Page contains a suspected malware URL

  • Resolved kman1801

    (@kman1801)


    1 year, 11 months ago

    In a recent WF scan I see about a dozen pages with bad URLs from a malware hack.

    Here is the error message but I am unable to remove this using the WF tools…

    “This page contains a URL that is currently listed on Wordfence’s domain blocklist. The URL is:

    http://line(dot)storerightdesicion(dot)com/ping/”

    This page URL example (https://www.democrabox(dot)com/submit-listing/) and other pages that show this warning all lead to a 404.

    Any help in locating the URL so I can remove them would be very helpful or generally what I should do.

    I believe the source of the malware plugin vulnerability has been resolved, but who knows.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    1 year, 11 months ago

    Hi @kman1801, thanks for getting in touch and sorry to see you’ve been having trouble with a possible breach on your site.

    If Wordfence isn’t giving you the option in the scan results to repair the files, or that doesn’t work, it sounds like you may have to run through our site cleaning instructions:

    https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

    Make sure and get all your plugins and themes updated and update WordPress core too. If you are on an older branch (WordPress 4.x etc) because you wanted to wait before installing the latest version because of Gutenberg or a custom theme compatibility you still need the latest update in that version. Those can be found here:
    https://wordpress.org/download/releases/
    WordPress sometimes patches their older releases if they find a vulnerability so make sure to update your version if needed. We, of course, recommend that you update to the latest version.

    As a rule, any time I think someone’s site has been compromised I also tell them to update their passwords for their hosting control panel, FTP, WordPress admin users, and database. Make sure to do this.

    Additionally you might find the WordPress Malware Removal section in our free Learning Center helpful.

    If you are unable to clean this on your own there are paid services that will do it for you. Wordfence offers one and there are others. Regardless if you choose to clean it yourself or let someone else do so, we recommend that you make a full backup of the site beforehand.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘Page contains a suspected malware URL’ is closed to new replies.

Tags