AI Search
Classic Search
 Search Phrase:
 Search Type:
Advanced search options
 Search in Forums:
 Search in date period:

 Sort Search Results by:

AI Assistant
Notifications
Clear all

[Closed] Server Virus in wpForo Cache?

6 Posts
3 Users
0 Reactions
1,227 Views
Posts: 144
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@cotner)
Estimable Member
Joined: 4 years ago
[#49762]

I have been getting notifications from my host that my server was found to contain viruses... Each time they reference wpForo cache. I usually just clear the cache and I do not get anymore notifications. But then a week or two later I get another notification. This is how it reads.

 

Your services for gopherpucklive.com are at risk of being suspended.

Your gopherpucklive.com domain name was found to contain viruses or content that violates our Universal Terms of Service.

Due to the serious nature of this issue, you have 72 hours to take action. If any viruses or content that violates our Universal Terms of Service remains on your site after that time, it may become necessary to suspend our services.

If you require assistance with this, please see the following instructions.

To get you started, we have provided an example of the content accessible at the following location:

wp-content/uploads/wpforo/cache/post/e8c61967546d372736294eda140f4f3c

 

Note that it is in the wpForo Cache. And each of the 4 or 5 times I have received this notification, it has been within the wpForo cache.

So I figured that I would start here and see if anyone has had this happen to them before or to just get your thoughts.


5 Replies
dimalifragis
Posts: 2600
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@dimalifragis)
Famed Member
Joined: 6 years ago

and what is in that CACHE file? Did you check? If not, keep one to check it out next time ...


Posts: 144
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@cotner)
Estimable Member
Joined: 4 years ago

The funny thing is that before clearing the cache, the file was not on the server. So I cannot even FIND it.

And now as I look back, I see that they have used the same file each time.

e8c61967546d372736294eda140f4f3c


dimalifragis
Posts: 2600
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@dimalifragis)
Famed Member
Joined: 6 years ago

Do you have any security/firewall plugin installed?


Posts: 144
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
(@cotner)
Estimable Member
Joined: 4 years ago

I did have Wordfence installed... It found nothing. I removed it to see if IT was the issue. Doesn't appear to be. So strange.


1 Reply
Chris
(@chris)
Joined: 5 years ago

Famed Member
Posts: 3610
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian

@cotner,

Please note that wpForo cache is generated based on the post contents. So, you have a post in the forum with viruses. You can open the cache file in a text editor and find the post title or ID, then delete that post from your forum.In other words this is not wpForo issue, wpForo doesn’t have virus scanner to filter your posts.Also, please don’t forget delete wpForo cache in Dashboard > wpForo > Overview admin page


Share: