Warning for malicious file: Root.php | WordPress.org

Resolved simple2
(@simple2)

8 years ago

Hi there!

Just received a notice that the Root.php file for a site with the GoodSpace Theme is malicious. Is this a false positive or could it be real? I’m using a child version of the theme.

Thanks!

The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

bluebearmedia
(@bluebearmedia)

8 years ago

There is no root.php file as part of WordPress… nor is it common for themes, although I suppose a theme could potentially have it in its theme directory.

But it’s not part of WordPress so if it’s referenced in the wordpress folder, or the wp-subfolders, it’s very suspicious.

Thread Starter simple2
(@simple2)

8 years ago

Thanks for your help!
So it would be safe to delete the file?

bluebearmedia
(@bluebearmedia)

8 years ago

Check through these docs:

https://www.wordfence.com/learn/has-my-site-been-hacked/

https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/

wfalaa
(@wfalaa)

8 years ago

Hi @simple2
This doesn’t sound like false positive for me, you can contact the theme author if you want to double check that but I highly recommend following procedures mentioned in “How to Clean a Hacked WordPress Site using Wordfence” as suggested by bluebearmedia.

Thanks.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Warning for malicious file: Root.php’ is closed to new replies.

4 replies
3 participants
Last reply from: wfalaa
Last activity: 8 years ago
Status: resolved