.

I've gotten rid of the message by temporarily disabling comments. Far from an ideal solution, but I didn't know what else to do.

Hi guys,
thank you for report this. Can you write me what version of ckeditor library do you use ?
I can't reproduce it on my drupal site (on localhost) but I see that svc.spellchecker.net link is blocked by Firefox and Chrome. I reported this issue to developers of CKEditor.

EDIT:
It looks that developers of spellchecker resolve this issue : http://www.webspellchecker.net/

Ok, after some research it looks that this problem was resolved in 3.6.2 version of CKEditor library (http://ckeditor.com/download - http://dev.ckeditor.com/ticket/8172). Please update CKEditor library to latest version.

On October 20, 2011 www.spellchecker.net was reported as malware by Google due to embedding third-party content. While using Hosted SpellCheckAsYouType (SCAYT) and WebSpellChecker (WSC) services you could see a warning message about malware from web browser - Chrome or Firefox. WebSpellChecker.net team has resolved the issue immediately and Google approved the fix. Starting from October 21, 2011 www.spellchecker.net is not reported as malware.

We would like to assure you that the WebSpellChecker.net software itself has been working properly; it's only the part of the website www.spellchecker.net including free services pages was affected. We apologize for any inconveniences it may have caused you or your users.

Your users and you would not receive any warning messages if the application were upgraded to the latest version. The instruction how to update the version can be found here http://www.webspellchecker.net/blog/?p=909
We apologize for any inconvenience it may have caused you or your users.

WebSpellChecker.net Team