• Resolved jmccolm

    (@jmccolm)


    I was just informed today that OpenDNS is blocking our website due to a potential malware threat. The file in question is /wp-content/plugins/file-away/lib/js/management.js?113075. Any ideas why it might be flagging. It gives the specific code just not sure if I should post it here or not?

    Thanks!

    https://wordpress.org/plugins/file-away/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author thomstark

    (@thomstark)

    Please send the code to fileaway.plugin@gmail.com. There’s certainly no malware in my code but it’s always possible you were compromised and malware was added to that file.

    Plugin Author thomstark

    (@thomstark)

    Yeah that code you sent me is not remotely malicious or even suspicious. It is the function that allows you to rename a column in a csv file using the fileaway_values csv editor. All that function does is take your input and check against the existing column name to make sure you actually changed it, and if you did change it, it sends your new column name to the server to save your changes.

    Although, the code you sent me is poorly minified; I’m assuming OpenDNS minified it when they generated the warning, because it has spacing errors that don’t exist in my plugin code.

    In short: there is nothing problematic about that code whatsoever. It’s an extremely false positive and I don’t know what they’re saying triggered the flag.

    Thread Starter jmccolm

    (@jmccolm)

    So turns out that there was some malware found on an obsolete directory. I’ve removed that and we are no longer blacklisted. They did review the code and it is no longer marked as malicious but they still mark it as suspicious.

    Thanks for the quick responses and helping me get this resolved!

    Plugin Author thomstark

    (@thomstark)

    Glad you got it resolved and that you were able to get my csv column renamer downgraded from malicious to suspicious. I suspect they’re just jealous. 😉

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Site Blacklisted’ is closed to new replies.