Notifications
Clear all

[Closed] Server Virus in wpForo Cache?

6 Posts
3 Users
0 Reactions
294 Views
Posts: 126
Topic starter
(@cotner)
Estimable Member
Joined: 2 years ago

I have been getting notifications from my host that my server was found to contain viruses... Each time they reference wpForo cache. I usually just clear the cache and I do not get anymore notifications. But then a week or two later I get another notification. This is how it reads.

 

Your services for gopherpucklive.com are at risk of being suspended.

Your gopherpucklive.com domain name was found to contain viruses or content that violates our Universal Terms of Service.

Due to the serious nature of this issue, you have 72 hours to take action. If any viruses or content that violates our Universal Terms of Service remains on your site after that time, it may become necessary to suspend our services.

If you require assistance with this, please see the following instructions.

To get you started, we have provided an example of the content accessible at the following location:

wp-content/uploads/wpforo/cache/post/e8c61967546d372736294eda140f4f3c

 

Note that it is in the wpForo Cache. And each of the 4 or 5 times I have received this notification, it has been within the wpForo cache.

So I figured that I would start here and see if anyone has had this happen to them before or to just get your thoughts.

5 Replies
dimalifragis
Posts: 2610
(@dimalifragis)
Famed Member
Joined: 4 years ago

and what is in that CACHE file? Did you check? If not, keep one to check it out next time ...

Posts: 126
Topic starter
(@cotner)
Estimable Member
Joined: 2 years ago

The funny thing is that before clearing the cache, the file was not on the server. So I cannot even FIND it.

And now as I look back, I see that they have used the same file each time.

e8c61967546d372736294eda140f4f3c

dimalifragis
Posts: 2610
(@dimalifragis)
Famed Member
Joined: 4 years ago

Do you have any security/firewall plugin installed?

Posts: 126
Topic starter
(@cotner)
Estimable Member
Joined: 2 years ago

I did have Wordfence installed... It found nothing. I removed it to see if IT was the issue. Doesn't appear to be. So strange.

1 Reply
Chris
(@chris)
Joined: 3 years ago

Famed Member
Posts: 3650

@cotner,

Please note that wpForo cache is generated based on the post contents. So, you have a post in the forum with viruses. You can open the cache file in a text editor and find the post title or ID, then delete that post from your forum.In other words this is not wpForo issue, wpForo doesn’t have virus scanner to filter your posts.Also, please don’t forget delete wpForo cache in Dashboard > wpForo > Overview admin page