Infection - How-to and Troubleshooting - wpForo 2.0

RE: Infection

eel — Wed, 17 Jan 2024 14:48:54 +0000

Very helpful. Thank you!

RE: Infection

Robert — Wed, 17 Jan 2024 14:46:41 +0000

Hi @eel,

The posts which are suspected have the following IDs:

61306
14097
89902

You can open them by changing the example.com/community/ path to yours:

https://example.com/community/postid/61306/
https://example.com/community/postid/14097/
https://example.com/community/postid/89902/

These are cache files which contains the content of posts in your forum. The listed posts of your forum contain spam URLs, and they are stored in the cache files as well. This is the reason of the infected reports. In most cases this is a false positive reports, in any case you can click the button in wpForo > Overview admin page.

RE: Infection

eel — Mon, 15 Jan 2024 17:10:27 +0000

I found these... clicking did not open them. I deleted them

files.jpg

RE: Infection

dimalifragis — Mon, 15 Jan 2024 16:32:02 +0000

I mean can you directly view the cached files in that directory, the "infected" ones. Via ftp or your cpanel file manager? What do they contain?

RE: Infection

eel — Mon, 15 Jan 2024 16:27:37 +0000

I am not very techy but I navigated to the thread(s) to look for anything "off" and I don't see anything. Meaning, all attachments look fine.

There are 128 instances.

RE: Infection

dimalifragis — Mon, 15 Jan 2024 16:24:23 +0000

Any other detail of what the infection could be?

Could you manually check/view that file to see what is inside?

RE: Infection

eel — Mon, 15 Jan 2024 16:22:59 +0000

Security by CleanTalk

RE: Infection

dimalifragis — Mon, 15 Jan 2024 16:21:43 +0000

What plugin reports that? Wordfence?

Infection

eel — Mon, 15 Jan 2024 15:49:49 +0000

Can you help with this??

Thank you!

wpforo.jpg