• I enabled the WordFence optimization using the Falcon Engine. Performance seems to be improved, however, my web host keeps flagging my site as containing malware. Specifically, the WordFence cache files.

    Here is the listing that they are sending me of the infected files:
    Jan 20 18:44:07 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_/~~~~_wfcache.html
    Jan 20 18:44:08 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_/~~~~_wfcache.html_gzip
    Jan 20 18:44:10 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_/~~~~_wfcache.html
    Jan 20 18:44:11 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_/~~~~_wfcache.html_gzip
    Jan 20 18:48:45 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_1-9-16-one-day-in-the-bay/wfcache.html
    Jan 20 18:48:45 server7 maldet(691555): {hit} malware hit {CAV}Atomicorp.JSQuery.Malware.205013460 found for /home/compose1/public_html/richandcat.com/wp-content/wfcache/richandcat.com_1-9-16-one-day-in-the-bay/wfcache.html_gzip
    ###

    I clear the cache and they enable my site. The very next day, I am flagged again. Is this a legitimate attack or is it simply the case that their malware detection is erroneously flagging my files?

Viewing 1 replies (of 1 total)
  • Same issue, also running falcon Engine. I get an email from wordfence saying there’s an issue, scans turn up nothing.

Viewing 1 replies (of 1 total)
  • The topic ‘WordFence Cache Engine is Being Flagged as Malware’ is closed to new replies.