False positive for ‘Page contains suspected malware’

  • Resolved jimgcan

    (@jimgcan)


    6 years, 8 months ago

    Wordfence flagged five pages on my site with ‘page contains suspected malware URL’
    There was malware (in some posts) which has been cleaned and verified OK.
    When I view these pages in the WordPress Page editor, there are no malware urls.
    When I copy the source code from these pages to Notepad++ and search for the links that Wordfence says are in the page, the pages are clean. I have cleared the browser cache.
    Is there something else I should be checking before I set the Ignore flag in Wordfence for these pages?
    Thanks!

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)

  • Hi @jimgcan

    Please share a screenshot showing this warning in a recent scan result along with a link to one of these posts to “alaa [at] wordfence [dot] com”, I’ll take a look and let you know my findings.

    Thanks.

    Thread Starter jimgcan

    (@jimgcan)

    Hi,
    Just wondering if you got my email (July 2nd). Please let me know if you need anything else. FYI, I did set these pages to ‘Ignore’, but the WF message continues to flag these pages as malware infected, although I can find no trace of any malware when I go through the source code.
    Thanks!

    Hi @jimgcan

    Sorry for my late reply, I got the email, thanks!

    Upon checking these pages, the malicious URL doesn’t exit in the page source code, so most likely it’s there in the database, I suggest following this tutorial to search in the database for these URLs, it could be either in wp_posts or wp_postmeta tables.

    Thanks.

    Thread Starter jimgcan

    (@jimgcan)

    Hi,
    Thanks so much for your help. I searched all the tables in the database, and found a whole bunch with malicious links in them. I deleted them all, and then had to recreate the affected pages and posts – luckily, there were only about seven pages affected, so it only took me a couple of hours. A new WF scan came up clean, so I hope this is the end of this little saga!
    Jim

    Thread Starter jimgcan

    (@jimgcan)

    Resolved.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘False positive for ‘Page contains suspected malware’’ is closed to new replies.