Scan warning displayed but no file

So far, two other people have reported this issue in support. I’m glad because, after I upgraded today, I had the same issue with my scans, too.

Same with me, I did the update for 3 sites. Hopefully, they will launch a new update soon

Just updated the plugin and this problem came up. Before the update, it didn’t show up any malware.

I have run scans on 4 sites and all are showing a malware warning with no listed files. Safe to say it’s a bug in the new version. Hopefully, there will be a quick update and fix from Wordfence.

+1 please fix

Thanks for reaching out.

There is a UI bug that was in the last release that involves the new scan that checks for paths that are not scanned by default. Even if a user has no issues listed at the end of the scan, the Malware Scan icon can show a yellow triangle at the end of the scan. We have fixed this issue in version 7.4,.4 which is now available. Please update to that version as soon as you are able.

The file paths that were skipped were because the scan option “Scan files outside your WordPress installation” used to not be enabled by default. A regular Wordfence scan looks at the following: wp-admin, wp-content, wp-includes, all subdirectories of those directories – all files in your base WordPress directory. But when you enable this option, it scans all subdirectories of your WordPress installation, even if they aren’t part of WordPress. So if you have a directory that is a phpmyadmin installation or a Drupal installation, we will dive down into those directories looking for malicious code and infections, too. We decided to enable this by default to make sure we were getting the best scan results for you. You can enable it in the Scan Options section of the Scan > Scan Options and Scheduling page.

Tim